Office 365 - "URL belongs to a category with warnings enabled"

Forum|Forum|8 years ago
March 1, 2018
5 replies
23604 views

We get a lot of alerts about this issue. dstport=80 dstintf="wan1" proto=6 service="HTTP" hostname="autodiscover.domain.com" profile="default" action=blocked reqtype=direct url="/autodiscover/autodiscover.xml" sentbyte=248 rcvdbyte=0 direction=outgoing msg="URL belongs to a category with warnings enabled" method=domain cat=0 catdesc="Unrated" crscore=30 crlevel=high Any suggestions concerning how to address this?

Fullmoon

New Member

I would suggest under Web Filter Profile set the Unrated Category to Monitor or Allow.

SecurityPlusAuthor

Explorer III

Thanks!

NeilG

New Member

So any Unknown is allowed?

I have 60D's in Proxy mode (not flow) that connect to O365 and azure services.

I found I had to create two Fortiguard webfilter categories:

Microsoft365-CertByPass

Microsoft365

The ones in the certbypass category don't work with deep inspection and thus are both re-categorized for the webfilter & "Exempt from SSL Inspection"

Microsoft is pretty good at documenting required URLs for their services. In the docs.microsoft.com area for the service of internet search for "URL" and if that doesn't find it use ["firewall exceptions" "TCP"] and if that doesn't find anything search for "URI"

Because I don't use "flow based" I can't use CASI. :(

-Neil

Sign up

Login with SSO

Login to the community

Login with SSO