...
Code Block | ||
---|---|---|
| ||
function FindProxyForURL(url, host) { var ignorelist = new Array( "secure.aadcdn.microsoftonline-p.com", "statics.teams.microsoft.com"); var proxylist = new Array( "^[^.]+.sharepoint.com", "^[^.]+.sharepointonline.com", "teams.microsoft.com", "^[^.]+.teams.microsoft.com", "^[^.]+.ng.msg.teams.microsoft.com", "pipe.skype.com", "^[^.]+.notifications.teams.microsoft.com", "^[^.]+.asyncgw.teams.microsoft.com", "^[^.]+.agatskype.net", "^[^.]+.msgapi.teams.microsoft.com", "substrate.office.com" ); // Check if need to ignore for (var i = 0; i < ignorelist.length; i++) { var value = ignorelist[i]; if (dnsDomainIs(host, value)) { return "DIRECT"; } } // Return our proxy name for matched domains/hosts for (var i = 0; i < proxylist.length; i++) { var value = proxylist[i]; if (shExpMatch(host, value)) { return "PROXY <**** BASTION SERVER IP ****>"; } } return "DIRECT"; } |
Archive hosts - Currently not required
"^[^.]+.userstore.skype.com", - ?
"^[^.]+.manage.microsoft.com", - ?
...
"^[^.]+.trouter.teams.microsoft.com", - (realtime stuff - can be removed)
"^[^.]+.presence.teams.microsoft.com", - (can be removed)
"^[^.]+.data.microsoft.com", - (can be removed)
"^[^.]+.asm.skype.com", - ? (look like also signin - can be removed)
FW Proxy Certificate
The current certificate we are using is Teams7 with these alternate names:
...