Proxy Servers for Skype for Business Online
This article will help you with guidance about using a proxy server with Skype for Business.
Not using a proxy server is recommended
When it comes to Skype for Business traffic over proxies, Microsoft recommends bypassing proxies. Proxies don't make Skype for Business more secure because its traffic is already encrypted.
And having a proxy can cause issues. Performance-related problems can be introduced to the environment through latency and packet loss. Issues such as these will result in a negative experience in such Skype for Business scenarios as audio and video, where real-time streams are essential.
If you need to use a proxy server
Some organizations have no option to bypass a proxy for Skype for Business traffic. If that's the case for you, the problems mentioned above need to be kept in mind.
Microsoft also strongly recommends:
Using external DNS resolution
Using direct UDP based routing
Allowing UDP traffic
Following the other recommendations in our Networking guidelines:
Following this guidance should minimize potential problems.
Proxy vendors with built-in Skype for Business support or configuration options
This section will contain information about proxy vendors who provide products or services that are proven to work successfully with Skype for Business traffic.
For organizations using Bluecoat Proxy solutions, a new firmware has been released which addresses several issues with:
SIP over TLS
support for TURN
Bluecoat's native support for Skype for Business can easily be enabled, allowing for the identification of relevant traffic, and managing it appropriately. This ensures optimal authentication, signaling, and media traffic flow, to provide a great user experience without security concerns.
Please refer to the following link if Bluecoat Proxy is a part of your network topology: https://support.symantec.com/en_US/article.DOC9757.html