Network
What changed in Microsoft's published endpoints and Azure service tags, and lists your firewall or proxy can read straight from here.
Observed changes
No change observed yet. The first read of each source is a baseline; changes show here from Microsoft's next publication.
Lists for firewalls and proxies
One value per line, refreshed as Microsoft publishesPoint an external list in your firewall or proxy at one of these addresses. Each holds Microsoft's values exactly as published, for the selection you make. When Microsoft cannot be read, the last good list keeps being served; a selection that matches nothing answers "not found" instead of an empty list, so a device keeps what it had.
Using a list on your device
- FortiGate
- External threat feeds (external connectors) can read IP address and domain name lists from a URL.
- Palo Alto Networks
- External Dynamic Lists can read IP, domain and URL lists from a URL.
- Check Point
- Network Feed objects can read a list from a URL.
- Proxies and others
- A device that reads a list of one value per line over HTTPS may be able to use these. Wildcards stay as Microsoft publishes them (*.example.com); how a device matches them varies.
- Global Secure Access
- Microsoft documents no way for a web filtering policy to read a list from a URL; the access bundles export rules in the V1 and V2 web filtering formats to paste or import.
These are the vendors' feature names, not tested setups; formats, limits and menu paths depend on the device and its version, so follow its documentation. ChangeIntel checks Microsoft 365 endpoints hourly and Azure service tags daily, so polling more often brings nothing new.