Https Bypass Inspetion Application like microsoft store

[Bac26]

Hello

what is best practice to bypass https inspection on application? like microsoft store?

br

[the_rock · Accepted solution]

This is example of what I always do and works 100% of the time.

Andy

 Also, make sure below is checked, though Im pretty sure it is by default (legacy smart console)

 

 

[Bac26]

you apply both or just one of the 2 option?

[Bac26]

sorry i mean why as i have checked "bypass https inspection..." microsoft store is not bypass by this one? and i need to add the rule?

[the_rock]

Hey @Bac26 ,

Apologies, I dont have smart console on my iphone (lol), as Im travelling, so cant get to my lab, but in a nutshell, just do what @Sorin_Gogean suggested. He is EXCELLENT...he helped me before with some queries I had for inspection, you can tell he knows this subject very well. I would say, also, just to be sure, you can also add updatable objects, simply search for anything windows or updates. I would say most of the time, but dont take my word for it, as I cant see it at the moment, usually its enough to only add USA servers, but its pretty self expanatory once you look it up.

Hope it helps.

Andy

[Bac26]

you get same alert when add in the way you suggest?

[PhoneBoy · Accepted solution]

You can bypass any domain by creating a Custom Application/Site with the relevant domains similar to what @the_rock showed.
You can't bypass a specific application using one of our built-in definitions. 

[Bac26]

ok but i wanted bypass "microsoft store" application what would be the best bay?

[Sorin_Gogean · Accepted solution]

Not sure why is that hard to look into documentation:

From Microsoft documents we get the needed URL's, so were you allowing those or?

Proxy configuration

If your organization restricts computers on your network from connecting to the Internet, there is a set of URLs that need to be available for devices to use Microsoft Store. Some of the Microsoft Store features use Store services. Devices using Microsoft Store – either to acquire, install, or update apps – will need access to these URLs. If you use a proxy server to block traffic, your configuration needs to allow these URLs:

• login.live.com
• login.windows.net
• account.live.com
• clientconfig.passport.net
• windowsphone.com
• \*.wns.windows.com
• \*.microsoft.com
• \*.s-microsoft.com
• www.msftncsi.com (prior to Windows 10, version 1607)
• www.msftconnecttest.com/connecttest.txt (replaces www.msftncsi.com starting with Windows 10, version 1607)

Store for Business requires Microsoft Windows HTTP Services (WinHTTP) to install, or update apps.