Technical Tip: How to restrict one product from the O365 using webfilter

[ManoelMartins]

Description	This article describes how to set up a web filter to restrict access to only one product from the Office 365 Package.
Scope	FortiGate, O365 account.
Solution	Microsoft provides a wide range of online resources and services—such as APIs, content delivery networks (CDNs), and multiple authentication endpoints that enable users to sign in to its platforms and access cloud-based products and services. To ensure that authentication processes and service consumption function correctly and without disruption, the network security infrastructure must allow communication with these specific endpoints. In this context, it is necessary to configure and include multiple Microsoft-related URLs and domains in the Static URL Filter within a Web Filter profile.  The URL list is: 'login.microsoftonline.com' 'login.live.com' '*.msauth.net' '*.cdn.office.net' '*.akamai.net' '*.onecdn.static.microsoft' 'onenote.cloud.microsoft'     <--- OneNote 'onenote.officeapps.live.com'   <--- OneNote '*.microsoft.com' '*.office.com' 'my.microsoftpersonalcontent.com'        'storage.live.com' 'onedrive.live.com' '*.resources.office.net' '*.cloud.microsoft' '*.*'   <----- The last one is required to block all the others URL not listed Disable FortiGuard Category Note: To disable the FortiGuard Category to avoid inconsistency. For this example, access was granted only to the OneNote product. URL List If it is necessary to discovery what is the right URL to another product, follow the procedure from the article on the reference to get specific website by URL For the steps in this article, it is not required to have deep inspection, but only certificate inspection. Related article: Technical Tip: Specific website by URL Filter allowed, but the website was not displayed correctly