How to get GoToMeeting to work with Cloud SWG?

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

GoToMeeting is not working through Cloud SWG (formerly known as WSS).

How do I get GoToMeeting to work with Cloud SWG?

Resolution

Content Filtering policy:

• Set the Category "Online Meetings" to: Allow

TLS/SSL Interception policy:

• Set the Category "Online Meetings" to: Do Not Intercept
• Add the following domains to the TLS/SSL Interception policy as "Do Not Intercept", per the GoToMeeting "Allow Listing and Firewall Configuration": https://support.goto.com/meeting/help/allowlisting-and-firewall-configuration including the following domains: 

cdngetgo.com
cloudfront.net
expertcity.com
filestackapi.com
getgo.com
getgocdn.com
getgoservices.com
getgoservices.net
goto.com
goto-rtc.com
ingest.sentry.io
internap.net
internapcdn.net
launchdarkly.com
logmein.com
logmeininc.com
logmein.eu
raas.io
logme.in
gotomeet.at
gotomeet.me
gotomeeting.com
joingotomeeting.com
openvoice.com
personify.live
nuvixa.com
gofastchat.com
gotowebinar.com
gototraining.com

• Add the following IP ranges to the TLS/SSL Interception policy as "Do Not Intercept",
  per the "Minimal Firewall Settings for Using GoToMeeting":

Note! "All critical media services are tied to these ranges. Ideally, they should go directly through any network perimeter and not through a proxy."

23.239.228.0/22
23.239.232.0/23
23.239.234.0/23
23.239.236.0/23
67.217.64.0/19
68.64.0.0/19
78.108.112.0/20
173.199.0.0/18
202.173.24.0/21
216.115.208.0/20

Additional Information

Bypassing the GoToMeeting domains and IP ranges is recommended and is the best practice.

But if you cannot fully bypass the GoToMeeting domains/IP's, then below are directions on how to exempt the GoToMeeting domains and IP ranges from SSL and content inspection: 

1) Add these two lists to your URL Lists: 

• GoToMeeting_Bypass_Domains.txt
• GoToMeeting_Bypass_IPs.txt

2) Add these two custom URL Lists to the following four (4) Policy sections: 

• Content Filtering policy -> URL Lists: Allow
• TLS/SSL Interception policy -> URL Lists: Do Not Intercept
• Threat Protection  -> Trusted Destinations -> Destinations -> URL List
• Content & Malware Analysis -> Scanning Exemptions -> Destinations -> URL List