Office 365 URLs and IP address ranges

Question

We have a hybrid Azure/Active Directory environment with Site2Site VPN to Azure. We have issues connecting to some Microsoft services. This could be because of our Firewall policies. We would like to know how other organizations are able to maintain a dynamic list of Microsoft sites described in below two articles:

•Office 365 URLs and IP address ranges Microsoft has maintained a support document listing the URLs, IP address ranges, and ports that are required or optional for Office 365 connectivity.

https://learn.microsoft.com/en-us/office365/enterprise/urls-and-ip-address-ranges

•Office 365 IP Address and URL Web service. To automate getting the latest list of endpoints for Client’s Office 365 cloud.
https://learn.microsoft.com/en-us/office365/enterprise/office-365-ip-web-service

Answer 1

@Parvinder Randev Using the new exceptions JSON file as input you could create a script that transposes the JSON to the correct commands for your firewall. And even automate the deployment of the new firewall rules, after rigorous testing :)

Answer 2

@Parvinder Randev Whenever new URLs or IP ranges are added, firewall has to be updated manually. Based on the Firewall vendor the steps may vary but If the firewall supports importing configuration from JSON file, you can subscribe to Change Log subscription and view it with RSS Feed Reader. When you click on any specific feed, you will get the changes in that update in JSON format that you can use to import new exceptions in your firewall. Here is the sample JSON file available in the latest feed.

-----------------------------------------------------------------------------------------------------------

Please "Accept as answer" wherever the information provided helps you to help others in the community.