{"data":{"id":"intune-admin","name":"Intune-managed Windows devices","summary":"The Intune admin center plus what managed Windows devices need: enrollment and check-in, Win32 app and script delivery, push notifications, Autopilot, attestation, the Store API and optional Remote Help.","scenario":"Managed device","products":["intune","windows"],"lastReviewed":"2026-10-06","m365SetIds":[163,164,165,169,171,173,186,192],"endpointVersion":"2026081400","missingSetIds":[],"references":[{"url":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#consolidated-endpoint-list","title":"Network endpoints for Microsoft Intune: consolidated endpoint list (FQDNs and IP subnets)"},{"url":"https://learn.microsoft.com/en-us/entra/global-secure-access/scripts/powershell-add-internet-access-device-compliance-bypasses","title":"Global Secure Access sample script: add Intune device compliance bypasses to Internet Access"},{"url":"https://learn.microsoft.com/en-us/autopilot/requirements?tabs=networking#service-requirements","title":"Windows Autopilot networking requirements"}],"notes":"Intune says the endpoint web service lists alone are insufficient and to use its consolidated list, so the entries follow the Intune page. The MEM sets add the service IP ranges; stale sets 170, 179 and 182 (azureedge.net hosts) are not referenced. Do not TLS-inspect *.manage.microsoft.com, *.dm.microsoft.com, the attestation hosts or the Store API, and allow HTTP partial responses for script and Win32 app content. Some tasks need unauthenticated proxy access to manage.microsoft.com, *.azureedge.net and graph.microsoft.com.","entries":[{"destination":"intune.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Intune admin center","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/account-sign-up#intune-admin-portal-url","sourceTitle":"Sign up or sign in to Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"The admin center also needs the Entra sign-in endpoints and graph.microsoft.com. It appears to use the Azure portal framework hosts in the entra-admin bundle; Microsoft does not document that."},{"destination":"*.manage.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[80,443],"purpose":"Intune client and host service: enrollment, check-in, policy, IME/Win32 content (AFD)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":163,"placeholders":[],"notes":"M365 endpoint set 163 (Allow, required). Intune states SSL/TLS inspection is not supported for this endpoint. Covers all *.manage.microsoft.com hosts listed below."},{"destination":"manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Intune client and host service (apex)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":163,"placeholders":[],"notes":"M365 endpoint set 163. Page also says some tasks require unauthenticated proxy access to manage.microsoft.com."},{"destination":"*.dm.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[80,443],"purpose":"Intune / Defender for Endpoint security settings management / Endpoint Privilege Management enrollment, check-in and reporting","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Listed in set 163 on the Intune page but NOT in live API set 163. Also listed in #microsoft-defender-for-endpoint and #microsoft-intune-endpoint-privilege-management. Intune states SSL/TLS inspection is not supported for this endpoint."},{"destination":"EnterpriseEnrollment.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Windows MDM enrollment discovery","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Page-only (not in live API set 163); covered by *.manage.microsoft.com."},{"destination":"graph.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Microsoft Graph (Intune requires unauthenticated proxy access for some tasks; admin center data plane)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#access-for-managed-devices","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":56,"placeholders":[],"notes":"Ports taken from M365 Common set 56, which contains graph.microsoft.com; the Intune page states only the unauthenticated-proxy requirement."},{"destination":"*.azureedge.net","kind":"WildcardFqdn","protocol":null,"ports":[],"purpose":"Legacy Azure CDN (Intune says some tasks require unauthenticated proxy access)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#access-for-managed-devices","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Undetermined","acquisitionConfidence":"Possible","acquisitionBasis":"Broader than the Microsoft 365 entries it includes (such as set 27): those parts are expected to go to a Microsoft profile and the rest to Internet Access.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Very broad shared CDN wildcard. Intune Win32/IME/AOSP content has moved to *.manage.microsoft.com hosts on the current page; only add if a specific failure needs it. No ports stated."},{"destination":"go.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Endpoint discovery","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":89,"placeholders":[],"notes":"Intune page set 190; set 190 does not exist in the live MEM API (go.microsoft.com is in Common set 89)."},{"destination":"config.edge.skype.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Feature deployment / flighting dependency","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Teams / Skype endpoint set 127 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":189,"placeholders":[],"notes":"Set 189. Page marks Required; live API marks set 189 required=false with note: feature flighting may not function if not included."},{"destination":"ecs.office.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Feature deployment dependency","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 147 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Set 189 on the Intune page only; not in live API set 189."},{"destination":"fd.api.orgmsg.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Organizational messages","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":192,"placeholders":[],"notes":"Set 192 (required per page and API); only exercised if organizational messages are used."},{"destination":"ris.prod.api.personalization.ideas.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Organizational messages","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":192,"placeholders":[],"notes":"Set 192."},{"destination":"account.live.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft account / device authentication","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 97 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":97,"placeholders":[],"notes":"Set 97 (M365 Common service area; API marks it optional for Outlook mobile, Intune page marks Required)."},{"destination":"login.live.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft account / device authentication; Windows Autopilot deployment service","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 97 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":97,"placeholders":[],"notes":"Set 97. Autopilot requirements also list https://login.live.com for the Autopilot Deployment Service."},{"destination":"swda01-mscdn.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Win32 app content CDN (MEM - Win32Apps)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Set 170 (API still lists legacy *-mscdn.azureedge.net). Covered by *.manage.microsoft.com."},{"destination":"swda02-mscdn.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Win32 app content CDN (MEM - Win32Apps)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Set 170 (API still lists legacy *-mscdn.azureedge.net). Covered by *.manage.microsoft.com."},{"destination":"swdb01-mscdn.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Win32 app content CDN (MEM - Win32Apps)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Set 170 (API still lists legacy *-mscdn.azureedge.net). Covered by *.manage.microsoft.com."},{"destination":"swdb02-mscdn.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Win32 app content CDN (MEM - Win32Apps)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Set 170 (API still lists legacy *-mscdn.azureedge.net). Covered by *.manage.microsoft.com."},{"destination":"swdc01-mscdn.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Win32 app content CDN (MEM - Win32Apps)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Set 170 (API still lists legacy *-mscdn.azureedge.net). Covered by *.manage.microsoft.com."},{"destination":"swdd01-mscdn.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Win32 app content CDN (MEM - Win32Apps)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Set 170 (API still lists legacy *-mscdn.azureedge.net). Covered by *.manage.microsoft.com."},{"destination":"swdd02-mscdn.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Win32 app content CDN (MEM - Win32Apps)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Set 170 (API still lists legacy *-mscdn.azureedge.net). Covered by *.manage.microsoft.com."},{"destination":"swdin01-mscdn.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Win32 app content CDN (MEM - Win32Apps)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Set 170 (API still lists legacy *-mscdn.azureedge.net). Covered by *.manage.microsoft.com."},{"destination":"swdin02-mscdn.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Win32 app content CDN (MEM - Win32Apps)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Set 170 (API still lists legacy *-mscdn.azureedge.net). Covered by *.manage.microsoft.com."},{"destination":"swdc02-mscdn.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Win32 app content CDN (MEM - Win32Apps)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/entra/global-secure-access/scripts/powershell-add-internet-access-device-compliance-bypasses#sample-script","sourceTitle":"Add Intune device compliance bypasses to Global Secure Access Internet Access","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Intune page set 170 contains a typo for this host (\"swdc02-mscdn.manage.microsoft<.com\"), so the GSA script is cited for the exact string. Covered by *.manage.microsoft.com."},{"destination":"aam-content-cdn.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Enterprise App Catalog app content","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#intune-core-service","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Set 170; page says only for Enterprise App Catalog apps. Covered by *.manage.microsoft.com."},{"destination":"imeswda-afd-primary.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Intune Management Extension CDN (North America tenants): Win32 apps, PowerShell scripts, remediations, custom compliance","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#network-requirements-for-powershell-scripts-and-win32-apps","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Only needed for tenants in North America. Proxy must allow HTTP partial responses (byte ranges). Covered by *.manage.microsoft.com."},{"destination":"imeswda-afd-secondary.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Intune Management Extension CDN (North America tenants): Win32 apps, PowerShell scripts, remediations, custom compliance","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#network-requirements-for-powershell-scripts-and-win32-apps","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Only needed for tenants in North America. Proxy must allow HTTP partial responses (byte ranges). Covered by *.manage.microsoft.com."},{"destination":"imeswda-afd-hotfix.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Intune Management Extension CDN (North America tenants): Win32 apps, PowerShell scripts, remediations, custom compliance","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#network-requirements-for-powershell-scripts-and-win32-apps","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Only needed for tenants in North America. Proxy must allow HTTP partial responses (byte ranges). Covered by *.manage.microsoft.com."},{"destination":"imeswdb-afd-primary.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Intune Management Extension CDN (Europe tenants): Win32 apps, PowerShell scripts, remediations, custom compliance","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#network-requirements-for-powershell-scripts-and-win32-apps","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Only needed for tenants in Europe. Proxy must allow HTTP partial responses (byte ranges). Covered by *.manage.microsoft.com."},{"destination":"imeswdb-afd-secondary.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Intune Management Extension CDN (Europe tenants): Win32 apps, PowerShell scripts, remediations, custom compliance","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#network-requirements-for-powershell-scripts-and-win32-apps","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Only needed for tenants in Europe. Proxy must allow HTTP partial responses (byte ranges). Covered by *.manage.microsoft.com."},{"destination":"imeswdb-afd-hotfix.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Intune Management Extension CDN (Europe tenants): Win32 apps, PowerShell scripts, remediations, custom compliance","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#network-requirements-for-powershell-scripts-and-win32-apps","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Only needed for tenants in Europe. Proxy must allow HTTP partial responses (byte ranges). Covered by *.manage.microsoft.com."},{"destination":"imeswdc-afd-primary.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Intune Management Extension CDN (Asia Pacific tenants): Win32 apps, PowerShell scripts, remediations, custom compliance","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#network-requirements-for-powershell-scripts-and-win32-apps","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Only needed for tenants in Asia Pacific. Proxy must allow HTTP partial responses (byte ranges). Covered by *.manage.microsoft.com."},{"destination":"imeswdc-afd-secondary.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Intune Management Extension CDN (Asia Pacific tenants): Win32 apps, PowerShell scripts, remediations, custom compliance","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#network-requirements-for-powershell-scripts-and-win32-apps","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Only needed for tenants in Asia Pacific. Proxy must allow HTTP partial responses (byte ranges). Covered by *.manage.microsoft.com."},{"destination":"imeswdc-afd-hotfix.manage.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Intune Management Extension CDN (Asia Pacific tenants): Win32 apps, PowerShell scripts, remediations, custom compliance","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#network-requirements-for-powershell-scripts-and-win32-apps","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Only needed for tenants in Asia Pacific. Proxy must allow HTTP partial responses (byte ranges). Covered by *.manage.microsoft.com."},{"destination":"go-amer.trouter.communications.svc.cloud.microsoft","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Listed with IME CDN and Remote Help endpoints (NA / rest of world tenants)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#network-requirements-for-powershell-scripts-and-win32-apps","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 184 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Region-specific. Page lists it in the IME regional table and in Remote Help set 181 but does not state its purpose."},{"destination":"go-eu.trouter.communications.svc.cloud.microsoft","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Listed with IME CDN and Remote Help endpoints (EU tenants)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#network-requirements-for-powershell-scripts-and-win32-apps","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 184 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Region-specific. Page lists it in the IME regional table and in Remote Help set 181 but does not state its purpose."},{"destination":"go-apac.trouter.communications.svc.cloud.microsoft","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Listed with IME CDN and Remote Help endpoints (APAC tenants)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#network-requirements-for-powershell-scripts-and-win32-apps","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 184 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Region-specific. Page lists it in the IME regional table and in Remote Help set 181 but does not state its purpose."},{"destination":"*.events.data.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"IME client health diagnostics; Endpoint analytics; EPM reporting","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#network-requirements-for-powershell-scripts-and-win32-apps","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":69,"placeholders":[],"notes":"Optional (Endpoint analytics). Endpoint analytics prerequisites list https://*.events.data.microsoft.com (https://learn.microsoft.com/en-us/intune/endpoint-analytics/#prerequisites). Also in Remote Help set 181 and EPM section."},{"destination":"login.microsoftonline.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Microsoft Entra authentication","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#authentication-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"EntraSystem","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 endpoint set 56, one of the Entra identity sets. Microsoft documents that the always-on Entra system profile covers sign-in and Graph, and that the Microsoft traffic profile is built from this list, so it is expected to be taken before Internet Access. Microsoft publishes neither profile's host list.","expectedAtWebFiltering":false,"m365SetId":56,"placeholders":[],"notes":"Set 56 (Common). Full set 56 in API has more identity FQDNs."},{"destination":"graph.windows.net","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Azure AD Graph (Entra) dependency","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#authentication-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"EntraSystem","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 endpoint set 56, one of the Entra identity sets. Microsoft documents that the always-on Entra system profile covers sign-in and Graph, and that the Microsoft traffic profile is built from this list, so it is expected to be taken before Internet Access. Microsoft publishes neither profile's host list.","expectedAtWebFiltering":false,"m365SetId":56,"placeholders":[],"notes":"Set 56 (Common)."},{"destination":"enterpriseregistration.windows.net","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Entra device registration","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#authentication-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"EntraSystem","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 endpoint set 59, one of the Entra identity sets. Microsoft documents that the always-on Entra system profile covers sign-in and Graph, and that the Microsoft traffic profile is built from this list, so it is expected to be taken before Internet Access. Microsoft publishes neither profile's host list.","expectedAtWebFiltering":false,"m365SetId":59,"placeholders":[],"notes":"Set 59 (Common)."},{"destination":"certauth.enterpriseregistration.windows.net","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Entra device registration (certificate auth)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#authentication-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Page-only; not in live API set 59."},{"destination":"config.office.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Office Customization Service (M365 Apps policy)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#authentication-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 147 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Set 150; category Default, not marked Required."},{"destination":"*.officeconfig.msocdn.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Office Customization Service","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#authentication-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 78 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Set 150; not marked Required."},{"destination":"*.notify.windows.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Windows Push Notification Services (device actions, immediate sync)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-push-notification-services-wns-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 171 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":171,"placeholders":[],"notes":"Set 171. WNS docs: direct connection recommended; WNS may not support proxies. Page also lists sin.notify.windows.com (covered)."},{"destination":"*.wns.windows.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Windows Push Notification Services client channel","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-push-notification-services-wns-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 SharePoint endpoint set 35 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":35,"placeholders":[],"notes":"Set 171. Page also lists sinwns1011421.wns.windows.com (covered). See https://learn.microsoft.com/en-us/windows/apps/develop/notifications/push-notifications/firewall-allowlist-config#fqdns-vips-ips-and-ports."},{"destination":"*.do.dsp.mp.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[80,443],"purpose":"Delivery Optimization cloud service","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#delivery-optimization-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":164,"placeholders":[],"notes":"Set 172 (page-only; not in live API) and API set 164. Must bypass TLS inspection (certificate pinning on geo.prod.do.dsp.mp.microsoft.com and array*.prod.do.dsp.mp.microsoft.com) and must not have client IP altered: https://learn.microsoft.com/en-us/windows/deployment/do/delivery-optimization-proxy#endpoints-to-exempt-from-tls-inspection"},{"destination":"*.dl.delivery.mp.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[80,443],"purpose":"Delivery Optimization metadata / Windows and Store content","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#delivery-optimization-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":164,"placeholders":[],"notes":"Sets 172/164. Content is largely plain HTTP (port 80); proxy must allow byte-range requests."},{"destination":"*.windowsupdate.com","kind":"WildcardFqdn","protocol":"TCP","ports":[80,443],"purpose":"Windows Update (Autopilot dependency)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 164 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":164,"placeholders":[],"notes":"Set 164. Windows docs list this as HTTP; port 80 must be allowed."},{"destination":"*.prod.do.dsp.mp.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[80,443],"purpose":"Delivery Optimization service (Autopilot dependency)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Set 164 on page (API uses *.do.dsp.mp.microsoft.com instead). Covered by *.do.dsp.mp.microsoft.com. No TLS inspection."},{"destination":"*.delivery.mp.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[80,443],"purpose":"Windows Update / Store delivery (Autopilot dependency)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Set 164 on page; not in live API set 164."},{"destination":"*.update.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[80,443],"purpose":"Windows Update service (Autopilot dependency)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":164,"placeholders":[],"notes":"Set 164."},{"destination":"tsfe.trafficshaping.dsp.mp.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Windows Update traffic shaping / content regulation","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":164,"placeholders":[],"notes":"Set 164."},{"destination":"adl.windows.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Windows compatibility database updates","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Teams / Skype endpoint set 19 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":19,"placeholders":[],"notes":"Set 164."},{"destination":"dl.delivery.mp.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Windows Update / Delivery Optimization content (apex host)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#consolidated-endpoint-list","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":164,"placeholders":[],"notes":"In live API set 164 and the consolidated list, not in the per-section tables."},{"destination":"time.windows.com","kind":"Fqdn","protocol":"UDP","ports":[123],"purpose":"NTP time sync (Autopilot)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 165 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":165,"placeholders":[],"notes":"Set 165. UDP only."},{"destination":"clientconfig.passport.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot WNS dependency","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 169 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":169,"placeholders":[],"notes":"Set 169."},{"destination":"windowsphone.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot WNS dependency","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 169 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":169,"placeholders":[],"notes":"Set 169."},{"destination":"*.s-microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot WNS dependency","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 169 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":169,"placeholders":[],"notes":"Set 169. Page also lists c.s-microsoft.com (covered)."},{"destination":"ekop.intel.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Intel firmware TPM EK certificate retrieval (Autopilot self-deploying / pre-provisioning)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 173 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":173,"placeholders":[],"notes":"Set 173. Autopilot requirements: https://ekop.intel.com/ekcertservice."},{"destination":"ekcert.spserv.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Qualcomm firmware TPM EK certificate retrieval","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":173,"placeholders":[],"notes":"Set 173."},{"destination":"ftpm.amd.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"AMD firmware TPM EK certificate retrieval","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 173 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":173,"placeholders":[],"notes":"Set 173."},{"destination":"*.microsoftaik.azure.net","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"TPM attestation (Autopilot self-deploying mode and pre-provisioning)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/autopilot/requirements?tabs=networking#service-requirements","sourceTitle":"Windows Autopilot requirements","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Not in the Intune page or MEM API. Page says HTTPS URLs."},{"destination":"ztd.dds.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Windows Autopilot Deployment Service","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/autopilot/requirements?tabs=networking#service-requirements","sourceTitle":"Windows Autopilot requirements","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Listed as https://ztd.dds.microsoft.com. Not in the Intune page or MEM API."},{"destination":"*.msftconnecttest.com","kind":"WildcardFqdn","protocol":"TCP","ports":[80],"purpose":"Network Connection Status Indicator (Autopilot requires internet detection)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/autopilot/requirements?tabs=networking#service-requirements","sourceTitle":"Windows Autopilot requirements","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"HTTP-only: page says it must be resolvable via DNS and accessible via HTTP."},{"destination":"lgmsapeweu.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot automatic diagnostics upload (legacy host)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/autopilot/requirements?tabs=networking#service-requirements","sourceTitle":"Windows Autopilot requirements","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 182 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":182,"placeholders":[],"notes":"Still in Autopilot requirements and live API set 182, but the Intune page set 182 now lists region-specific amsu*lmsas hosts instead."},{"destination":"amsua0101lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsua0102lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsua0201lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsua0202lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsua0401lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsua0402lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsua0501lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsua0502lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsua0601lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsua0602lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsua0701lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsua0702lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsua0801lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsua0901lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsua0902lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsub0101lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsub0102lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsub0201lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsub0202lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsub0301lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsub0302lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsub0501lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsub0502lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsub0601lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsub0701lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsub0801lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsub0901lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsuc0101lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsuc0201lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsuc0301lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsuc0501lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsuc0601lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsud0101lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"amsuin01lmsas.blob.core.windows.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Autopilot / collect-diagnostics upload storage (region-specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#windows-autopilot-dependencies","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Set 182 (Intune page only; not in live API). Page marks Required; false here: non-blocking, tenant-region host only."},{"destination":"intunemaape1.eus.attest.azure.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Azure Attestation for Windows 11 compliance Device Health settings (tenant-region specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#migrating-device-health-attestation-compliance-policies-to-microsoft-azure-attestation","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 186 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":186,"placeholders":[],"notes":"Set 186. Needed for Device Health compliance settings; tenant-region host only. No SSL inspection."},{"destination":"intunemaape2.eus2.attest.azure.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Azure Attestation for Windows 11 compliance Device Health settings (tenant-region specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#migrating-device-health-attestation-compliance-policies-to-microsoft-azure-attestation","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 186 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":186,"placeholders":[],"notes":"Set 186. Needed for Device Health compliance settings; tenant-region host only. No SSL inspection."},{"destination":"intunemaape3.cus.attest.azure.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Azure Attestation for Windows 11 compliance Device Health settings (tenant-region specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#migrating-device-health-attestation-compliance-policies-to-microsoft-azure-attestation","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 186 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":186,"placeholders":[],"notes":"Set 186. Needed for Device Health compliance settings; tenant-region host only. No SSL inspection."},{"destination":"intunemaape4.wus.attest.azure.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Azure Attestation for Windows 11 compliance Device Health settings (tenant-region specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#migrating-device-health-attestation-compliance-policies-to-microsoft-azure-attestation","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 186 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":186,"placeholders":[],"notes":"Set 186. Needed for Device Health compliance settings; tenant-region host only. No SSL inspection."},{"destination":"intunemaape5.scus.attest.azure.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Azure Attestation for Windows 11 compliance Device Health settings (tenant-region specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#migrating-device-health-attestation-compliance-policies-to-microsoft-azure-attestation","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 186 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":186,"placeholders":[],"notes":"Set 186. Needed for Device Health compliance settings; tenant-region host only. No SSL inspection."},{"destination":"intunemaape7.neu.attest.azure.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Azure Attestation for Windows 11 compliance Device Health settings (tenant-region specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#migrating-device-health-attestation-compliance-policies-to-microsoft-azure-attestation","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 186 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":186,"placeholders":[],"notes":"Set 186. Needed for Device Health compliance settings; tenant-region host only. No SSL inspection."},{"destination":"intunemaape8.neu.attest.azure.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Azure Attestation for Windows 11 compliance Device Health settings (tenant-region specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#migrating-device-health-attestation-compliance-policies-to-microsoft-azure-attestation","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 186 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":186,"placeholders":[],"notes":"Set 186. Needed for Device Health compliance settings; tenant-region host only. No SSL inspection."},{"destination":"intunemaape9.neu.attest.azure.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Azure Attestation for Windows 11 compliance Device Health settings (tenant-region specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#migrating-device-health-attestation-compliance-policies-to-microsoft-azure-attestation","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 186 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":186,"placeholders":[],"notes":"Set 186. Needed for Device Health compliance settings; tenant-region host only. No SSL inspection."},{"destination":"intunemaape10.weu.attest.azure.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Azure Attestation for Windows 11 compliance Device Health settings (tenant-region specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#migrating-device-health-attestation-compliance-policies-to-microsoft-azure-attestation","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 186 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":186,"placeholders":[],"notes":"Set 186. Needed for Device Health compliance settings; tenant-region host only. No SSL inspection."},{"destination":"intunemaape11.weu.attest.azure.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Azure Attestation for Windows 11 compliance Device Health settings (tenant-region specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#migrating-device-health-attestation-compliance-policies-to-microsoft-azure-attestation","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 186 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":186,"placeholders":[],"notes":"Set 186. Needed for Device Health compliance settings; tenant-region host only. No SSL inspection."},{"destination":"intunemaape12.weu.attest.azure.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Azure Attestation for Windows 11 compliance Device Health settings (tenant-region specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#migrating-device-health-attestation-compliance-policies-to-microsoft-azure-attestation","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 186 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":186,"placeholders":[],"notes":"Set 186. Needed for Device Health compliance settings; tenant-region host only. No SSL inspection."},{"destination":"intunemaape13.jpe.attest.azure.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Azure Attestation for Windows 11 compliance Device Health settings (tenant-region specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#migrating-device-health-attestation-compliance-policies-to-microsoft-azure-attestation","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 186 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":186,"placeholders":[],"notes":"Set 186. Needed for Device Health compliance settings; tenant-region host only. No SSL inspection."},{"destination":"intunemaape17.jpe.attest.azure.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Azure Attestation for Windows 11 compliance Device Health settings (tenant-region specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#migrating-device-health-attestation-compliance-policies-to-microsoft-azure-attestation","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 186 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":186,"placeholders":[],"notes":"Set 186. Needed for Device Health compliance settings; tenant-region host only. No SSL inspection."},{"destination":"intunemaape18.jpe.attest.azure.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Azure Attestation for Windows 11 compliance Device Health settings (tenant-region specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#migrating-device-health-attestation-compliance-policies-to-microsoft-azure-attestation","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 186 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":186,"placeholders":[],"notes":"Set 186. Needed for Device Health compliance settings; tenant-region host only. No SSL inspection."},{"destination":"intunemaape19.jpe.attest.azure.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Azure Attestation for Windows 11 compliance Device Health settings (tenant-region specific)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#migrating-device-health-attestation-compliance-policies-to-microsoft-azure-attestation","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 186 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":186,"placeholders":[],"notes":"Set 186. Needed for Device Health compliance settings; tenant-region host only. No SSL inspection."},{"destination":"intunemaape6.ncus.attest.azure.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft Azure Attestation (North America)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#migrating-device-health-attestation-compliance-policies-to-microsoft-azure-attestation","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Listed in the MAA section and GSA script but NOT in live API set 186 nor the Intune consolidated list."},{"destination":"displaycatalog.mp.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Microsoft Store API (AppInstallManager) catalog","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#microsoft-store","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Needed when deploying Microsoft Store apps. Intune: SSL inspection not supported for Store API endpoints."},{"destination":"purchase.md.mp.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Microsoft Store API purchase/acquisition","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#microsoft-store","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Intune: SSL inspection not supported."},{"destination":"licensing.mp.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Microsoft Store API licensing","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#microsoft-store","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Intune: SSL inspection not supported."},{"destination":"storeedgefd.dsx.mp.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Microsoft Store API front door","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#microsoft-store","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Intune: SSL inspection not supported."},{"destination":"cdn.storeedgefd.dsx.mp.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80,443],"purpose":"Microsoft-hosted Win32 Store app fallback cache","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#microsoft-store","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Win32 Store app installers otherwise download from publisher-specific URLs (winget show [PackageId])."},{"destination":"*.support.services.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":181,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"teams.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Teams / Skype endpoint set 12 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":12,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"remoteassistanceprodacs.communication.azure.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 181 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":181,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"edge.skype.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Teams / Skype endpoint set 127 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":181,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"aadcdn.msftauth.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"EntraSystem","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 endpoint set 59, one of the Entra identity sets. Microsoft documents that the always-on Entra system profile covers sign-in and Graph, and that the Microsoft traffic profile is built from this list, so it is expected to be taken before Internet Access. Microsoft publishes neither profile's host list.","expectedAtWebFiltering":false,"m365SetId":null,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"aadcdn.msauth.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"EntraSystem","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 endpoint set 59, one of the Entra identity sets. Microsoft documents that the always-on Entra system profile covers sign-in and Graph, and that the Microsoft traffic profile is built from this list, so it is expected to be taken before Internet Access. Microsoft publishes neither profile's host list.","expectedAtWebFiltering":false,"m365SetId":null,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"alcdn.msauth.net","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"EntraSystem","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 endpoint set 59, one of the Entra identity sets. Microsoft documents that the always-on Entra system profile covers sign-in and Graph, and that the Microsoft traffic profile is built from this list, so it is expected to be taken before Internet Access. Microsoft publishes neither profile's host list.","expectedAtWebFiltering":false,"m365SetId":null,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"wcpstatic.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":181,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"*.aria.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":69,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"*.monitor.azure.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 181 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":181,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"edge.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":181,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"*.trouter.communication.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":181,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"*.trouter.teams.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Teams / Skype endpoint set 12 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":181,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"*.trouter.communications.svc.cloud.microsoft","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 184 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"api.flightproxy.skype.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Teams / Skype endpoint set 127 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":181,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"ecs.communication.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":181,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"remotehelp.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":181,"placeholders":[],"notes":"Set 181 (page marks Required for Remote Help)."},{"destination":"remoteassistanceprodacseu.communication.azure.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 181 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":181,"placeholders":[],"notes":"Set 181; EU customers only."},{"destination":"*.trouter.skype.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help (optional feature)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/entra/global-secure-access/scripts/powershell-add-internet-access-device-compliance-bypasses#sample-script","sourceTitle":"Add Intune device compliance bypasses to Global Secure Access Internet Access","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Teams / Skype endpoint set 127 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":181,"placeholders":[],"notes":"In live API set 181 and the GSA script, but no longer on the Intune Remote Help table."},{"destination":"*.webpubsub.azure.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Remote Help web pubsub","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#remote-help","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 187 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":187,"placeholders":[],"notes":"Set 187. Live API note: Android Remote Help requires this endpoint. Page also lists AMSUA0101-RemoteAssistService-pubsub.webpubsub.azure.com (covered)."},{"destination":"*.powershellgallery.com","kind":"WildcardFqdn","protocol":null,"ports":[],"purpose":"Listed in Intune consolidated FQDN list (purpose not stated)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#consolidated-endpoint-list","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Appears only in the consolidated list; no section, set ID, port or purpose is given. Not in the MEM API."},{"destination":"cdn.oneget.org","kind":"Fqdn","protocol":null,"ports":[],"purpose":"Listed in Intune consolidated FQDN list (purpose not stated)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#consolidated-endpoint-list","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"InternetAccess","acquisitionConfidence":"Likely","acquisitionBasis":"Not in the Microsoft 365 endpoint list the Microsoft traffic profile is built from, so it is expected to go through the Internet Access profile when that profile is on. Not confirmed: the Entra system profile's hosts aren't published.","expectedAtWebFiltering":true,"m365SetId":null,"placeholders":[],"notes":"Appears only in the consolidated list; no section, set ID, port or purpose is given. Not in the MEM API."},{"destination":"aka.ms","kind":"Fqdn","protocol":null,"ports":[],"purpose":"Listed in Intune consolidated FQDN list (purpose not stated)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/intune/fundamentals/endpoints#consolidated-endpoint-list","sourceTitle":"Network endpoints for Microsoft Intune","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Teams / Skype endpoint set 17 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":17,"placeholders":[],"notes":"Appears only in the consolidated list; no section, set ID, port or purpose is given. Not in the MEM API."},{"destination":"*.emdl.ws.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[80,443],"purpose":"Windows Update / Delivery Optimization download (GSA bypass list)","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/entra/global-secure-access/scripts/powershell-add-internet-access-device-compliance-bypasses#sample-script","sourceTitle":"Add Intune device compliance bypasses to Global Secure Access Internet Access","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Only in the GSA bypass script (rule ports 80/443). emdl.ws.microsoft.com itself is HTTP-only per Windows Update troubleshooting."},{"destination":"emdl.ws.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80],"purpose":"Windows Update download endpoint","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/troubleshoot/windows-client/installing-updates-features-roles/windows-update-issues-troubleshooting#device-cant-access-update-files","sourceTitle":"Windows Update issues troubleshooting","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"HTTP-only (Windows Update troubleshooting says HTTP; do not force HTTPS). Also in GSA script. Not on the Intune page."},{"destination":"104.208.197.64/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"104.46.162.96/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"13.67.13.176/28","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"13.67.15.128/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"13.69.231.128/28","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"13.69.67.224/28","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"13.70.78.128/28","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"13.70.79.128/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"13.74.111.192/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"13.77.53.176/28","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"13.86.221.176/28","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"13.89.174.240/28","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"13.89.175.192/28","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"172.160.217.160/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"172.201.237.160/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"172.202.86.192/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"172.205.63.0/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"172.212.214.0/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"172.215.131.0/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.168.189.128/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.189.172.160/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.189.229.0/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.191.167.0/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.192.159.40/29","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.192.174.216/29","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.199.207.192/28","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.204.193.10/31","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.204.193.12/30","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.204.194.128/31","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.208.149.192/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.208.157.128/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.214.131.176/29","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.37.153.0/24","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.37.192.128/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.38.81.0/24","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.41.1.0/24","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.42.1.0/24","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.42.130.0/24","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.42.224.128/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.43.129.0/24","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.44.19.224/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"20.91.147.72/29","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"4.145.74.224/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"4.150.254.64/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"4.154.145.224/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"4.200.254.32/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"4.207.244.0/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"4.213.25.64/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"4.213.86.128/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"4.216.205.32/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"4.237.143.128/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"40.119.8.128/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"40.67.121.224/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"40.70.151.32/28","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"40.71.14.96/28","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"40.74.25.0/24","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"40.78.245.240/28","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"40.78.247.128/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"40.79.197.64/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"40.79.197.96/28","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"40.80.180.208/28","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"40.80.180.224/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"40.80.184.128/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"40.82.248.224/28","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"40.82.249.128/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"40.84.70.128/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"48.218.252.128/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"52.150.137.0/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"52.162.111.96/28","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"52.168.116.128/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"52.182.141.192/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"52.236.189.96/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"52.240.244.160/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"57.151.0.192/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"57.153.235.0/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"57.154.140.128/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"57.154.195.0/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"57.155.45.128/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"68.218.134.96/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"74.224.214.64/27","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null},{"destination":"74.242.35.0/25","kind":"Ipv4Cidr","protocol":"TCP","ports":[80,443],"purpose":"MEM endpoint set 163 (Allow)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://endpoints.office.com/endpoints/Worldwide","sourceTitle":"Microsoft 365 endpoint web service, Worldwide version 2026081400, set 163","acquisition":"Microsoft365","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 163 (Allow category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":false,"m365SetId":163,"placeholders":[],"notes":null}],"evidence":{"confidence":"Current","sources":[{"sourceId":"m365-endpoints-worldwide","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.692576+00:00"}],"note":null}},"metadata":{"apiVersion":"1","snapshotId":"8262706f51794f7db21e8bd3f982b386","refreshedAt":"2026-10-07T05:10:36.5571664+00:00","observingSince":"2026-09-26T17:11:44.4078421+00:00","evaluatedAt":"2026-10-07T05:19:02.1406706+00:00","evidence":{"confidence":"Current","sources":[{"sourceId":"windows-itpro","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"microsoft-security-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"azure-updates","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"microsoft-365-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"exchange-team-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"intune-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"entra-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-xdr-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-server-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"powershell-team-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"microsoft-security-blog-main","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"teams-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"sharepoint-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-cloud-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"sentinel-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"avd-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"azure-arc-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"configmgr-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"sql-server-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"onedrive-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"fabric-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"powerbi-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"power-platform-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"azure-governance-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"core-infrastructure-security-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"askds","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"itops-talk-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"sysinternals-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-insider-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-experience-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"security-baselines-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"azure-infrastructure-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"microsoft-365-developer-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"purview-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-endpoint-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"entra-identity-platform-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"azure-devops-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"jamf-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"jamf-status-history","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"oracle-security-alerts","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"cloudflare-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"openai-news","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"google-gemini-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"evotec-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"office365itpros","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"oofhours","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"msendpointmgr","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"andrewstaylor","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"jeffreyappel","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"askwoody","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"borncity","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"petri","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"patchmypc","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"dynamics-365-product-updates","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"practical365","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"call4cloud","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"dirteam-sander","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"chrisse","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"dotnet-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"jan-bakker","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"adsecurity","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"maester-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"entra-news","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"nathan-mcnulty","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"graph-changelog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"msrc-security-updates","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"msrc-cvrf","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"cisa-kev","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"first-epss","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"public-exploit-code","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"microsoft-365-roadmap","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-known-issues","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"microsoft-lifecycle","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"edge-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"m365-apps-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"teams-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-updates","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"exchange-builds","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"sharepoint-builds","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"sql-server-builds","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"dotnet-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-admx","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"powershell-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"graph-powershell-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"az-powershell-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"entra-powershell-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"psresourceget-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"psreadline-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"azure-cli-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-terminal-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"winget-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"vscode-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"exchange-online-powershell-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"teams-powershell-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"chrome-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"firefox-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"apple-security-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"oracle-java-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"jamf-pro-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"android-security-bulletins","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"vmware-esxi-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"vmware-vcenter-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"pnp-powershell-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"pester-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"dbatools-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"maester-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"adessentials-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"gpozaurr-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"testimo-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"mailozaurr-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"pswritehtml-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"pswriteoffice-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"psparsehtml-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"pspublishmodule-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"pseventviewer-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"dnsclientx-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"cleanupmonster-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"openai-models","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"anthropic-models","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"gemini-models","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"global-secure-access-client-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"global-secure-access-macos-client-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"global-secure-access-connector-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"global-secure-access-sensor-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-endpoint-android-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-endpoint-ios-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-endpoint-windows-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-endpoint-macos-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-endpoint-linux-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"intune-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"entra-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-xdr-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"purview-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-identity-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-office-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-cloud-apps-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-cloud-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"sentinel-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-365-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"avd-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"copilot-studio-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"azure-arc-agent-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"openai-api-changelog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"claude-release-notes","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"gemini-api-changelog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-message-center","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-11-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-10-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-server-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"azure-service-tags-public","confidence":"Current","lastReadAt":"2026-10-06T08:00:54.1096255+00:00"},{"sourceId":"m365-endpoints-worldwide","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.692576+00:00"},{"sourceId":"outlook-known-issues","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6927646+00:00"},{"sourceId":"excel-known-issues","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6928023+00:00"},{"sourceId":"graph-known-issues","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6928251+00:00"},{"sourceId":"identity-breaking-changes","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6928362+00:00"},{"sourceId":"powershell-releases","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6928574+00:00"},{"sourceId":"graph-powershell-releases","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.692893+00:00"},{"sourceId":"azure-cli-releases","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6929108+00:00"},{"sourceId":"azure-public-incidents","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6929236+00:00"},{"sourceId":"azure-incident-reviews","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6930439+00:00"},{"sourceId":"security-baseline-artifacts","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6930828+00:00"},{"sourceId":"entra-connect-releases","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6931216+00:00"},{"sourceId":"intune-notices","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2521163+00:00"},{"sourceId":"intune-in-development","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2521393+00:00"},{"sourceId":"autopilot-whats-new","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2521479+00:00"},{"sourceId":"autopilot-preparation-whats-new","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2521673+00:00"},{"sourceId":"windows-365-enterprise-known-issues","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2521731+00:00"},{"sourceId":"windows-365-business-known-issues","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2526882+00:00"},{"sourceId":"fabric-whats-new","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2527703+00:00"},{"sourceId":"windows-server-feature-deprecations","confidence":"Current","lastReadAt":"2026-10-07T01:05:54.6161314+00:00"},{"sourceId":"learn-toc-global-secure-access","confidence":"Current","lastReadAt":"2026-10-06T16:26:11.8566792+00:00"},{"sourceId":"learn-toc-intune","confidence":"Current","lastReadAt":"2026-10-06T16:26:11.8586908+00:00"},{"sourceId":"learn-toc-entra-conditional-access","confidence":"Current","lastReadAt":"2026-10-06T16:26:11.8587896+00:00"},{"sourceId":"learn-toc-entra-authentication","confidence":"Current","lastReadAt":"2026-10-06T16:26:11.8588521+00:00"},{"sourceId":"learn-toc-defender-endpoint","confidence":"Current","lastReadAt":"2026-10-06T16:26:11.858887+00:00"},{"sourceId":"learn-toc-windows-deployment","confidence":"Current","lastReadAt":"2026-10-06T16:26:11.8589176+00:00"},{"sourceId":"learn-toc-windows-client-management","confidence":"Current","lastReadAt":"2026-10-06T16:26:11.8589415+00:00"},{"sourceId":"vmware-security-advisories","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6931636+00:00"},{"sourceId":"product-terms-feed","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2528034+00:00"},{"sourceId":"product-terms-mca","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2529033+00:00"},{"sourceId":"partner-announcements","confidence":"Current","lastReadAt":"2026-10-06T23:03:56.4694574+00:00"}],"note":null}}}