- CheckMates
- :
- Products
- :
- Quantum
- :
- Management
- :
- Re: Office365 Third Party Domains
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Office365 Third Party Domains
Hello,
we get a validation error with the updatable object "office365 Third Party Domains".
I cant find it at Microsoft (Microsoft 365 endpoints - Microsoft 365 Enterprise | Microsoft Learn).
Does anyone know when it was removed?
Is there a SK with instructions how to remove it from the policy?
Regards
Peter
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hey,
I just stumbled over this on a customer firewall. The usual cloudguard off|on didn't fix the issue. Checked here, found your post...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Let me test it in R81.20 lab. I will also check out R82 as well and report back.
Andy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Just checked my labs, same in R82, definitely not there. Can you not just delete it from policy and save or it complains even if you do that?
Andy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Of Course I can and so does the customer. This is a highly used object it would be nice to have an "official" statement (@PhoneBoy) for the documentation and the compliance report.
regards
Peter
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Fair enough.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Can confirm, looks like it's really gone. I was a bit confused, as the object isn't used in the policy. The validation pane (I know preview) showed two errors. Last week there were none.
So this brings it back to @JP_Rex question. How to proceed. For me it's just "delete this object by myself"? For people using this object, the use the 365services object, which will for an allow but not deny rule.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There might be new updatable object coming soon, who knows : - )
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
That depends on MicroSoft not on Check Point. It was MS who created a new structure. This Structure is just reflected in the Object
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thats 100% true, for sure.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I see more users have this complain but maybe we can try this?
- Removed all instances of the problem updatable objects in the policy.
- Removed the problem updatable objects in the object tree
- Publishe
- Exit SmartConsole
- reboot fwmgt
- In the GUI, re-added the updatable objects back to the policy.
I think I also have seen a case that it 'fix' itself in some time.
PS how to troubleshoot the download part (if needed) https://support.checkpoint.com/results/sk/sk122636
Office 365 third part shows still supported here: https://support.checkpoint.com/results/sk/sk131852
If you like this post please give a thumbs up(kudo)! 🙂
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@Lesley SK131852 is out of date regarding the description off Office 365.
the Top can be found here (Microsoft 365 IP Address and URL web service - Microsoft 365 Enterprise | Microsoft Learn)
"For the latest version of the Microsoft 365 URLs and IP address ranges,
use https://endpoints.office.com/version."
#####
[
{
"instance": "USGovGCCHigh",
"serviceArea": "O365Default",
"latest": "2024073100"
},
{
"instance": "China",
"serviceArea": "O365Default",
"latest": "2024032900"
},
{
"instance": "Worldwide",
"serviceArea": "O365Default",
"latest": "2024073100"
},
{
"instance": "USGovDoD",
"serviceArea": "O365Default",
"latest": "2024073100"
},
{
"instance": "Germany",
"serviceArea": "O365Default",
"latest": "2022012800"
}
#########
No third party.
The Implementation of the Microsoft updatable objects works. The tree of information provided by MS is downloaded and displayed correctly.
What is out of date is the Check Point documentation of what Microsoft is providing.
Maybe it is time to update your documentation.
Best Regards
Peter
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I do not have to update anything 😀
Maybe you forgot this is a community, topics like this I cannot help you with as most here. If you want Check Point to update something you need to send feedback on the SK page itself. This is stated in https://support.checkpoint.com/results/sk/sk60001
Under:
If you like this post please give a thumbs up(kudo)! 🙂
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The office365.C file changed on Sunday.
The section "Office365 Third Party Domains" was removed.
However, this does not match the changes that Microsoft made.
The last change Microsoft did was on 2024073100
You can check the versions here: https://endpoints.office.com/changes/worldwide/0000000000?ClientRequestId=308aa5da-05b4-496c-8ce9-e5...
However, the changes are
########################################################################
:CP_MS_Office365_3rd_parties (
:parent (CP_MS_Office365_All)
:uuid ("4ba61bdf-5105-3a0f-b33a-23ef96354163")
:display_name ("Office365 Third Party Domains")
:icon ("@app/cp_ms_office365")
:children (
: (CP_MS_Exchange_3rd_parties)
: (CP_MS_Skype_3rd_parties)
: (CP_MS_SharePoint_3rd_parties)
: (CP_MS_Common_3rd_parties)
: (CP_MS_Common_3rd_parties_China)
#CP_MS_Exchange_3rd_parties
smtp.office365.com
#CP_MS_Skype_3rd_parties
adl.windows.com
#CP_MS_SharePoint_3rd_parties#
#CP_MS_Common_3rd_parties
ecn.t51.tiles.virtualearth.net
ecn.dev.virtualearth.net
t5.ssl.ak.dynamic.tiles.virtualearth.net
ak.t4.tiles.virtualearth.net
*.virtualearth.net
t0.tiles.virtualearth.net
#CP_MS_Common_3rd_parties_China
*.protection.partner.outlook.cn
*.aadrm.cn
########################################################################
If you look at the changes and when the URLs were changed, it was sometimes years ago.
The virtualearth domain, for example, was added to the Service Area Common in 2020.
It seems that the "Office365 Third Party Domains" has been redundant for some time.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I will test this later and see what it shows.
Andy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello everyone.
Do you have any ideia if we have a new match for this Updatable Object or if it has transitioned to Office365 Worlwide Services?
Since yesterday, I also got the Warnings on the Validation Pane but what we found was that we are having logs starting to match the Office365 Worlwide Services Object that were previously matching the Office365 Third Party Domain.
Thank you so much,
GD
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can check at MS API where the url is contained and also search at Checkpoint to see what the equivalent is.
Check the last Revision folder: $CPDIR/database/downloads/ONLINE_SERVICES/1.0/NNNNNNNNNNNN/office365.C
#CP_MS_Exchange_3rd_parties
smtp.office365.com ("id": 2, serviceArea": "Exchange")
#CP_MS_Skype_3rd_parties
adl.windows.com ("id": 19, serviceArea": "Skype")
#CP_MS_Common_3rd_parties
*.virtualearth.net ("serviceArea": "Common")
Or check via
domains_tool -uo "Office365 Worldwide Services"
as the_rock said.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Do you get anything with below?
Andy
[Expert@CP-GW:0]# domains_tool -uo "Office365 Worldwide Services"
The updatable object Office365 Worldwide Services not found
[Expert@CP-GW:0]#
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello.
This is what I get:
"[Expert@hqsvrfw01:0]# domains_tool -uo "Office365 Third Party Domains"
Internal error, for more information use DEBUG mode"
For Office365 Worlwide Services I get ALL the URLs listed.
Thank you,
GD
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yep, same here...
Andy
[Expert@CP-GW:0]# domains_tool -uo "Office365 Worldwide Services"
Domain tool looking for domains for 'Office365 Worldwide Services' and its children objects:
Domains name list for 'SharePoint Online and OneDrive for Business Worldwide Optional Services':
[1] *.search.production.emea.trafficmanager.net
[2] ssw.live.com
[3] *.search.production.apac.trafficmanager.net
[4] storage.live.com
[5] *.search.production.us.trafficmanager.net
Domains name list for 'SharePoint Online and OneDrive for Business Worldwide Required Services':
[1] bn4sch101121409.wns.windows.com
[2] southcentralus1-pushp.svc.ms
[3] eastasia1-pushp.svc.ms
[4] atos365-my.sharepoint.com
[5] bn3sch020022329.wns.windows.com
[6] officeclient.microsoft.com
[7] bn3sch020020844.wns.windows.com
[8] db6sch102090619.wns.windows.com
[9] admin.onedrive.com
[10] sentechjhb-my.sharepoint.com
[11] northcentralus1-pushp.svc.ms
[12] 12-northeurope1-pushp.svc.ms
[13] 11-northeurope1-pushp.svc.ms
[14] bn4sch101121308.wns.windows.com
[15] g.live.com
[16] 15-northeurope1-pushp.svc.ms
[17] signout.sharepoint.com
[18] bn4sch101122509.wns.windows.com
[19] mediap.svc.ms
[20] mmcg-my.sharepoint.com
[21] southeastasia1-mediap.svc.ms
[22] northeurope1-pushp.svc.ms
[23] soliver-my.sharepoint.com
[24] bn4sch101122014.wns.windows.com
[25] germanycentral1-pushp.svc.ms
[26] 10-northeurope1-pushp.svc.ms
[27] harveynichols-my.sharepoint.com
[28] 4-centralus1-pushp.svc.ms
[29] arcelormittal.sharepoint.com
[30] *.sharepoint.com
[31] *.wns.windows.com
[32] 0-ukwest1-pushp.svc.ms
[33] 14-northeurope1-pushp.svc.ms
[34] jsainsbury.sharepoint.com
[35] *.svc.ms
[36] bn4sch101121208.wns.windows.com
[37] oneclient.sfx.ms
[38] macquarietelecom-my.sharepoint.com
[39] unicornsystemsua-my.sharepoint.com
[40] 5-centralus1-pushp.svc.ms
[41] db5sch103100121.wns.windows.com
[42] spoprod-a.akamaihd.net
[43] 13-northeurope1-pushp.svc.ms
[44] northcentralus1-pushb.svc.ms
[45] arcelik-my.sharepoint.com
[46] mclaren.sharepoint.com
[47] bn4sch101122419.wns.windows.com
[48] questorinsurance.sharepoint.com
[49] think365orgil-my.sharepoint.com
[50] hussote.sharepoint.com
[51] eastrenfrewshire.sharepoint.com
[52] bn3sch020020842.wns.windows.com
[53] kone.sharepoint.com
[54] roff550.sharepoint.com
[55] ucpoint.sharepoint.com
[56] eduserv.sharepoint.com
[57] 2-centralus1-pushp.svc.ms
[58] westeurope1-mediap.svc.ms
[59] eastus21-mediap.svc.ms
Domains name list for 'Microsoft 365 Common and Office Online Worldwide Optional Services':
[1] prod-nam-autodetect.acompli.net
[2] c.live.com
[3] officepreviewredir.microsoft.com
[4] fr-ca.appex-rf.msn.com
[5] flow.microsoft.com
[6] pt-pt.appex-rf.msn.com
[7] autodiscover.sodexo.mail.onmicrosoft.com
[8] autodiscover.one365.mail.onmicrosoft.com
[9] mam.manage.microsoft.com
[10] crl.microsoft.com
[11] querylydrive.blob.core.windows.net
[12] autodiscover.kosmocar.onmicrosoft.com
[13] msv-c038.video.microsoft.com
[14] autodiscover.starwoodhotels1com.mail.onmicrosoft.com
[15] pad0.assets-yammer.com
[16] 1-255619-1574004168-708.rt.yammer.com
[17] officehome.msocdn.com
[18] reachstorage.blob.core.windows.net
[19] office.microsoft.com
[20] sbt.blob.core.windows.net
[21] mr-in.appex-rf.msn.com
[22] stainlesssteels.onmicrosoft.com
[23] docs.microsoft.com
[24] en-nl.appex-rf.msn.com
[25] support.microsoft.com
[26] pf.pipe.aria.microsoft.com
[27] admin.microsoft.com
[28] autodiscover.rodekruis.mail.onmicrosoft.com
[29] mshrcstorageprod.blob.core.windows.net
[30] 7.tlu.dl.delivery.mp.microsoft.com
[31] ocos-office365-s2s.msedge.net
[32] wus-www.sway-cdn.com
[33] 1-217446-1541620433-630.rt.yammer.com
[34] autodiscover.uapgroup.onmicrosoft.com
[35] parkcloud.blob.core.windows.net
[36] autodiscover.krepbank.onmicrosoft.com
[37] 1-744473-1592931180-599.rt.yammer.com
[38] delivery.mp.microsoft.com
[39] mug0.assets-yammer.com
[40] *.acompli.net
[41] compliance.microsoft.com
[42] prod5-files.acompli.net
[43] *.appex.bing.com
[44] id-id.appex-rf.msn.com
[45] autodiscover.rainternationalservices.onmicrosoft.com
[46] forms.microsoft.com
[47] c.bing.net
[48] *.yammerusercontent.com
[49] wer.microsoft.com
[50] autodiscover.fayatsas.onmicrosoft.com
[51] *.blob.core.windows.net
[52] *.msocdn.com
[53] static2.sharepointonline.com
[54] appsource.microsoft.com
[55] sbr.officehome.msocdn.com
[56] signup.microsoft.com
[57] www.sway.com
[58] officespeech.platform.bing.com
[59] prod-global-autodetect.acompli.net
[60] appexeaprodweather.blob.core.windows.net
[61] activation.sls.microsoft.com
[62] watson.telemetry.microsoft.com
[63] login.live.com
[64] de-ch.appex-rf.msn.com
[65] www.bing.com
[66] www.acompli.com
[67] *.microsoftusercontent.com
[68] bl2pv2.ng.msg.teams.microsoft.com
[69] 1-255619-1569824548-448.rt.yammer.com
[70] static.sharepointonline.com
[71] signup.live.com
[72] office15client.microsoft.com
[73] wepod01prot1dt4wq1d11.blob.core.windows.net
[74] c.bing.com
[75] tb.pipe.aria.microsoft.com
[76] ecn.t51.tiles.virtualearth.net
[77] files.yammer.com
[78] appexnewsappupdate.blob.core.windows.net
[79] mlccdn.blob.core.windows.net
[80] login.windows-ppe.net
[81] dstest.blob.core.windows.net
[82] 1-744473-1592991327-304.rt.yammer.com
[83] mem.gfx.ms
[84] r.office.microsoft.com
[85] *.onmicrosoft.com
[86] 1-255619-1569808606-388.rt.yammer.com
[87] ak.t4.tiles.virtualearth.net
[88] autodiscover.knowledgeparkag.mail.onmicrosoft.com
[89] lbestgrsnergadds00101.blob.core.windows.net
[90] advertise.bingads.microsoft.com
[91] appsforoffice.microsoft.com
[92] labimages.blob.core.windows.net
[93] 1-225197-1628694781-108.rt.yammer.com
[94] 1-255619-1569808606-248.rt.yammer.com
[95] autodiscover.cwsbocogroup.mail.onmicrosoft.com
[96] *.sharepointonline.com
[97] playingsurface1.blob.core.windows.net
[98] en-dk.appex-rf.msn.com
[99] 1-744473-1592931179-482.rt.yammer.com
[100] pf.events.data.microsoft.com
[101] d.docs.live.net
[102] compass-ssl.microsoft.com
[103] de-de.appex-rf.msn.com
[104] ka-ge.appex-rf.msn.com
[105] t0.tiles.virtualearth.net
[106] *.outlookmobile.com
[107] fr-fr.appex-rf.msn.com
[108] autodiscover.chiquita.onmicrosoft.com
[109] 1-255619-1569783634-555.rt.yammer.com
[110] vortex.data.microsoft.com
[111] ajax.microsoft.com
[112] 1-232283-1579485688-208.rt.yammer.com
[113] officeredir.microsoft.com
[114] 1-255619-1620267567-185.rt.yammer.com
[115] prod.msocdn.com
[116] sv-se.appex-rf.msn.com
[117] weather.tile.appex.bing.com
[118] storecatalogrevocation.storequality.microsoft.com
[119] security.microsoft.com
[120] sqm.microsoft.com
[121] sas.office.microsoft.com
[122] staffhub.ms
[123] he-il.appex-rf.msn.com
[124] mscrl.microsoft.com
[125] f6publishing.blob.core.windows.net
[126] teams.microsoft.com
[127] dgps.support.microsoft.com
[128] tb.events.data.microsoft.com
[129] *.virtualearth.net
[130] lbestlrsuksrgbzp10101.blob.core.windows.net
[131] autodiscover.inbalbituch.onmicrosoft.com
[132] privatecdn.sharepointonline.com
[133] ja-jp.appex-rf.msn.com
[134] cin.officehome.msocdn.com
[135] proffsmaster.blob.core.windows.net
[136] skodavisualizer.blob.core.windows.net
[137] ecn.dev.virtualearth.net
[138] docs.live.net
[139] nl-nl.appex-rf.msn.com
[140] phone.finance.services.appex.bing.com
[141] gigmanagerfiles.blob.core.windows.net
[142] tr-tr.appex-rf.msn.com
[143] *.microsoft.com
[144] telemetryservice.firstpartyapps.oaspapps.com
[145] autodiscover.dbaprogettispa.onmicrosoft.com
[146] shellprod.msocdn.com
[147] sway.com
[148] careers.microsoft.com
[149] weatherscus01.blob.appex.bing.com
[150] tse1.mm.bing.net
[151] dc.applicationinsights.microsoft.com
[152] 1-104414-1491877582-870.rt.yammer.com
[153] blob.officehome.msocdn.com
[154] account.live.com
[155] entmagpahanggangwakas.blob.core.windows.net
[156] autodiscover.abilitynetworkinc.onmicrosoft.com
[157] staffhubweb.azureedge.net
[158] 1-552329-1621576556-492.rt.yammer.com
[159] autodiscover.bat.mail.onmicrosoft.com
[160] wus-www.sway-extensions.com
[161] wus-firstpartyapps.oaspapps.com
[162] partnerservices.getmicrosoftkey.com
[163] neuofficehome.msocdn.com
[164] 1-150934-1494945360-233.rt.yammer.com
[165] fi-fi.appex-rf.msn.com
[166] *.appex-rf.msn.com
[167] officeclient.microsoft.com
[168] lyncdiscover.grupomrw.onmicrosoft.com
[169] en-us.appex-rf.msn.com
[170] *.yammer.com
[171] eus-www.sway-extensions.com
[172] t5.ssl.ak.dynamic.tiles.virtualearth.net
[173] statics.teams.microsoft.com
[174] prod.firstpartyapps.oaspapps.com.akadns.net
[175] autodiscover.vdndp.onmicrosoft.com
[176] firstpartyapps.oaspapps.com
[177] go.microsoft.com
[178] s0.assets-yammer.com
[179] lbestlrsnergaidp00101.blob.core.windows.net
[180] powerlift-frontdesk.acompli.net
[181] prod14-api.acompli.net
[182] msdn.microsoft.com
[183] settings-win.data.microsoft.com
[184] www.outlook.com
[185] *.assets-yammer.com
[186] dc.services.visualstudio.com
[187] technet.microsoft.com
[188] azure.microsoft.com
[189] c1.microsoft.com
[190] 1-104414-1621809617-648.rt.yammer.com
[191] defender.microsoft.com
[192] forefrontdl.microsoft.com
[193] 1-255619-1568579401-460.rt.yammer.com
[194] powerbi.microsoft.com
[195] officecdn.microsoft.com
[196] publiccdn.sharepointonline.com
[197] iperceptions.blob.core.windows.net
[198] fr-be.appex-rf.msn.com
[199] auth.gfx.ms
[200] blobs.officehome.msocdn.com
[201] ar-eg.appex-rf.msn.com
[202] support2.microsoft.com
[203] www.microsoft.com
[204] 1-974764-1525210021-958.rt.yammer.com
[205] api.health.appex.bing.com
[206] graph.microsoft.com
[207] cdn.sharepointonline.com
[208] teamsdevicemgmtsvcprod.blob.core.windows.net
[209] watson.microsoft.com
[210] autodiscover.coopservice.onmicrosoft.com
[211] 1-255619-1569815824-900.rt.yammer.com
[212] finance.services.appex.bing.com
[213] testconnectivity.microsoft.com
[214] xh-za.appex-rf.msn.com
[215] o15.officeredir.microsoft.com
[216] travel.images.appex.bing.com
[217] eus-www.sway-cdn.com
[218] login.microsoft.com
Domains name list for 'Microsoft 365 Common and Office Online Worldwide Required Services':
[1] cert.int-x3.letsencrypt.org
[2] officepreviewredir.microsoft.com
[3] aia.entrust.net
[4] *.azure-apim.net
[5] s1.symcb.com
[6] az741266.vo.msecnd.net
[7] az314835.vo.msecnd.net
[8] cryptoreport.geotrust.com
[9] ips.verisign.com
[10] vpscs141.crl.omniroot.com
[11] *.msecnd.net
[12] autodiscover.crsorg.microsoftonline.com
[13] outlook.office.com
[14] *.office.net
[15] sts-a-weu.eu.aadrm.com
[16] vpscs142.crl.omniroot.com
[17] tj2.symcb.com
[18] ols.officeapps.live.com
[19] browser.pipe.aria.microsoft.com
[20] crl.microsoft.com
[21] az835686.vo.msecnd.net
[22] graph.windows.net
[23] cdn.odc.officeapps.live.com
[24] mrodevicemgr.officeapps.live.com
[25] assets.onestore.ms
[26] managed.entrust.net
[27] videocontent.osi.office.net
[28] sd.symcb.com
[29] docs.microsoft.com
[30] bn1pfpad05.phonefactor.net
[31] *.hip.live.com
[32] admin.microsoft.com
[33] ind.delve.office.com
[34] crl.globalsign.com
[35] image.email.microsoftonline.com
[36] *.office.com
[37] security-center.geotrust.com
[38] *.online.office.com
[39] *.msauthimages.net
[40] compliance.microsoft.com
[41] sx.symcd.com
[42] aadcdn.msftauth.net
[43] clienttemplates.content.office.net
[44] autodiscover.st1ad.emea.microsoftonline.com
[45] vassg142.ocsp.omniroot.com
[46] adminwebservice-s1-db3a.microsoftonline.com
[47] sa.symcb.com
[48] ogma.osi.office.net
[49] amp.azure.net
[50] activation.sls.microsoft.com
[51] sr.symcb.com
[52] crl4.digicert.com
[53] insertmedia.bing.office.net
[54] az737828.vo.msecnd.net
[55] ad37f20f-f882-4433-aaf1-5b543c6df13b.rms.eu.aadrm.com
[56] weu-000.tasks.osi.office.net
[57] outlook.cloud.microsoft
[58] office15client.microsoft.com
[59] *.symcb.com
[60] tb.pipe.aria.microsoft.com
[61] support.office.com
[62] s3-powerpoint-15.cdn.office.net
[63] *.msidentity.com
[64] policykeyservice.dc.ad.msft.net
[65] ocsp.globalsign.com
[66] activity.windows.com
[67] crl3.digicert.com
[68] autodiscover.orey.emea.microsoftonline.com
[69] wus-000.tasks.osi.office.net
[70] odc.officeapps.live.com
[71] statics.teams.cdn.office.net
[72] az826701.vo.msecnd.net
[73] omextemplates.content.office.net
[74] ajax.aspnetcdn.com
[75] *.omniroot.com
[76] login.microsoftonline.com
[77] ctrootsha2.ocsp.omniroot.com
[78] suite.office.net
[79] autodiscover.imperva.microsoftonline.com
[80] click.email.microsoftonline.com
[81] nexus.microsoftonline-p.com
[82] pf.events.data.microsoft.com
[83] platform.linkedin.com
[84] login-us.microsoftonline.com
[85] delve.office.com
[86] portal.azurerms.com
[87] sr.symcd.com
[88] api.login.microsoftonline.com
[89] officeredir.microsoft.com
[90] www.office.com
[91] css.phonefactor.net
[92] lyncdiscover.verisign.com
[93] mscrl.microsoft.com
[94] crl.verisign.com
[95] ocsp.msocsp.com
[96] tb.events.data.microsoft.com
[97] www.digicert.com
[98] gn1.symcb.com
[99] vpssg142.crl.omniroot.com
[100] api.aadrm.com
[101] secwatch365.eu.portal.cloudappsecurity.com
[102] sw1.symcb.com
[103] device.login.microsoftonline.com
[104] r3.res.office365.com
[105] otelrules.azureedge.net
[106] *.msftauthimages.net
[107] hp-ocsp.verisign.com
[108] az565335.vo.msecnd.net
[109] enterpriseregistration.windows.net
[110] support.content.office.net
[111] seal.entrust.net
[112] *.cortana.ai
[113] sts-a-neu.eu.aadrm.com
[114] aadcdn.msauth.net
[115] officeapps.live.com
[116] sentinelrealestate.us2.portal.cloudappsecurity.com
[117] az483350.vo.msecnd.net
[118] autodiscover.pulso.emea.microsoftonline.com
[119] api.diagnostics.office.com
[120] r4.res.office365.com
[121] 5b7d2a6d-fdc7-44af-bafa-696a64f60ab0.rms.na.aadrm.com
[122] officeclient.microsoft.com
[123] sw.symcd.com
[124] tasks.office.com
[125] crl.identrust.com
[126] dhr-efz.ms-acdc.office.com
[127] site-cdn.onenote.net
[128] cdn.hubblecontent.osi.office.net
[129] gtssl-aia.geotrust.com
[130] products.office.com
[131] ocspx.digicert.com
[132] learningtools.onenote.com
[133] *.aria.microsoft.com
[134] az650504.vo.msecnd.net
[135] cdp1.public-trust.com
[136] gt.symcd.com
[137] crl.omniroot.com
[138] 88696993-15a4-4162-b043-2222d5cd6a70.rms.ap.aadrm.com
[139] gtssldv-ocsp.geotrust.com
[140] 9df5d95c-71bb-47ed-9b37-bf311a6a4309.rms.eu.aadrm.com
[141] *.onenote.com
[142] becws.microsoftonline.com
[143] officecdn.microsoft.com
[144] *.phonefactor.net
[145] adobe-timestamp.geotrust.com
[146] instance-weu.create.powerapps.com
[147] az315059.vo.msecnd.net
[148] gbr.delve.office.com
[149] aus.delve.office.com
[150] graph.microsoft.com
[151] *.static.microsoft
[152] sg2.symcb.com
[153] 4137ea86-ff7a-4f9d-a518-2d8f590598b7.rms.eu.aadrm.com
[154] upload.fp.measure.office.com
[155] autodiscover.bw.microsoftonline.com
[156] evssl-crl.geotrust.com
[157] *.usercontent.microsoft
[158] login.microsoft.com
[159] *.informationprotection.azure.com
[160] acdc-direct.office.com
[161] az439107.vo.msecnd.net
[162] gtm-dyn-direct.office365.com
[163] inc-onenote.officeapps.live.com
[164] cdn.onenote.net
[165] cacerts.digicert.com
[166] vassg141.crl.omniroot.com
[167] onsitecrl.verisign.com
[168] informationprotection.hosting.portal.azure.net
[169] ocsp.omniroot.com
[170] gtssl-crl.geotrust.com
[171] crl.globalsign.net
[172] taores.portal.cloudappsecurity.com
[173] *.microsoftonline-p.com
[174] az577702.vo.msecnd.net
[175] loginex.microsoftonline.com
[176] asia-001.azure-apim.net
[177] s3-officeapps-15.cdn.office.net
[178] edunotebookssite.onenote.com
[179] *.auth.microsoft.com
[180] protection.office.com
[181] officeimg.vo.msecnd.net
[182] *.msftauth.net
[183] s1-officeapps-15.cdn.office.net
[184] sts-b-neu.eu.aadrm.com
[185] inc-word-edit.officeapps.live.com
[186] *.microsoftonline.com
[187] sea-000.tasks.osi.office.net
[188] hubblecontent.osi.office.net
[189] *.events.data.microsoft.com
[190] support.microsoft.com
[191] gn2.symcb.com
[192] *.protection.office.com
[193] az416426.vo.msecnd.net
[194] s1-onenote-15.cdn.office.net
[195] pf.pipe.aria.microsoft.com
[196] s2.symcb.com
[197] portal.microsoftonline.com
[198] *.powerautomate.com
[199] eus-zzz.tasks.osi.office.net
[200] *.azurerms.com
[201] evssl-aia.geotrust.com
[202] login.windows.net
[203] az536207.vo.msecnd.net
[204] apc.delve.office.com
[205] *.compliance.microsoft.com
[206] ocsp.digicert.com
[207] az732665.vo.msecnd.net
[208] *.verisign.net
[209] su.symcb.com
[210] contentstorage.osi.office.net
[211] tataskyo365.portal.cloudappsecurity.com
[212] ta.symcd.com
[213] knowledge.geotrust.com
[214] svrsecure-t1-crl.verisign.com
[215] provisioningapi-s1-db3r.microsoftonline.com
[216] d5f4f025-0622-4597-a7d0-ef02508f43fd.rms.eu.aadrm.com
[217] ocws.officeapps.live.com
[218] gj2.symcb.com
[219] *.powerapps.com
[220] kor.delve.office.com
[221] ac9acd0e-ce28-4dd3-bf45-51ceab2bc57d.rms.eu.aadrm.com
[222] accounts.accesscontrol.windows.net
[223] crl.geotrust.com
[224] *.office365.com
[225] vpssg141.crl.omniroot.com
[226] *.cloud.microsoft
[227] gcch-mtis.cortana.ai
[228] 7ff45490-2b94-4d4f-a778-a9084caa3557.rms.eu.aadrm.com
[229] *.officeapps.live.com
[230] ocsredir.officeapps.live.com
[231] templates.office.com
[232] nam.delve.office.com
[233] C1-excel-15.cdn.office.net
[234] az833206.vo.msecnd.net
[235] r.office.microsoft.com
[236] office.live.com
[237] cacert.a.mcs.omniroot.com
[238] s3-onenote-15.cdn.office.net
[239] appsforoffice.microsoft.com
[240] www.onenote.com
[241] *.portal.cloudappsecurity.com
[242] *cdn.onenote.net
[243] apis.live.net
[244] forms.office.com
[245] tj1.symcb.com
[246] gtssl2-crl.geotrust.com
[247] in2-rtc.officeapps.live.com
[248] www.onedrive.com
[249] cdn.uci.officeapps.live.com
[250] loropiana.emea.microsoftonline.com
[251] *.public-trust.com
[252] prod.msocdn.com
[253] sg1.symcb.com
[254] security.microsoft.com
[255] *.geotrust.com
[256] instance-eca.create.powerapps.com
[257] gj1.symcb.com
[258] ocsp.entrust.net
[259] account.office.net
[260] home.office.com
[261] az725175.vo.msecnd.net
[262] dgps.support.microsoft.com
[263] pca-g3-ocsp.geotrust.com
[264] *.aadrm.com
[265] az280429.vo.msecnd.net
[266] az384080.vo.msecnd.net
[267] ecn.dev.virtualearth.net
[268] portal.office.com
[269] companymanager.microsoftonline.com
[270] smtp.office365.com
[271] shellprod.msocdn.com
[272] se.symcd.com
[273] jpn.delve.office.com
[274] ccs.login.microsoftonline.com
[275] 18791d16-6306-48b5-bee6-d84af6ee50c3.rms.na.aadrm.com
[276] euc-powerpoint.officeapps.live.com
[277] secure.aadcdn.microsoftonline-p.com
[278] 06c80bf5-e43c-4f11-8894-4f5590df015d.rms.eu.aadrm.com
[279] netafim.us.portal.cloudappsecurity.com
[280] can.delve.office.com
[281] *.msftidentity.com
[282] admin.powerapps.com
[283] api.passwordreset.microsoftonline.com
[284] r1.res.office365.com
[285] e8608890-64b3-4386-aca1-5d8b278c51cf.rms.eu.aadrm.com
[286] manage.office.com
[287] cacert.a.omniroot.com
[288] account.activedirectory.windowsazure.com
[289] lpcres.delve.office.com
[290] login.microsoftonline-p.com
[291] ncu.hipipv4.client.hip.live.com
[292] az680633.vo.msecnd.net
[293] lam.delve.office.com
[294] outlook.office365.com
[295] res.office365.com
[296] *.security.microsoft.com
[297] secure.globalsign.com
[298] clientconfig.microsoftonline-p.net
[299] cacert.omniroot.com
[300] provisioningapi.microsoftonline.com
[301] *.entrust.net
[302] *.activity.windows.com
[303] adminwebservice.microsoftonline.com
[304] *.flow.microsoft.com
[305] 86d393c8-36bf-4b9c-bae7-fe891eaf0b7b.rms.eu.aadrm.com
[306] auc-word-edit.officeapps.live.com
[307] go.microsoft.com
[308] isrg.trustid.ocsp.identrust.com
[309] autodiscover.docusign2com.microsoftonline.com
[310] su.symcd.com
[311] crl.entrust.net
[312] videoplayercdn.osi.office.net
[313] evsecure-crl.geotrust.com
[314] neu-000.tasks.osi.office.net
[315] autodiscover.foviance.emea.microsoftonline.com
[316] msdn.microsoft.com
[317] technet.microsoft.com
[318] logincert.microsoftonline.com
[319] passwordreset.microsoftonline.com
[320] officecdn.microsoft.com.edgesuite.net
[321] 490f55cc-9f54-423d-932d-d098bf730bfe.rms.eu.aadrm.com
[322] c1.microsoft.com
[323] ocsp2.globalsign.com
[324] defender.microsoft.com
[325] *.symcd.com
[326] *.verisign.com
[327] privateott.entrust.net
[328] zim365.portal.cloudappsecurity.com
[329] www.microsoft.com
[330] autologon.microsoftazuread-sso.com
[331] az158878.vo.msecnd.net
[332] rapidssl-crl.geotrust.com
[333] ss1.symcb.com
[334] pfd.phonefactor.net
[335] www.microsoft365.com
[336] rapidssl-aia.geotrust.com
[337] ss2.symcb.com
[338] *.o365weve.com
[339] ocsa.officeapps.live.com
[340] connectivity.office.com
[341] *.msauth.net
[342] dod-mtis.cortana.ai
[343] o15.officeredir.microsoft.com
[344] pad.phonefactor.net
[345] apps.identrust.com
[346] vassg142.crl.omniroot.com
Domains name list for 'Microsoft Teams Worldwide Optional Services':
[1] cid-672d3bf398b72df2.users.storage.live.com
[2] cid-749ba581e42749c2.users.storage.live.com
[3] cid-6d735350b565c575.users.storage.live.com
[4] cid-d39d70c482d593ee.users.storage.live.com
[5] adl.windows.com
[6] cid-a65b6b7a2f86fd4c.users.storage.live.com
[7] cid-98e1181566f53e95.users.storage.live.com
[8] cid-49e6f53f568eed66.users.storage.live.com
[9] cid-51ca10ed35868a41.users.storage.live.com
[10] cid-ab9805ded4496c00.users.storage.live.com
[11] cid-3cdfffa9ac6ab132.users.storage.live.com
[12] cid-193d7751c51219f2.users.storage.live.com
[13] cid-3ffed883def8d40c.users.storage.live.com
[14] *.users.storage.live.com
[15] cid-ea105386703aa561.users.storage.live.com
[16] cid-358b7d1d86479f42.users.storage.live.com
[17] cid-c4a8f76a6f98a2f7.users.storage.live.com
[18] cid-a3c9ca954a7a9fba.users.storage.live.com
[19] cid-5731364cc9ee528f.users.storage.live.com
[20] cid-8a864a0b568ac3fa.users.storage.live.com
[21] cid-2b6b968d18917697.users.storage.live.com
[22] cid-639b3d0ead1964d3.users.storage.live.com
Domains name list for 'Microsoft Teams Worldwide Required Services':
[1] telemetry.tip.lync.com
[2] sipfed.online.lync.com
[3] *.secure.skypeassets.com
[4] feedback.skype.com
[5] acti-can-backup.broadcast.skype.com
[6] amssamples.streaming.mediaservices.windows.net
[7] *.keydelivery.mediaservices.windows.net
[8] teams.microsoft.com
[9] webpoolblu1a03.infra.lync.com
[10] portal.011d.dedicated.lync.com
[11] sipedgedb40e.infra.lync.com
[12] presence.teams.microsoft.com
[13] webpoolsg20f03.infra.lync.com
[14] mysettings.lync.com
[15] ltvideos.streaming.mediaservices.windows.net
[16] 52-114-124-226.relay.teams.microsoft.com
[17] apps.skype.com
[18] anhmediaservices.streaming.mediaservices.windows.net
[19] co1030dl50se01.030d.dedicated.lync.com
[20] mediatenaprod.streaming.mediaservices.windows.net
[21] wmvideocdn-wakatest.streaming.mediaservices.windows.net
[22] as-api.asm.skype.com
[23] cdn--audioagentmediaservices.streaming.mediaservices.windows.net
[24] prodxnews1.streaming.mediaservices.windows.net
[25] aka.ms
[26] jupyternootbookwams.streaming.mediaservices.windows.net
[27] bskamsprod.streaming.mediaservices.windows.net
[28] endpoint2-prdcaccompsvc.streaming.mediaservices.windows.net
[29] webpooldb41e03.infra.lync.com
[30] inviteconnector.skype.com
[31] mediatorkprod.streaming.mediaservices.windows.net
[32] sdvideo.streaming.mediaservices.windows.net
[33] sa1-urlp.secure.skypeassets.com
[34] *.streaming.mediaservices.windows.net
[35] teams.skype.com
[36] dialin2.lync.com
[37] broker.skype.com
[38] api.skype.com
[39] portal.056d.dedicated.lync.com
[40] norgesfilmegnetjenester.keydelivery.mediaservices.windows.net
[41] vmcsamsprodne.streaming.mediaservices.windows.net
[42] pipe.skype.com
[43] d2uql64hohb2up6nbhiymkz53e.streaming.mediaservices.windows.net
[44] ea1-urlp.secure.skypeassets.com
[45] cvprbl202m01.keydelivery.mediaservices.windows.net
[46] statics.teams.microsoft.com
[47] config.edge.skype.com
[48] sippoolme1au104.infra.lync.com
[49] 52-114-125-10.relay.teams.microsoft.com
[50] c-cc-euno-01.cc.skype.com
[51] bl2pv2.ng.msg.teams.microsoft.com
[52] natickmediaservices.streaming.mediaservices.windows.net
[53] *.skype.com
[54] mekazms.streaming.mediaservices.windows.net
[55] latest-swx.cdn.skype.com
[56] sn1027dl50se01.027d.dedicated.lync.com
[57] sippoolam30e21.infra.lync.com
[58] mlccdn.blob.core.windows.net
[59] prod.registrar.skype.com
[60] db3050dl50se01.050d.dedicated.lync.com
[61] endpoint2-prdneucompsvc.streaming.mediaservices.windows.net
[62] apac.presence.teams.microsoft.com
[63] c-broker-euwe-01.broker.skype.com
[64] tredge.online.lync.com
[65] mlccdnprod.azureedge.net
[66] broadcast.skype.com
[67] skypegraph.skype.com
[68] mediaservicesehc.streaming.mediaservices.windows.net
[69] *.teams.microsoft.com
[70] co1027dl50se02.027d.dedicated.lync.com
[71] compass-ssl.microsoft.com
[72] sippoolblu2a18.infra.lync.com
[73] swx.cdn.skype.com
[74] *.lync.com
[75] ch1003dl50se02.003d.dedicated.lync.com
Domains name list for 'Exchange Online Worldwide Optional Services':
[1] outlook.office365.com
[2] smtp.office365.com
Domains name list for 'Exchange Online Worldwide Required Services':
[1] *.mx.microsoft
[2] autodiscover.uniparts.onmicrosoft.com
[3] autodiscover.rvkassociates.onmicrosoft.com
[4] *.protection.outlook.com
[5] eur02.dataservice.protection.outlook.com
[6] w.outlook.com
[7] torres-se.mail.protection.outlook.com
[8] protection.outlook.com
[9] autodiscover.morweiss1.onmicrosoft.com
[10] r3.res.outlook.com
[11] syncservice.protection.outlook.com
[12] autodiscover.phillipscorp.mail.onmicrosoft.com
[13] autodiscover.*.onmicrosoft.com
[14] outlook.office.com
[15] autodiscover.hkw.onmicrosoft.com
[16] nam04.admin.protection.outlook.com
[17] autodiscover.vneo.onmicrosoft.com
[18] *.mail.protection.outlook.com
[19] gbr01.dataservice.protection.outlook.com
[20] apc01.admin.protection.outlook.com
[21] autodiscover.zensui01.onmicrosoft.com
[22] exap.um.outlook.com
[23] autodiscover.tagarkitekter.onmicrosoft.com
[24] autodiscover.nishinotekko.onmicrosoft.com
[25] outlook.cloud.microsoft
[26] eur02.admin.protection.outlook.com
[27] help.outlook.com
[28] eur01.admin.protection.outlook.com
[29] emea01.oscs.protection.outlook.com
[30] nam02.admin.protection.outlook.com
[31] dataservice.protection.outlook.com
[32] autodiscover.groupefigaro.mail.onmicrosoft.com
[33] apc01.dataservice.protection.outlook.com
[34] www.outlook.com
[35] eur01.dataservice.protection.outlook.com
[36] support.outlook.com
[37] autodiscover.misereor.onmicrosoft.com
[38] eur03.dataservice.protection.outlook.com
[39] can01.admin.protection.outlook.com
[40] autodiscover.tryangle.onmicrosoft.com
[41] autodiscover.somerstitlecompany.onmicrosoft.com
[42] na01.safelinks.protection.outlook.com
[43] autodiscover.eilatmuni.onmicrosoft.com
[44] autodiscover.underarmour.mail.onmicrosoft.com
[45] amxprd0510.outlook.com
[46] i3.help.outlook.com
[47] i2.help.outlook.com
[48] autodiscover.porcex.onmicrosoft.com
[49] admin.protection.outlook.com
[50] eur03.admin.protection.outlook.com
[51] autodiscover.vetterpharma.mail.onmicrosoft.com
[52] autodiscover.dealogic.onmicrosoft.com
[53] autodiscover.dyg365.mail.onmicrosoft.com
[54] eur03b.compliance.protection.outlook.com
[55] xsi.outlook.com
[56] autodiscover.mendoco.onmicrosoft.com
[57] nam04.dataservice.protection.outlook.com
[58] amsprd0411.outlook.com
[59] *.outlook.com
[Expert@CP-GW:0]#
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Here is the relevant SK. Office365 Third Party Domains' is no longer supported.
https://support.checkpoint.com/results/sk/sk182599
Regards,
Ikram