I know as of 12.3 we introduced the ability to monitor cloud apps like Office 365, Salesforce, SAP, etc.
Has anyone had experience in identifying Webex as a cloud app. I have the IP ranges that I expect the traffic from of that helps.
Also on a side note, it the customer is pre-12.3, can we manually identify this traffic? I tried manually adding the software service but quickly hit the 5000 server/port combination max.
Solved! Go to Solution.
12.3+ it'd be easy. You add it as an auto discovered definition by URL e.g. *webex.com and you're done.
Prior, you should just define it as the ip ranges and port (it's all SSL I think - so just TCP 443), you won't have the keys so just use the SSL decode (not SSL Decrypted).
Apologies, I didn't provide a detailed enough answer.
You'll have to create a content rule to use first.
On each AMD is a pktmatchconfig.xml file (in the /usr/adlex/config directory). There's no UI for this (yet I hope).
In it are plenty of examples you could use to copy from. e.g. for O365....
So you could try something like:
Save it to your AMD, use RUM Console to re-read the configuration. then you should be able to create a new auto discovery rule using WebEx as a new content rule.
As WebEx typically gives your organization it's own domain name you can be more specific. so you could add another more specific rule:
I was going bananas trying to figure out what version and where you configured a SS without specifying the IP. I've talked and presented it many times but never really gotten around to do one 🙂