topic Re: MS Teams in Firewall Ruls on Endpoint in Endpoint

MS Teams in Firewall Ruls on Endpoint

CP-Shark — Tue, 15 Nov 2022 12:09:28 GMT

Hi guys,

I need to configure the access to MS Teams in disconnected state on the Endpoint Firewall blade.
On gateways there is the opportunity of using updateable objects. These objects are not available on firewall rule in endpoint side.

I tried to add some updateable objects to a network group, which I can use on endpoint firewall rules but the installation will fail with an internal error.

So are there other options to handle all the domains, IPs etc. for firewall rules?

Looking forward to your ideas.

Cheers,
Olli

Re: MS Teams in Firewall Ruls on Endpoint

the_rock — Tue, 15 Nov 2022 15:36:24 GMT

I will do my best to help you out. Not really an endpoint person, but I have access to few environments, so can definitely look into it. Would you mind send a screenshot of what you tried? You can blur out any sensitive info.

Btw, I do see in the policy there is an option to add url filtering exclusions. What I always do on the firewall is this...say you want to allow ANYTHING microsoft, I just do *microsoft* and works 100% of the time, never had an issue, not once.

Cheers,

Andy

Re: MS Teams in Firewall Ruls on Endpoint

MikeB — Tue, 15 Nov 2022 16:24:19 GMT

You could try the other Harmony Endpoint modules:

Application Control: to allow or disallow the MS Teams program to run or access the network.
URL Filtering: To block access to MS Teams domains.

Re: MS Teams in Firewall Ruls on Endpoint

CP-Shark — Wed, 16 Nov 2022 15:51:32 GMT

Hi Andy,

@the_rock wrote:
I will do my best to help you out. Not really an endpoint person, but I have access to few environments, so can definitely look into it. Would you mind send a screenshot of what you tried? You can blur out any sensitive info.
Btw, I do see in the policy there is an option to add url filtering exclusions. What I always do on the firewall is this...say you want to allow ANYTHING microsoft, I just do *microsoft* and works 100% of the time, never had an issue, not once.
Cheers,
Andy

URL Filter is not an option on Check Point Harmony (Endpoint) and *microsoft* is not supported on end point firewall rules.

Re: MS Teams in Firewall Ruls on Endpoint

CP-Shark — Wed, 16 Nov 2022 15:53:52 GMT

Application control on end point or on perimeter?
If is could be an option the question is what will win? Firewall or application policy?

Re: MS Teams in Firewall Ruls on Endpoint

PhoneBoy — Wed, 16 Nov 2022 20:53:41 GMT

Both of these are options on Harmony Endpoint (what the question was about).

Re: MS Teams in Firewall Ruls on Endpoint

MikeB — Sat, 19 Nov 2022 01:31:30 GMT

For your use case at the endpoint level....in my opinion the best way would be through Appication Control (to allow or disallow the MS TEAMS program/process to run or access the network.)

Re: MS Teams in Firewall Ruls on Endpoint

the_rock — Sat, 19 Nov 2022 01:40:38 GMT

Agree 100%.