Hello,
We have implemented a setup wherein we use 3x S695 WSA's as web proxies for ~20k users. They are configured in failover mode, each proxy serving as a Master for one group and Backup for the two others (3 groups total). We want to enable the bypassing of authentication for certain applications (that are unaware of authentication, or cause issues when required to authenticat) and we found out that the Office 365 Custom URL feed is a neat way to identifiy and bypass most of the Windows/Microsoft applications that are unaware of authentication. However, we are facing a rather weird issue. Whenever we activate the O365 Custom URL Feed, the WSA outbound traffic (traffic from WSA to upstream firewalls, routers and Internet), and upstream link utilization, sky-rockets, even though the inbound traffic (inside to the WSA's) stays the same. Eventually, the pipes we have from ISP's become congested and user experience is affected. As a sympton of this issue, one of the WSA's starts dropping valid traffic and even becomes unresponsive.
I have a couple of questions that I would really like to clarify: has anyone else had this happened to them? Our boxes are quite new, so this should be a performance issue - also, we're using AsyncOS 11.8.0-453. Any ideas how to work-around this? Is there any document which clearly dictates the operation of the O365 Feed (are there any real-time synchronizations involved that would cause such high bandwidth requirements?)
Thank you in advance,
G.
