topic Re: Azure Public Services Dynamic Object/HTTPS Inspection in General Topics

Azure Public Services Dynamic Object/HTTPS Inspection

pinball — Tue, 22 Aug 2023 12:59:55 GMT

Hello

Is it true the "Azure Public Serivces" object is no longer supported? This is the error we are getting in smart console and says enforing security on this is is not possible. We are currently troubleshooting issues with Azure/M365. What is the best practice for Azure/365 with regards to https inspection? Seems like if we set a bypass rule against this object everything works. If i enable https inspection for this object it breaks M365 services IE. cant login to OWA, outlook etc.. The services (M365) only work if we have a HTTPS bypass enabled for them. Are there any best practices with regards to Azure/Azure AD/M365 that we can follow? Anyone have some experience with this?

Thanks

Re: Azure Public Services Dynamic Object/HTTPS Inspection

PhoneBoy — Wed, 30 Aug 2023 00:48:51 GMT

Try this first: https://support.checkpoint.com/results/sk/sk164772
If you're still seeing the issue, please consult with TAC: https://help.checkpoint.com

Re: Azure Public Services Dynamic Object/HTTPS Inspection

the_rock — Wed, 30 Aug 2023 01:08:29 GMT

I have good R81.20 lab going, so will test this tomorrow morning and update you.

Cheers,

Andy

Re: Azure Public Services Dynamic Object/HTTPS Inspection

the_rock — Wed, 30 Aug 2023 02:23:45 GMT

Since this was bugging me, I fired up my R81.20 lab and was able to create such rule in my appc/urlf layer, as you can see below.

Andy

Its R81.20 + jumbo 26

Re: Azure Public Services Dynamic Object/HTTPS Inspection

pinball — Wed, 30 Aug 2023 13:02:08 GMT

This worked! No longer seeing this error.!

Re: Azure Public Services Dynamic Object/HTTPS Inspection

pinball — Wed, 30 Aug 2023 13:02:57 GMT

thanks - I will give this a try.

Re: Azure Public Services Dynamic Object/HTTPS Inspection

the_rock — Wed, 30 Aug 2023 13:38:21 GMT

Glad @PhoneBoy solution worked, he is after all, CP TRUE EXPERT 🙌🙌

By the way, since I tested this in R81.20, I can tell you, having had this lab since the beginning of R81.20, November 2022, its super stable and Im very impressed with it, so I strongly urge everyone now to upgrade, specially considering it is CP recommended version.

Cheers,

Andy