(Update 9/28/2023)
With the ever growing list of Microsoft Office 365 services comes a growing number of URLs to whitelist on web application firewalls, proxies, and IE trusted sites lists. The full list, which can be found at:
https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges
The list is quite intensive and for my own sake (and that of my clients) I’ve created the abbreviated list below to save not only the community but myself some time!
*.azure.com
*.windowsazure.com
*.microsoftonline.com
*.microsoftonline-p.net
*.onmicrosoft.com
*.microsoft.com
*.office.com
*.office.net
*.office365.com
*.outlook.com
*.sharepoint.com
*.sharepointonline.com
oneclient.sfx.ms
admin.onedrive.com
ajax.aspnetcdn.com
*.svc.ms
*.live.com
*.lync.com
*.skypeforbusiness.com
*.skype.com
*.sfbassets.com
*.msedge.net
*.windows.net
*.cloudapp.net
*.outlookgroups.ms
*.oaspapps.com
*.yammer.com
*.sway.com
*.sway-cdn.com
*.yammerusercontent.com
*.assets-yammer.com
*.cloudfront.net
ajax.googleapis.com
*.akadns.net
*.akamaihd.net
*.msocdn.com
*.hockeyapp.net
*.uservoice.com
*.localytics.com
*.trafficmanager.net
*.cloudappsecurity.com
*.azurewebsites.net
[…] see if the browser on the server was blocking the federation server or address, which led me to the Office 365 Whitelist URLS for Firewalls and Trusted Sites article by Chris Blackburn kindly linking to the more frequently updated Office 365 URLs and IP […]