O365 Click2Run installer blocked by SSL decryption

[Marius80]

Hello, 

We have excluded all O365 traffic from SSL decryption but having issue with click to run installers, because they connect to xx-xx-xx-xx.deploy.static.akamaitechnologies.com domain. Because of that, click to run installation is not possible on our corporate network (installation is so slow that it's basically unusable). I don't think that adding whole deploy.static.akamaitechnologies.com domain to the SSL decryption exception list is a good idea. Did anyone experience this issue and managed to solve it?

[balaji.bandi]

O365 always suggest to no decryption for those URL

https://techcommunity.microsoft.com/t5/office-365-blog/office-365-proplus-deployment-and-proxy-server-guidance/ba-p/849164

[Marius80]

Hi,

I don't think you have read my post. I am aware of this list and yes, we have excluded domains from that list already. 

[balaji.bandi]

not sure what region, if that IP address white listed - is that not part of this domain in that ? deploy.static.akamaitechnologies.com

MS post huge list of the address to white list, (not make any sense as a security point of view, but that is what their recomendation).

[Marius80]

I cannot see deploy.static.akamaitechnologies.com on that list

[amojarra]

Hi @Marius80 

Did you check the access-logs ? can you please confirm that the traffic is not decrypted?

kindly check this defect as well : CSCwa97988 : Bug Search Tool (cisco.com)

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++   If you find this answer helpful, please rate it as such  ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++