Adding new consolidated infra IPs to the portal access and SIEM agent connection sections
From Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Rollout
Rollout dates are often only in the text. When Microsoft moves them, the change shows under "What changed".
What the notice says
Microsoft’s text, safely structuredNew IPs have been added to the portal access and SIEM agent connection sections in the Microsoft Defender for Cloud Apps network requirements.
When this will happen
Available now.
How this will affect your organization
We recently added new IPs to the portal access and SIEM agent connection sections in the Microsoft Defender for Cloud Apps network requirements page: Network requirements. To ensure unaffected work with Microsoft Defender for Cloud apps please take the time to allow the new IPs. These IPs will start serving customers in 30 days from now.
What you need to do to prepare
Please take the time to allow the new IPs as detailed in portal access and SIEM agent connection sections in Network requirements page.
What changed
Between archive captures, newest first… agent connection sections in the Microsoft Defender for Cloud Apps network requirements.
When[When this willhappen:happen:] Available now.How[How this will affect yourorganization:organization:] We recently added new IPs to the portal access and SIEM agent … IPs. These IPs will start serving customers in 30 days from now.What[What you need to do toprepare:prepare:] Please take the time to allow the new IPs as detailed in …- · first version seen
Learn more
Links from the notice and their documentation checks- Network requirementsChecked 15 Nov 2026
- Network requirementsChecked 15 Nov 2026
Related public changes
- Official documentation · 12 Oct 2026Defender for Cloud Apps network requirements Shared reference: https://learn.microsoft.com/en-us/defender-cloud-apps/network-requirements
Not confirmed here
What this page cannot tell you- Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.