In this scenario, how would you accomplish this task?

You are troubleshooting an issue with Microsoft where some users complain about an issue accessing OneDrive and SharePoint Online. The configuration has the Netskope client deployed and active for most users, but some Linux machines are routed to Netskope using GRE tunnels. You need to disable inspection for all users to begin troubleshooting the issue.

In this scenario, how would you accomplish this task?
A . Create a Real-time Protection policy to isolate Microsoft 365.
B . Create a Do Not Decrypt SSL policy for the Microsoft 365 App Suite.
C . Create a steering exception for the Microsoft 365 domains.
D . Create a Do Not Decrypt SSL policy for OneDrive.

View Answer

Answer: B

Explanation:

To disable inspection for all users accessing Microsoft 365, you need to create a Do Not Decrypt SSL policy for the Microsoft 365 App Suite. This policy will prevent Netskope from decrypting and analyzing the traffic for any Microsoft 365 app, regardless of the access method (Netskope client or GRE tunnel)3. This policy will also allow SNI-based policies to apply, but no deep analysis performed via Real-time Protection policies4. Therefore, option B is correct and the other options are incorrect.

Reference: Add a Policy for SSL Decryption – Netskope Knowledge Portal, Default Microsoft appsuite SSL do not decrypt rule – Netskope Community