Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Micro App Discovery

I have a custom application filter in place that I have enabled the Micro App Discovery for.  When this is enabled, I am able to login, but not able to view my files on Onedrive.live.com

How can I bypass the Micro App Discovery for that site?

Thanks!



This thread was automatically locked due to age.
Parents
  • Hi Stevan,

    Micro App Discovery will mandate the users to import appliance CA into their systems. Do they have the appliance CA already imported? OR configure an exception for the onedrive.live.com in web > exception.

    Any help with that?

  • Good Morning!  Thanks for the information.  We had pushed out the Device Certificate to everyone but did not push out the Parent (Default) certificate and once that was installed, I am now able to access the sites that were once broken.

    Can you please define what each certificate is so that I can better understand the difference between the two?

     

    Thanks!

  • Hi Steven,

    Please post your new question in a separate thread. We have an unwritten rule of one question per thread, which makes it simple for others who are searching for solutions.

    Alongside, if my suggestion helped you please click on "this helped me" button. That turns it into a solution which can be referred by other.

    Thanks

  • Looks like I spoke too soon.  I tested this yesterday after installing the default certificate to my PC and it seemed to work.  However, when I went to check on my settings it turns out Micro App Discovery was turned off.

     

    I would like to keep this on and still allow people to be able to access websites such as Onedrive.live.com

     

    Thanks,

     

    Steve Gear

  • Do you have any other recommendations?

    Please and Thanks!

  • Hi Steven,

    Check #1 in the guide here.

    Any catch?

  • When I look at the log viewer for Application Filter, and filter on my username, I am seeing the traffic denied from our external IP address to varying internet IPs for Application "VPN Master"

     

    Onedrive's addresses are apparently getting defined as VPN Master for some reason?  How do I work around this without turning off Micro App Discovery and/or the VPN Master application in my application filter? 

     

    Thanks!

  • Hi Steven,

    If the one drive application is denied incorrectly as VPN Master then it can be a miscategorization but, I haven't  heard it from any other user. Hence, I will test and revert you back.

    Meanwhile, can you post a screenshot of the log viewer page and also the log lines captured by checking #1 in the guide.

    Thanks

  • Hi Steven,

    I tested this in my labs, OneDrive is wrongly classigied as VPN Masters in XG. Removing MicroApp scanning in the application filter policy make things easy, I can login to OneDrive and access the files but applying the scanning will turn things down. I would like you to report this to support as the application signature is miscategorized.

    Thanks 

Reply
  • Hi Steven,

    I tested this in my labs, OneDrive is wrongly classigied as VPN Masters in XG. Removing MicroApp scanning in the application filter policy make things easy, I can login to OneDrive and access the files but applying the scanning will turn things down. I would like you to report this to support as the application signature is miscategorized.

    Thanks 

Children