Firewall Policys for Microsoft Teams (Feature available?)

[Ambsu]

Dear All

In our company we want to use Microsoft Teams with phone-functionality. To be able to do so, we received a whole list with activations we need to make:

https://docs.microsoft.com/en-us/office365/enterprise/urls-and-ip-address-ranges?redirectSourcePath=...

My question: Do we have to create all ip-ranges, services and policys by ourself or is there any premade feature we can activate to get this working since it is an official list of activations from Microsoft?

We are using a Fortigate 90D.

Thanks in advance for any responses!

Kind regards,

Ambit

[jorge_americo]

Have you tried app control?

[Ambsu]

Dear Jorge

Thanks for you answer!

In my understanding, I can use application control to log or block specified app-traffic. But I can't find an option to say that all required activations should be done or traffic should be accepted from this sources. (even there are policys which would normaly block it)

Did I miss something?

Thanks and kind regards,

Ambit

[jorge_americo]

What NGFW mode is your firewall in? I found this video [link]https://www.youtube.com/watch?v=yso_DNsfUgc[/link] it exemplifies in policy based. but the idea is the same. You can check this help too. https://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-security-profiles-54/Application_Con...

Sorry for delay.

[ballaflex]

HI

I have problem to access on Microsoft Teams in my organisation with Fortgate install  but finally I found the solution 

Go on Security Profiles >Application control 

1-Allow Microsoft Teams (All features)

Go on Security Profiles >Web Filter >FortiGuard Category base filter >Bandwidth Consuming

1-Allow/Monitor Internet telephony

2-Allow/Monitor File sharing and software download (if necessary) "this can help you access to all Drive sharing if it's allow on Application control"

Done !!!!

[gsser]

ballaflex wrote:

HI

I have problem to access on Microsoft Teams in my organisation with Fortgate install  but finally I found the solution 

Go on Security Profiles >Application control 

1-Allow Microsoft Teams (All features)

Go on Security Profiles >Web Filter >FortiGuard Category base filter >Bandwidth Consuming

1-Allow/Monitor Internet telephony

2-Allow/Monitor File sharing and software download (if necessary) "this can help you access to all Drive sharing if it's allow on Application control"

Done !!!!

It's not workd in my case :(

When i try to login in teams through fortigate - it disable something and i go to  - https/login.microsoftonline.com/cookiesdisabled