UTM9 vs SharePoint online (o365)

Hi,

Thanks for choosing Sophos.

If Web Protection is deployed in Transparent mode, you can add each sharepoint links in destination host skip list (Web Protection> Filter option > Misc > Skip list destination). Also, check #1 in the Rulz, let us know if you discover anything that forces this issue.

Thanks

Hello,

Thanks for the quick response. The UTM9 was installed in Standard mode. Would it be any impact if I change the Operation mode from Standard to Transparent?

Update: Transparent mode cannot be used in our environment due the limitations of the Transparent mode. The solution must be take place on Standard mode.

Hi,

I think we got the issue, here the server is not replying to the proxy. Using UTM in standard mode will explicitly define UTM as an intermediate proxy and you will need to configure UTM IP as proxy in browser. It could be possible that TLS communication between server and UTM fails due to standard mode. You test transparent mode configurations and the only change will be to remove the proxy settings from the web browser.

Thanks

Hello,

Yes, in my environment we use pac file and the UTM is configured on the browsers via GPO. I think (but it's only thinking out loud) something block the office app to be able to open the file. It can be downloaded. It can be open in office online. But it cannot be opened via the office desktop app. The communication works between the client and sharepoint online without any issue except this one. But (and please correct me if i'm wrong) with transpaernt mode I won't have SSO (which mandatory)

Hi, Tamas, and welcome to the UTM Community!

The fundamental difference in skipping sites between Standard and Transparent is that skipping is done in the UTM for Transparent and in the client browser for Standard.  As you have PAC and GPO capability, you can easily do either.

It's now possible to do SSO in Transparent, but I prefer the greater control offered by Standard.  You might be interested in a document I maintain that I make available to members of the UTM Community, "Configure HTTP Proxy for a Network of Guests."  If you would like me to send you this document, PM me your email address. I also maintain a version auf Deutsch translated by fellow member hallowach when he and I did a major revision in 2013.

In order to help you more with this, we will need to see a few lines from the Web Filtering log and/or the logs mentioned in #1 in Rulz as Sachin suggested.

Cheers - Bob