Exempt Microsoft application categories from full SSL inspection on SONIC firewall

zrahim

Hi Community,

Our client is using SONIC firewall and also using Microsoft Defender for Endpoint. There is a feature in Microsoft Defender for Endpoint "Automated investigation and response (AIR)" that run investigation on device that failed because of the error "Failed to upload SenseIR command outputs. The device network settings prevented upload/download of files". I search for a solution and found that issue can be fixed by exempting Microsoft application categories from full SSL inspection on firewall. So how to do it?

TKWITS

See my last post here: https://community.sonicwall.com/technology-and-support/discussion/4071/gateway-av-causing-false-positive-on-ms-teams-install#latest

Also these articles:

https://www.sonicwall.com/support/technical-documentation/docs/sonicos-7-0-0-0-dpi_ssl/Content/dpi-ssl-client-exclusions-inclusions.htm/

https://www.sonicwall.com/support/knowledge-base/how-to-configure-dpi-ssl-cfs-category-based-exclusions-inclusions-sonicos-6-2-5-x/170504264510630/