Mobile Plans walled garden
The Mobile Plans Walled Garden is key to supporting customers when they run out of data. It enables them to reach the MO Direct portal even when there is no alternative internet connection such as Wi-Fi. This will enable consumers to purchase additional data plans and manage their subscriptions.
Note
The Mobile Plans architecture does not support IP ranges for Walled Garden endpoints. Host names must be used for allowlisting.
The MO Direct web portal and GetBalance API endpoint must also be part of this Walled Garden.
Walled Garden endpoints
There are only a small number of required endpoints that are always accessible to end users. The following table defines the endpoints required for Walled Garden.
| URL | HTTP/HTTPS |
|---|---|
| ctldl.windowsupdate.com | http |
| cdp1.public-trust.com | http |
| ocsp.omniroot.com | http |
| vassg142.ocsp.omniroot.com | http |
| vassg142.crl.omniroot.com | http |
| mscrl.microsoft.com | http |
| crl.microsoft.com | http |
| www.msftconnecttest.com | http |
| crl3.digicert.com | http |
| Ocsp.digicert.com | http |
| login.live.com | http + https |
| storagetos.datamart.windows.com | http + https |
| mps.datamart.windows.com | http + https |
| staging.datamart.windows.com | http + https |
| *smartscreen.microsoft.com | https |