Exempting Outlook from SSL inspection.
Description
When enabled SSL deep inspection in a policy is expected that some sites or applications don't work correctly.
Solution
Here is a set of exemptions that should be created in the FGT.
*azurerms.com
*cloudappsecurity.com
*gfx.ms
*hockeyapp.net
*msft.net
*onestore.ms
*onmicrosoft.com
*microsoftonline-p.com
When enabled SSL deep inspection in a policy is expected that some sites or applications don't work correctly.
To avoid problems with Outlook is recommended configure a set of exemption in the SSL deep inspection profile.
Solution
Here is a set of exemptions that should be created in the FGT.
*.office.com
*.office.net
*.office365.com
*.live.com
*.microsoft.com
*.windows.net
*.outlookgroups.ms
*.microsoftonline-p.net
*.microsoftonline.com
*.windowsazure.com
*.cloudapp.net
*.oaspapps.com
*.office.net
*.office365.com
*.live.com
*.microsoft.com
*.windows.net
*.outlookgroups.ms
*.microsoftonline-p.net
*.microsoftonline.com
*.windowsazure.com
*.cloudapp.net
*.oaspapps.com
*aadrm.com
*azure.com *azurerms.com
*cloudappsecurity.com
*gfx.ms
*hockeyapp.net
*msft.net
*onestore.ms
*onmicrosoft.com
*microsoftonline-p.com
After create this set of exemptions Outlook should be work without problem.