Technical Tip: FortiSASE SWG SSO users unable to poll Power BI through Microsoft 365 applications

To resolve the issue of Microsoft 365 applications (Microsoft Word, Excel, etc.) failing to poll the Power BI backend for information through FortiSASE Secure Web Gateway, follow these steps:

1. Identify the Power BI FQDNs that need to be exempted from the Secure Web Gateway proxy. These can be found Microsoft Power BI resource
2. Refer to this link to configure the PAC file for exempting Microsoft 365 applications, including Microsoft Teams, from SWG: Technical Tip: FortiSASE SWG SSO users unable to connect/access Microsoft 365 applications Microsoft Teams, Outlook
3. Create a custom PAC file that excludes the identified Power BI FQDNs from the Secure Web Gateway proxy. Refer to the below for example.

Custom PAC File:

function FindProxyForURL(url, host)

{

var direct = "DIRECT";

var proxyServer = "PROXY <FortiSASE-SWG-Turbo-FQDN:SWG-Port>";

if  (shExpMatch(host, "*.analysis.windows.net")

    || shExpMatch(host, "*.pbidedicated.windows.net")

    || shExpMatch(host, "*.powerquery.microsoft.com")

    || shExpMatch(host, "api.powerbi.com")

    || shExpMatch(host, "appsource.microsoft.com")

    || shExpMatch(host, "content.powerapps.com")

    || shExpMatch(host, "dc.services.visualstudio.com")

    || shExpMatch(host, "*.s-microsoft.com")

    || shExpMatch(host, "*.osi.office.net")

    || shExpMatch(host, "*.msecnd.net")

    || shExpMatch(host, "store.office.com")

    || shExpMatch(host, "store-images.s-microsoft.com")

{

    return direct;

}

return proxyServer;

}