Allow to access URL/IP in FirePower

[Roy Lee]

Hi,

We need to bypass Teams / Zoom traffic from internal proxy and let these traffic via FirePower.

I got a long list of URL and IPs for the traffics.

But I don't know how to allow these traffics to go through FirePower while we didn't setup NAT for internal users? 

Any rules / features in FirePower to handle this?

Any hints?

[Milos_Jovanovic]

Hi @Roy Lee,

What is it exactly you are trying to achieve? To permit direct Internet access to Teams/Zoom from you user network?

If this is the case, then you'll need to allow direct access, meaning you'll need (most frequently) PAT for them, next to FW openings. At least for Teams and for good user experience, I remember there were only handful of IP scopes and several ports required (for good audio/video calls, and screen sharing). Everything else can still pass via proxy.

Kind regards,

Milos