webprotection settings for O365 + skype for business

https://adam-hand.com/office-365-portal-firewall-ports/

https://adam-hand.com/2012/06/14/firewall-ports-for-office-365/

https://adam-hand.com/2013/11/07/lync-online-for-office-365-firewall-requirements/

This is not really helpful tho is it?

This assumes that you can open the following ports to the world. 

There is no way to open these ports to *.domain name.

So.. We are left having to enter 300 IP addresses into the firewall to allow traffic for Skype for business to work. And since there is now way to import ip addresses they have to be entered manually.. 

So fed up with these firewalls.

Mike, these are outbound only, so a general firewall rule like 'Internal (Network) -> {ports} -> Internet : Allow' should be all that's necessary.  Since the UTM firewall is stateful, it will keep track of the connections it makes and automatically allow responses, so no inbound rules are needed.

Cheers - Bob

Right.. But in a company with 4500 employees and 7000+ devices we aren't going to allow Common ports for skype/ms to be allowed outbound to any public ip address. We need to restrict them to MS/Office365/Skype/ Public ip addresses

I agree 100%, Mike.  Do you already have a solution in mind?  How many locations are involved?

Cheers - Bob

I agree 100%, Mike.  Do you already have a solution in mind?  How many locations are involved?

Cheers - Bob

Sadly, the only solution that i could find (support, forums, sales engineers) was to add all 300 ip/ranges to the firewall. Luckily the SUM server can reach most of the firewalls in place, but its really fustrating that sophos is lacking so many config options that other firewall vendors have and have had in place for long while.

There are 7 Sophos firewalls and a bunch of Sonic walls. But those numbers will drop as they are replaced.