Office365 Third Party Domains

[JP_Rex]

Hello,

we get a validation error with the updatable object "office365 Third Party Domains".

I cant find it at Microsoft (Microsoft 365 endpoints - Microsoft 365 Enterprise | Microsoft Learn).

Does anyone know when it was removed? 

Is there a SK with instructions how to remove it from the policy?

Regards

Peter

[Christoph]

Hey,

I just stumbled over this on a customer firewall. The usual cloudguard off|on didn't fix the issue. Checked here, found your post...

[the_rock]

Let me test it in R81.20 lab. I will also check out R82 as well and report back.

Andy

[the_rock]

Just checked my labs, same in R82, definitely not there. Can you not just delete it from policy and save or it complains even if you do that?

Andy

[JP_Rex]

Of Course I can and so does the customer. This is a highly used object it would be nice to have an "official" statement (@PhoneBoy) for the documentation and the compliance report.

regards

Peter

[the_rock]

Fair enough.

[Christoph]

Can confirm, looks like it's really gone. I was a bit confused, as the object isn't used in the policy. The validation pane (I know preview) showed two errors. Last week there were none.

So this brings it back to @JP_Rex question. How to proceed. For me it's just "delete this object by myself"? For people using this object, the use the 365services object, which will for an allow but not deny rule.

[the_rock]

There might be new updatable object coming soon, who knows : - )

[JP_Rex]

That depends on MicroSoft not on Check Point. It was MS who created a new structure. This Structure is just reflected in the Object

[the_rock]

Thats 100% true, for sure.

[Lesley]

I see more users have this complain but maybe we can try this?

1. Removed all instances of the problem updatable objects in the policy.
2. Removed the problem updatable objects  in the object tree 
3. Publishe
4. Exit SmartConsole
5. reboot fwmgt
6. In the GUI, re-added the updatable objects back to the policy.

I think I also have seen a case that it 'fix' itself in some time. 

PS how to troubleshoot the download part (if needed) https://support.checkpoint.com/results/sk/sk122636

Office 365 third part shows still supported here: https://support.checkpoint.com/results/sk/sk131852

[JP_Rex]

@Lesley  SK131852 is out of date regarding the description off Office 365.
the Top can be found here (Microsoft 365 IP Address and URL web service - Microsoft 365 Enterprise | Microsoft Learn)

"For the latest version of the Microsoft 365 URLs and IP address ranges,

use https://endpoints.office.com/version."

#####
[
{
"instance": "USGovGCCHigh",
"serviceArea": "O365Default",
"latest": "2024073100"
},
{
"instance": "China",
"serviceArea": "O365Default",
"latest": "2024032900"
},
{
"instance": "Worldwide",
"serviceArea": "O365Default",
"latest": "2024073100"
},
{
"instance": "USGovDoD",
"serviceArea": "O365Default",
"latest": "2024073100"
},
{
"instance": "Germany",
"serviceArea": "O365Default",
"latest": "2022012800"
}

#########

No third party.

The Implementation of the Microsoft updatable objects works. The tree of information provided by MS is downloaded and displayed correctly.

What is out of date is the Check Point documentation of what Microsoft is providing.

Maybe it is time to update your documentation.

Best Regards

Peter

[Lesley]

I do not have to update anything 😀

Maybe you forgot this is a community, topics like this I cannot help you with as most here. If you want Check Point to update something you need to send feedback on the SK page itself. This is stated in https://support.checkpoint.com/results/sk/sk60001

Under:

 How to send us your feedback 

[LST]

The office365.C file changed on Sunday.
The section "Office365 Third Party Domains" was removed.
However, this does not match the changes that Microsoft made.

The last change Microsoft did was on 2024073100
You can check the versions here: https://endpoints.office.com/changes/worldwide/0000000000?ClientRequestId=308aa5da-05b4-496c-8ce9-e5...

However, the changes are
########################################################################
:CP_MS_Office365_3rd_parties (
:parent (CP_MS_Office365_All)
:uuid ("4ba61bdf-5105-3a0f-b33a-23ef96354163")
:display_name ("Office365 Third Party Domains")
:icon ("@app/cp_ms_office365")
:children (
: (CP_MS_Exchange_3rd_parties)
: (CP_MS_Skype_3rd_parties)
: (CP_MS_SharePoint_3rd_parties)
: (CP_MS_Common_3rd_parties)
: (CP_MS_Common_3rd_parties_China)

#CP_MS_Exchange_3rd_parties
smtp.office365.com

#CP_MS_Skype_3rd_parties
adl.windows.com

#CP_MS_SharePoint_3rd_parties#

#CP_MS_Common_3rd_parties
ecn.t51.tiles.virtualearth.net
ecn.dev.virtualearth.net
t5.ssl.ak.dynamic.tiles.virtualearth.net
ak.t4.tiles.virtualearth.net
*.virtualearth.net
t0.tiles.virtualearth.net

#CP_MS_Common_3rd_parties_China
*.protection.partner.outlook.cn
*.aadrm.cn
########################################################################

If you look at the changes and when the URLs were changed, it was sometimes years ago.
The virtualearth domain, for example, was added to the Service Area Common in 2020.
It seems that the "Office365 Third Party Domains" has been redundant for some time.

[the_rock]

I will test this later and see what it shows.

Andy

https://support.checkpoint.com/results/sk/sk161632

[GDuro]

Hello everyone.

Do you have any ideia if we have a new match for this Updatable Object or if it has transitioned to Office365 Worlwide Services?

Since yesterday, I also got the Warnings on the Validation Pane but what we found was that we are having logs starting to match the Office365 Worlwide Services Object that were previously matching the Office365 Third Party Domain.

Thank you so much,

GD

[LST]

You can check at MS API where the url is contained and also search at Checkpoint to see what the equivalent is.
Check the last Revision folder: $CPDIR/database/downloads/ONLINE_SERVICES/1.0/NNNNNNNNNNNN/office365.C

#CP_MS_Exchange_3rd_parties
smtp.office365.com ("id": 2, serviceArea": "Exchange")

#CP_MS_Skype_3rd_parties
adl.windows.com ("id": 19, serviceArea": "Skype")

#CP_MS_Common_3rd_parties
*.virtualearth.net ("serviceArea": "Common")

Or check via 
domains_tool -uo "Office365 Worldwide Services"

as the_rock said.

[the_rock]

Do you get anything with below?

Andy

[Expert@CP-GW:0]# domains_tool -uo "Office365 Worldwide Services"
The updatable object Office365 Worldwide Services not found
[Expert@CP-GW:0]#

[GDuro]

Hello.

This is what I get:

"[Expert@hqsvrfw01:0]# domains_tool -uo "Office365 Third Party Domains"
Internal error, for more information use DEBUG mode"

For Office365 Worlwide Services I get ALL the URLs listed.

Thank you,

GD

[the_rock]

Yep, same here...

Andy

[Expert@CP-GW:0]# domains_tool -uo "Office365 Worldwide Services"

Domain tool looking for domains for 'Office365 Worldwide Services' and its children objects:

Domains name list for 'SharePoint Online and OneDrive for Business Worldwide Optional Services':

[1] *.search.production.emea.trafficmanager.net
[2] ssw.live.com
[3] *.search.production.apac.trafficmanager.net
[4] storage.live.com
[5] *.search.production.us.trafficmanager.net

Domains name list for 'SharePoint Online and OneDrive for Business Worldwide Required Services':

[1] bn4sch101121409.wns.windows.com
[2] southcentralus1-pushp.svc.ms
[3] eastasia1-pushp.svc.ms
[4] atos365-my.sharepoint.com
[5] bn3sch020022329.wns.windows.com
[6] officeclient.microsoft.com
[7] bn3sch020020844.wns.windows.com
[8] db6sch102090619.wns.windows.com
[9] admin.onedrive.com
[10] sentechjhb-my.sharepoint.com
[11] northcentralus1-pushp.svc.ms
[12] 12-northeurope1-pushp.svc.ms
[13] 11-northeurope1-pushp.svc.ms
[14] bn4sch101121308.wns.windows.com
[15] g.live.com
[16] 15-northeurope1-pushp.svc.ms
[17] signout.sharepoint.com
[18] bn4sch101122509.wns.windows.com
[19] mediap.svc.ms
[20] mmcg-my.sharepoint.com
[21] southeastasia1-mediap.svc.ms
[22] northeurope1-pushp.svc.ms
[23] soliver-my.sharepoint.com
[24] bn4sch101122014.wns.windows.com
[25] germanycentral1-pushp.svc.ms
[26] 10-northeurope1-pushp.svc.ms
[27] harveynichols-my.sharepoint.com
[28] 4-centralus1-pushp.svc.ms
[29] arcelormittal.sharepoint.com
[30] *.sharepoint.com
[31] *.wns.windows.com
[32] 0-ukwest1-pushp.svc.ms
[33] 14-northeurope1-pushp.svc.ms
[34] jsainsbury.sharepoint.com
[35] *.svc.ms
[36] bn4sch101121208.wns.windows.com
[37] oneclient.sfx.ms
[38] macquarietelecom-my.sharepoint.com
[39] unicornsystemsua-my.sharepoint.com
[40] 5-centralus1-pushp.svc.ms
[41] db5sch103100121.wns.windows.com
[42] spoprod-a.akamaihd.net
[43] 13-northeurope1-pushp.svc.ms
[44] northcentralus1-pushb.svc.ms
[45] arcelik-my.sharepoint.com
[46] mclaren.sharepoint.com
[47] bn4sch101122419.wns.windows.com
[48] questorinsurance.sharepoint.com
[49] think365orgil-my.sharepoint.com
[50] hussote.sharepoint.com
[51] eastrenfrewshire.sharepoint.com
[52] bn3sch020020842.wns.windows.com
[53] kone.sharepoint.com
[54] roff550.sharepoint.com
[55] ucpoint.sharepoint.com
[56] eduserv.sharepoint.com
[57] 2-centralus1-pushp.svc.ms
[58] westeurope1-mediap.svc.ms
[59] eastus21-mediap.svc.ms

Domains name list for 'Microsoft 365 Common and Office Online Worldwide Optional Services':

[1] prod-nam-autodetect.acompli.net
[2] c.live.com
[3] officepreviewredir.microsoft.com
[4] fr-ca.appex-rf.msn.com
[5] flow.microsoft.com
[6] pt-pt.appex-rf.msn.com
[7] autodiscover.sodexo.mail.onmicrosoft.com
[8] autodiscover.one365.mail.onmicrosoft.com
[9] mam.manage.microsoft.com
[10] crl.microsoft.com
[11] querylydrive.blob.core.windows.net
[12] autodiscover.kosmocar.onmicrosoft.com
[13] msv-c038.video.microsoft.com
[14] autodiscover.starwoodhotels1com.mail.onmicrosoft.com
[15] pad0.assets-yammer.com
[16] 1-255619-1574004168-708.rt.yammer.com
[17] officehome.msocdn.com
[18] reachstorage.blob.core.windows.net
[19] office.microsoft.com
[20] sbt.blob.core.windows.net
[21] mr-in.appex-rf.msn.com
[22] stainlesssteels.onmicrosoft.com
[23] docs.microsoft.com
[24] en-nl.appex-rf.msn.com
[25] support.microsoft.com
[26] pf.pipe.aria.microsoft.com
[27] admin.microsoft.com
[28] autodiscover.rodekruis.mail.onmicrosoft.com
[29] mshrcstorageprod.blob.core.windows.net
[30] 7.tlu.dl.delivery.mp.microsoft.com
[31] ocos-office365-s2s.msedge.net
[32] wus-www.sway-cdn.com
[33] 1-217446-1541620433-630.rt.yammer.com
[34] autodiscover.uapgroup.onmicrosoft.com
[35] parkcloud.blob.core.windows.net
[36] autodiscover.krepbank.onmicrosoft.com
[37] 1-744473-1592931180-599.rt.yammer.com
[38] delivery.mp.microsoft.com
[39] mug0.assets-yammer.com
[40] *.acompli.net
[41] compliance.microsoft.com
[42] prod5-files.acompli.net
[43] *.appex.bing.com
[44] id-id.appex-rf.msn.com
[45] autodiscover.rainternationalservices.onmicrosoft.com
[46] forms.microsoft.com
[47] c.bing.net
[48] *.yammerusercontent.com
[49] wer.microsoft.com
[50] autodiscover.fayatsas.onmicrosoft.com
[51] *.blob.core.windows.net
[52] *.msocdn.com
[53] static2.sharepointonline.com
[54] appsource.microsoft.com
[55] sbr.officehome.msocdn.com
[56] signup.microsoft.com
[57] www.sway.com
[58] officespeech.platform.bing.com
[59] prod-global-autodetect.acompli.net
[60] appexeaprodweather.blob.core.windows.net
[61] activation.sls.microsoft.com
[62] watson.telemetry.microsoft.com
[63] login.live.com
[64] de-ch.appex-rf.msn.com
[65] www.bing.com
[66] www.acompli.com
[67] *.microsoftusercontent.com
[68] bl2pv2.ng.msg.teams.microsoft.com
[69] 1-255619-1569824548-448.rt.yammer.com
[70] static.sharepointonline.com
[71] signup.live.com
[72] office15client.microsoft.com
[73] wepod01prot1dt4wq1d11.blob.core.windows.net
[74] c.bing.com
[75] tb.pipe.aria.microsoft.com
[76] ecn.t51.tiles.virtualearth.net
[77] files.yammer.com
[78] appexnewsappupdate.blob.core.windows.net
[79] mlccdn.blob.core.windows.net
[80] login.windows-ppe.net
[81] dstest.blob.core.windows.net
[82] 1-744473-1592991327-304.rt.yammer.com
[83] mem.gfx.ms
[84] r.office.microsoft.com
[85] *.onmicrosoft.com
[86] 1-255619-1569808606-388.rt.yammer.com
[87] ak.t4.tiles.virtualearth.net
[88] autodiscover.knowledgeparkag.mail.onmicrosoft.com
[89] lbestgrsnergadds00101.blob.core.windows.net
[90] advertise.bingads.microsoft.com
[91] appsforoffice.microsoft.com
[92] labimages.blob.core.windows.net
[93] 1-225197-1628694781-108.rt.yammer.com
[94] 1-255619-1569808606-248.rt.yammer.com
[95] autodiscover.cwsbocogroup.mail.onmicrosoft.com
[96] *.sharepointonline.com
[97] playingsurface1.blob.core.windows.net
[98] en-dk.appex-rf.msn.com
[99] 1-744473-1592931179-482.rt.yammer.com
[100] pf.events.data.microsoft.com
[101] d.docs.live.net
[102] compass-ssl.microsoft.com
[103] de-de.appex-rf.msn.com
[104] ka-ge.appex-rf.msn.com
[105] t0.tiles.virtualearth.net
[106] *.outlookmobile.com
[107] fr-fr.appex-rf.msn.com
[108] autodiscover.chiquita.onmicrosoft.com
[109] 1-255619-1569783634-555.rt.yammer.com
[110] vortex.data.microsoft.com
[111] ajax.microsoft.com
[112] 1-232283-1579485688-208.rt.yammer.com
[113] officeredir.microsoft.com
[114] 1-255619-1620267567-185.rt.yammer.com
[115] prod.msocdn.com
[116] sv-se.appex-rf.msn.com
[117] weather.tile.appex.bing.com
[118] storecatalogrevocation.storequality.microsoft.com
[119] security.microsoft.com
[120] sqm.microsoft.com
[121] sas.office.microsoft.com
[122] staffhub.ms
[123] he-il.appex-rf.msn.com
[124] mscrl.microsoft.com
[125] f6publishing.blob.core.windows.net
[126] teams.microsoft.com
[127] dgps.support.microsoft.com
[128] tb.events.data.microsoft.com
[129] *.virtualearth.net
[130] lbestlrsuksrgbzp10101.blob.core.windows.net
[131] autodiscover.inbalbituch.onmicrosoft.com
[132] privatecdn.sharepointonline.com
[133] ja-jp.appex-rf.msn.com
[134] cin.officehome.msocdn.com
[135] proffsmaster.blob.core.windows.net
[136] skodavisualizer.blob.core.windows.net
[137] ecn.dev.virtualearth.net
[138] docs.live.net
[139] nl-nl.appex-rf.msn.com
[140] phone.finance.services.appex.bing.com
[141] gigmanagerfiles.blob.core.windows.net
[142] tr-tr.appex-rf.msn.com
[143] *.microsoft.com
[144] telemetryservice.firstpartyapps.oaspapps.com
[145] autodiscover.dbaprogettispa.onmicrosoft.com
[146] shellprod.msocdn.com
[147] sway.com
[148] careers.microsoft.com
[149] weatherscus01.blob.appex.bing.com
[150] tse1.mm.bing.net
[151] dc.applicationinsights.microsoft.com
[152] 1-104414-1491877582-870.rt.yammer.com
[153] blob.officehome.msocdn.com
[154] account.live.com
[155] entmagpahanggangwakas.blob.core.windows.net
[156] autodiscover.abilitynetworkinc.onmicrosoft.com
[157] staffhubweb.azureedge.net
[158] 1-552329-1621576556-492.rt.yammer.com
[159] autodiscover.bat.mail.onmicrosoft.com
[160] wus-www.sway-extensions.com
[161] wus-firstpartyapps.oaspapps.com
[162] partnerservices.getmicrosoftkey.com
[163] neuofficehome.msocdn.com
[164] 1-150934-1494945360-233.rt.yammer.com
[165] fi-fi.appex-rf.msn.com
[166] *.appex-rf.msn.com
[167] officeclient.microsoft.com
[168] lyncdiscover.grupomrw.onmicrosoft.com
[169] en-us.appex-rf.msn.com
[170] *.yammer.com
[171] eus-www.sway-extensions.com
[172] t5.ssl.ak.dynamic.tiles.virtualearth.net
[173] statics.teams.microsoft.com
[174] prod.firstpartyapps.oaspapps.com.akadns.net
[175] autodiscover.vdndp.onmicrosoft.com
[176] firstpartyapps.oaspapps.com
[177] go.microsoft.com
[178] s0.assets-yammer.com
[179] lbestlrsnergaidp00101.blob.core.windows.net
[180] powerlift-frontdesk.acompli.net
[181] prod14-api.acompli.net
[182] msdn.microsoft.com
[183] settings-win.data.microsoft.com
[184] www.outlook.com
[185] *.assets-yammer.com
[186] dc.services.visualstudio.com
[187] technet.microsoft.com
[188] azure.microsoft.com
[189] c1.microsoft.com
[190] 1-104414-1621809617-648.rt.yammer.com
[191] defender.microsoft.com
[192] forefrontdl.microsoft.com
[193] 1-255619-1568579401-460.rt.yammer.com
[194] powerbi.microsoft.com
[195] officecdn.microsoft.com
[196] publiccdn.sharepointonline.com
[197] iperceptions.blob.core.windows.net
[198] fr-be.appex-rf.msn.com
[199] auth.gfx.ms
[200] blobs.officehome.msocdn.com
[201] ar-eg.appex-rf.msn.com
[202] support2.microsoft.com
[203] www.microsoft.com
[204] 1-974764-1525210021-958.rt.yammer.com
[205] api.health.appex.bing.com
[206] graph.microsoft.com
[207] cdn.sharepointonline.com
[208] teamsdevicemgmtsvcprod.blob.core.windows.net
[209] watson.microsoft.com
[210] autodiscover.coopservice.onmicrosoft.com
[211] 1-255619-1569815824-900.rt.yammer.com
[212] finance.services.appex.bing.com
[213] testconnectivity.microsoft.com
[214] xh-za.appex-rf.msn.com
[215] o15.officeredir.microsoft.com
[216] travel.images.appex.bing.com
[217] eus-www.sway-cdn.com
[218] login.microsoft.com

Domains name list for 'Microsoft 365 Common and Office Online Worldwide Required Services':

[1] cert.int-x3.letsencrypt.org
[2] officepreviewredir.microsoft.com
[3] aia.entrust.net
[4] *.azure-apim.net
[5] s1.symcb.com
[6] az741266.vo.msecnd.net
[7] az314835.vo.msecnd.net
[8] cryptoreport.geotrust.com
[9] ips.verisign.com
[10] vpscs141.crl.omniroot.com
[11] *.msecnd.net
[12] autodiscover.crsorg.microsoftonline.com
[13] outlook.office.com
[14] *.office.net
[15] sts-a-weu.eu.aadrm.com
[16] vpscs142.crl.omniroot.com
[17] tj2.symcb.com
[18] ols.officeapps.live.com
[19] browser.pipe.aria.microsoft.com
[20] crl.microsoft.com
[21] az835686.vo.msecnd.net
[22] graph.windows.net
[23] cdn.odc.officeapps.live.com
[24] mrodevicemgr.officeapps.live.com
[25] assets.onestore.ms
[26] managed.entrust.net
[27] videocontent.osi.office.net
[28] sd.symcb.com
[29] docs.microsoft.com
[30] bn1pfpad05.phonefactor.net
[31] *.hip.live.com
[32] admin.microsoft.com
[33] ind.delve.office.com
[34] crl.globalsign.com
[35] image.email.microsoftonline.com
[36] *.office.com
[37] security-center.geotrust.com
[38] *.online.office.com
[39] *.msauthimages.net
[40] compliance.microsoft.com
[41] sx.symcd.com
[42] aadcdn.msftauth.net
[43] clienttemplates.content.office.net
[44] autodiscover.st1ad.emea.microsoftonline.com
[45] vassg142.ocsp.omniroot.com
[46] adminwebservice-s1-db3a.microsoftonline.com
[47] sa.symcb.com
[48] ogma.osi.office.net
[49] amp.azure.net
[50] activation.sls.microsoft.com
[51] sr.symcb.com
[52] crl4.digicert.com
[53] insertmedia.bing.office.net
[54] az737828.vo.msecnd.net
[55] ad37f20f-f882-4433-aaf1-5b543c6df13b.rms.eu.aadrm.com
[56] weu-000.tasks.osi.office.net
[57] outlook.cloud.microsoft
[58] office15client.microsoft.com
[59] *.symcb.com
[60] tb.pipe.aria.microsoft.com
[61] support.office.com
[62] s3-powerpoint-15.cdn.office.net
[63] *.msidentity.com
[64] policykeyservice.dc.ad.msft.net
[65] ocsp.globalsign.com
[66] activity.windows.com
[67] crl3.digicert.com
[68] autodiscover.orey.emea.microsoftonline.com
[69] wus-000.tasks.osi.office.net
[70] odc.officeapps.live.com
[71] statics.teams.cdn.office.net
[72] az826701.vo.msecnd.net
[73] omextemplates.content.office.net
[74] ajax.aspnetcdn.com
[75] *.omniroot.com
[76] login.microsoftonline.com
[77] ctrootsha2.ocsp.omniroot.com
[78] suite.office.net
[79] autodiscover.imperva.microsoftonline.com
[80] click.email.microsoftonline.com
[81] nexus.microsoftonline-p.com
[82] pf.events.data.microsoft.com
[83] platform.linkedin.com
[84] login-us.microsoftonline.com
[85] delve.office.com
[86] portal.azurerms.com
[87] sr.symcd.com
[88] api.login.microsoftonline.com
[89] officeredir.microsoft.com
[90] www.office.com
[91] css.phonefactor.net
[92] lyncdiscover.verisign.com
[93] mscrl.microsoft.com
[94] crl.verisign.com
[95] ocsp.msocsp.com
[96] tb.events.data.microsoft.com
[97] www.digicert.com
[98] gn1.symcb.com
[99] vpssg142.crl.omniroot.com
[100] api.aadrm.com
[101] secwatch365.eu.portal.cloudappsecurity.com
[102] sw1.symcb.com
[103] device.login.microsoftonline.com
[104] r3.res.office365.com
[105] otelrules.azureedge.net
[106] *.msftauthimages.net
[107] hp-ocsp.verisign.com
[108] az565335.vo.msecnd.net
[109] enterpriseregistration.windows.net
[110] support.content.office.net
[111] seal.entrust.net
[112] *.cortana.ai
[113] sts-a-neu.eu.aadrm.com
[114] aadcdn.msauth.net
[115] officeapps.live.com
[116] sentinelrealestate.us2.portal.cloudappsecurity.com
[117] az483350.vo.msecnd.net
[118] autodiscover.pulso.emea.microsoftonline.com
[119] api.diagnostics.office.com
[120] r4.res.office365.com
[121] 5b7d2a6d-fdc7-44af-bafa-696a64f60ab0.rms.na.aadrm.com
[122] officeclient.microsoft.com
[123] sw.symcd.com
[124] tasks.office.com
[125] crl.identrust.com
[126] dhr-efz.ms-acdc.office.com
[127] site-cdn.onenote.net
[128] cdn.hubblecontent.osi.office.net
[129] gtssl-aia.geotrust.com
[130] products.office.com
[131] ocspx.digicert.com
[132] learningtools.onenote.com
[133] *.aria.microsoft.com
[134] az650504.vo.msecnd.net
[135] cdp1.public-trust.com
[136] gt.symcd.com
[137] crl.omniroot.com
[138] 88696993-15a4-4162-b043-2222d5cd6a70.rms.ap.aadrm.com
[139] gtssldv-ocsp.geotrust.com
[140] 9df5d95c-71bb-47ed-9b37-bf311a6a4309.rms.eu.aadrm.com
[141] *.onenote.com
[142] becws.microsoftonline.com
[143] officecdn.microsoft.com
[144] *.phonefactor.net
[145] adobe-timestamp.geotrust.com
[146] instance-weu.create.powerapps.com
[147] az315059.vo.msecnd.net
[148] gbr.delve.office.com
[149] aus.delve.office.com
[150] graph.microsoft.com
[151] *.static.microsoft
[152] sg2.symcb.com
[153] 4137ea86-ff7a-4f9d-a518-2d8f590598b7.rms.eu.aadrm.com
[154] upload.fp.measure.office.com
[155] autodiscover.bw.microsoftonline.com
[156] evssl-crl.geotrust.com
[157] *.usercontent.microsoft
[158] login.microsoft.com
[159] *.informationprotection.azure.com
[160] acdc-direct.office.com
[161] az439107.vo.msecnd.net
[162] gtm-dyn-direct.office365.com
[163] inc-onenote.officeapps.live.com
[164] cdn.onenote.net
[165] cacerts.digicert.com
[166] vassg141.crl.omniroot.com
[167] onsitecrl.verisign.com
[168] informationprotection.hosting.portal.azure.net
[169] ocsp.omniroot.com
[170] gtssl-crl.geotrust.com
[171] crl.globalsign.net
[172] taores.portal.cloudappsecurity.com
[173] *.microsoftonline-p.com
[174] az577702.vo.msecnd.net
[175] loginex.microsoftonline.com
[176] asia-001.azure-apim.net
[177] s3-officeapps-15.cdn.office.net
[178] edunotebookssite.onenote.com
[179] *.auth.microsoft.com
[180] protection.office.com
[181] officeimg.vo.msecnd.net
[182] *.msftauth.net
[183] s1-officeapps-15.cdn.office.net
[184] sts-b-neu.eu.aadrm.com
[185] inc-word-edit.officeapps.live.com
[186] *.microsoftonline.com
[187] sea-000.tasks.osi.office.net
[188] hubblecontent.osi.office.net
[189] *.events.data.microsoft.com
[190] support.microsoft.com
[191] gn2.symcb.com
[192] *.protection.office.com
[193] az416426.vo.msecnd.net
[194] s1-onenote-15.cdn.office.net
[195] pf.pipe.aria.microsoft.com
[196] s2.symcb.com
[197] portal.microsoftonline.com
[198] *.powerautomate.com
[199] eus-zzz.tasks.osi.office.net
[200] *.azurerms.com
[201] evssl-aia.geotrust.com
[202] login.windows.net
[203] az536207.vo.msecnd.net
[204] apc.delve.office.com
[205] *.compliance.microsoft.com
[206] ocsp.digicert.com
[207] az732665.vo.msecnd.net
[208] *.verisign.net
[209] su.symcb.com
[210] contentstorage.osi.office.net
[211] tataskyo365.portal.cloudappsecurity.com
[212] ta.symcd.com
[213] knowledge.geotrust.com
[214] svrsecure-t1-crl.verisign.com
[215] provisioningapi-s1-db3r.microsoftonline.com
[216] d5f4f025-0622-4597-a7d0-ef02508f43fd.rms.eu.aadrm.com
[217] ocws.officeapps.live.com
[218] gj2.symcb.com
[219] *.powerapps.com
[220] kor.delve.office.com
[221] ac9acd0e-ce28-4dd3-bf45-51ceab2bc57d.rms.eu.aadrm.com
[222] accounts.accesscontrol.windows.net
[223] crl.geotrust.com
[224] *.office365.com
[225] vpssg141.crl.omniroot.com
[226] *.cloud.microsoft
[227] gcch-mtis.cortana.ai
[228] 7ff45490-2b94-4d4f-a778-a9084caa3557.rms.eu.aadrm.com
[229] *.officeapps.live.com
[230] ocsredir.officeapps.live.com
[231] templates.office.com
[232] nam.delve.office.com
[233] C1-excel-15.cdn.office.net
[234] az833206.vo.msecnd.net
[235] r.office.microsoft.com
[236] office.live.com
[237] cacert.a.mcs.omniroot.com
[238] s3-onenote-15.cdn.office.net
[239] appsforoffice.microsoft.com
[240] www.onenote.com
[241] *.portal.cloudappsecurity.com
[242] *cdn.onenote.net
[243] apis.live.net
[244] forms.office.com
[245] tj1.symcb.com
[246] gtssl2-crl.geotrust.com
[247] in2-rtc.officeapps.live.com
[248] www.onedrive.com
[249] cdn.uci.officeapps.live.com
[250] loropiana.emea.microsoftonline.com
[251] *.public-trust.com
[252] prod.msocdn.com
[253] sg1.symcb.com
[254] security.microsoft.com
[255] *.geotrust.com
[256] instance-eca.create.powerapps.com
[257] gj1.symcb.com
[258] ocsp.entrust.net
[259] account.office.net
[260] home.office.com
[261] az725175.vo.msecnd.net
[262] dgps.support.microsoft.com
[263] pca-g3-ocsp.geotrust.com
[264] *.aadrm.com
[265] az280429.vo.msecnd.net
[266] az384080.vo.msecnd.net
[267] ecn.dev.virtualearth.net
[268] portal.office.com
[269] companymanager.microsoftonline.com
[270] smtp.office365.com
[271] shellprod.msocdn.com
[272] se.symcd.com
[273] jpn.delve.office.com
[274] ccs.login.microsoftonline.com
[275] 18791d16-6306-48b5-bee6-d84af6ee50c3.rms.na.aadrm.com
[276] euc-powerpoint.officeapps.live.com
[277] secure.aadcdn.microsoftonline-p.com
[278] 06c80bf5-e43c-4f11-8894-4f5590df015d.rms.eu.aadrm.com
[279] netafim.us.portal.cloudappsecurity.com
[280] can.delve.office.com
[281] *.msftidentity.com
[282] admin.powerapps.com
[283] api.passwordreset.microsoftonline.com
[284] r1.res.office365.com
[285] e8608890-64b3-4386-aca1-5d8b278c51cf.rms.eu.aadrm.com
[286] manage.office.com
[287] cacert.a.omniroot.com
[288] account.activedirectory.windowsazure.com
[289] lpcres.delve.office.com
[290] login.microsoftonline-p.com
[291] ncu.hipipv4.client.hip.live.com
[292] az680633.vo.msecnd.net
[293] lam.delve.office.com
[294] outlook.office365.com
[295] res.office365.com
[296] *.security.microsoft.com
[297] secure.globalsign.com
[298] clientconfig.microsoftonline-p.net
[299] cacert.omniroot.com
[300] provisioningapi.microsoftonline.com
[301] *.entrust.net
[302] *.activity.windows.com
[303] adminwebservice.microsoftonline.com
[304] *.flow.microsoft.com
[305] 86d393c8-36bf-4b9c-bae7-fe891eaf0b7b.rms.eu.aadrm.com
[306] auc-word-edit.officeapps.live.com
[307] go.microsoft.com
[308] isrg.trustid.ocsp.identrust.com
[309] autodiscover.docusign2com.microsoftonline.com
[310] su.symcd.com
[311] crl.entrust.net
[312] videoplayercdn.osi.office.net
[313] evsecure-crl.geotrust.com
[314] neu-000.tasks.osi.office.net
[315] autodiscover.foviance.emea.microsoftonline.com
[316] msdn.microsoft.com
[317] technet.microsoft.com
[318] logincert.microsoftonline.com
[319] passwordreset.microsoftonline.com
[320] officecdn.microsoft.com.edgesuite.net
[321] 490f55cc-9f54-423d-932d-d098bf730bfe.rms.eu.aadrm.com
[322] c1.microsoft.com
[323] ocsp2.globalsign.com
[324] defender.microsoft.com
[325] *.symcd.com
[326] *.verisign.com
[327] privateott.entrust.net
[328] zim365.portal.cloudappsecurity.com
[329] www.microsoft.com
[330] autologon.microsoftazuread-sso.com
[331] az158878.vo.msecnd.net
[332] rapidssl-crl.geotrust.com
[333] ss1.symcb.com
[334] pfd.phonefactor.net
[335] www.microsoft365.com
[336] rapidssl-aia.geotrust.com
[337] ss2.symcb.com
[338] *.o365weve.com
[339] ocsa.officeapps.live.com
[340] connectivity.office.com
[341] *.msauth.net
[342] dod-mtis.cortana.ai
[343] o15.officeredir.microsoft.com
[344] pad.phonefactor.net
[345] apps.identrust.com
[346] vassg142.crl.omniroot.com

Domains name list for 'Microsoft Teams Worldwide Optional Services':

[1] cid-672d3bf398b72df2.users.storage.live.com
[2] cid-749ba581e42749c2.users.storage.live.com
[3] cid-6d735350b565c575.users.storage.live.com
[4] cid-d39d70c482d593ee.users.storage.live.com
[5] adl.windows.com
[6] cid-a65b6b7a2f86fd4c.users.storage.live.com
[7] cid-98e1181566f53e95.users.storage.live.com
[8] cid-49e6f53f568eed66.users.storage.live.com
[9] cid-51ca10ed35868a41.users.storage.live.com
[10] cid-ab9805ded4496c00.users.storage.live.com
[11] cid-3cdfffa9ac6ab132.users.storage.live.com
[12] cid-193d7751c51219f2.users.storage.live.com
[13] cid-3ffed883def8d40c.users.storage.live.com
[14] *.users.storage.live.com
[15] cid-ea105386703aa561.users.storage.live.com
[16] cid-358b7d1d86479f42.users.storage.live.com
[17] cid-c4a8f76a6f98a2f7.users.storage.live.com
[18] cid-a3c9ca954a7a9fba.users.storage.live.com
[19] cid-5731364cc9ee528f.users.storage.live.com
[20] cid-8a864a0b568ac3fa.users.storage.live.com
[21] cid-2b6b968d18917697.users.storage.live.com
[22] cid-639b3d0ead1964d3.users.storage.live.com

Domains name list for 'Microsoft Teams Worldwide Required Services':

[1] telemetry.tip.lync.com
[2] sipfed.online.lync.com
[3] *.secure.skypeassets.com
[4] feedback.skype.com
[5] acti-can-backup.broadcast.skype.com
[6] amssamples.streaming.mediaservices.windows.net
[7] *.keydelivery.mediaservices.windows.net
[8] teams.microsoft.com
[9] webpoolblu1a03.infra.lync.com
[10] portal.011d.dedicated.lync.com
[11] sipedgedb40e.infra.lync.com
[12] presence.teams.microsoft.com
[13] webpoolsg20f03.infra.lync.com
[14] mysettings.lync.com
[15] ltvideos.streaming.mediaservices.windows.net
[16] 52-114-124-226.relay.teams.microsoft.com
[17] apps.skype.com
[18] anhmediaservices.streaming.mediaservices.windows.net
[19] co1030dl50se01.030d.dedicated.lync.com
[20] mediatenaprod.streaming.mediaservices.windows.net
[21] wmvideocdn-wakatest.streaming.mediaservices.windows.net
[22] as-api.asm.skype.com
[23] cdn--audioagentmediaservices.streaming.mediaservices.windows.net
[24] prodxnews1.streaming.mediaservices.windows.net
[25] aka.ms
[26] jupyternootbookwams.streaming.mediaservices.windows.net
[27] bskamsprod.streaming.mediaservices.windows.net
[28] endpoint2-prdcaccompsvc.streaming.mediaservices.windows.net
[29] webpooldb41e03.infra.lync.com
[30] inviteconnector.skype.com
[31] mediatorkprod.streaming.mediaservices.windows.net
[32] sdvideo.streaming.mediaservices.windows.net
[33] sa1-urlp.secure.skypeassets.com
[34] *.streaming.mediaservices.windows.net
[35] teams.skype.com
[36] dialin2.lync.com
[37] broker.skype.com
[38] api.skype.com
[39] portal.056d.dedicated.lync.com
[40] norgesfilmegnetjenester.keydelivery.mediaservices.windows.net
[41] vmcsamsprodne.streaming.mediaservices.windows.net
[42] pipe.skype.com
[43] d2uql64hohb2up6nbhiymkz53e.streaming.mediaservices.windows.net
[44] ea1-urlp.secure.skypeassets.com
[45] cvprbl202m01.keydelivery.mediaservices.windows.net
[46] statics.teams.microsoft.com
[47] config.edge.skype.com
[48] sippoolme1au104.infra.lync.com
[49] 52-114-125-10.relay.teams.microsoft.com
[50] c-cc-euno-01.cc.skype.com
[51] bl2pv2.ng.msg.teams.microsoft.com
[52] natickmediaservices.streaming.mediaservices.windows.net
[53] *.skype.com
[54] mekazms.streaming.mediaservices.windows.net
[55] latest-swx.cdn.skype.com
[56] sn1027dl50se01.027d.dedicated.lync.com
[57] sippoolam30e21.infra.lync.com
[58] mlccdn.blob.core.windows.net
[59] prod.registrar.skype.com
[60] db3050dl50se01.050d.dedicated.lync.com
[61] endpoint2-prdneucompsvc.streaming.mediaservices.windows.net
[62] apac.presence.teams.microsoft.com
[63] c-broker-euwe-01.broker.skype.com
[64] tredge.online.lync.com
[65] mlccdnprod.azureedge.net
[66] broadcast.skype.com
[67] skypegraph.skype.com
[68] mediaservicesehc.streaming.mediaservices.windows.net
[69] *.teams.microsoft.com
[70] co1027dl50se02.027d.dedicated.lync.com
[71] compass-ssl.microsoft.com
[72] sippoolblu2a18.infra.lync.com
[73] swx.cdn.skype.com
[74] *.lync.com
[75] ch1003dl50se02.003d.dedicated.lync.com

Domains name list for 'Exchange Online Worldwide Optional Services':

[1] outlook.office365.com
[2] smtp.office365.com

Domains name list for 'Exchange Online Worldwide Required Services':

[1] *.mx.microsoft
[2] autodiscover.uniparts.onmicrosoft.com
[3] autodiscover.rvkassociates.onmicrosoft.com
[4] *.protection.outlook.com
[5] eur02.dataservice.protection.outlook.com
[6] w.outlook.com
[7] torres-se.mail.protection.outlook.com
[8] protection.outlook.com
[9] autodiscover.morweiss1.onmicrosoft.com
[10] r3.res.outlook.com
[11] syncservice.protection.outlook.com
[12] autodiscover.phillipscorp.mail.onmicrosoft.com
[13] autodiscover.*.onmicrosoft.com
[14] outlook.office.com
[15] autodiscover.hkw.onmicrosoft.com
[16] nam04.admin.protection.outlook.com
[17] autodiscover.vneo.onmicrosoft.com
[18] *.mail.protection.outlook.com
[19] gbr01.dataservice.protection.outlook.com
[20] apc01.admin.protection.outlook.com
[21] autodiscover.zensui01.onmicrosoft.com
[22] exap.um.outlook.com
[23] autodiscover.tagarkitekter.onmicrosoft.com
[24] autodiscover.nishinotekko.onmicrosoft.com
[25] outlook.cloud.microsoft
[26] eur02.admin.protection.outlook.com
[27] help.outlook.com
[28] eur01.admin.protection.outlook.com
[29] emea01.oscs.protection.outlook.com
[30] nam02.admin.protection.outlook.com
[31] dataservice.protection.outlook.com
[32] autodiscover.groupefigaro.mail.onmicrosoft.com
[33] apc01.dataservice.protection.outlook.com
[34] www.outlook.com
[35] eur01.dataservice.protection.outlook.com
[36] support.outlook.com
[37] autodiscover.misereor.onmicrosoft.com
[38] eur03.dataservice.protection.outlook.com
[39] can01.admin.protection.outlook.com
[40] autodiscover.tryangle.onmicrosoft.com
[41] autodiscover.somerstitlecompany.onmicrosoft.com
[42] na01.safelinks.protection.outlook.com
[43] autodiscover.eilatmuni.onmicrosoft.com
[44] autodiscover.underarmour.mail.onmicrosoft.com
[45] amxprd0510.outlook.com
[46] i3.help.outlook.com
[47] i2.help.outlook.com
[48] autodiscover.porcex.onmicrosoft.com
[49] admin.protection.outlook.com
[50] eur03.admin.protection.outlook.com
[51] autodiscover.vetterpharma.mail.onmicrosoft.com
[52] autodiscover.dealogic.onmicrosoft.com
[53] autodiscover.dyg365.mail.onmicrosoft.com
[54] eur03b.compliance.protection.outlook.com
[55] xsi.outlook.com
[56] autodiscover.mendoco.onmicrosoft.com
[57] nam04.dataservice.protection.outlook.com
[58] amsprd0411.outlook.com
[59] *.outlook.com

[Expert@CP-GW:0]#

[Zia1]

Hi,

Here is the relevant SK. Office365 Third Party Domains' is no longer supported.

https://support.checkpoint.com/results/sk/sk182599

Regards,

Ikram