{
  "name": "ChangeIntel Azure Arc-enabled servers",
  "policyRules": [
    {
      "@odata.type": "#microsoft.graph.networkaccess.fqdnFilteringRule",
      "name": "ChangeIntel Azure Arc-enabled servers FQDNs",
      "ruleType": "fqdn",
      "destinations": [
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "download.microsoft.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "packages.microsoft.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "login.microsoftonline.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.login.microsoft.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "pas.windows.net"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "management.azure.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.his.arc.azure.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.guestconfiguration.azure.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "guestnotificationservice.azure.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.guestnotificationservice.azure.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.servicebus.windows.net"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.waconazure.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "dc.services.visualstudio.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "dls.microsoft.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "eastus2.login.microsoft.com"
        }
      ]
    },
    {
      "@odata.type": "#microsoft.graph.networkaccess.urlDestinationFilteringRule",
      "name": "ChangeIntel Azure Arc-enabled servers URLs",
      "ruleType": "url",
      "destinations": [
        {
          "@odata.type": "#microsoft.graph.networkaccess.url",
          "value": "https://graph.microsoft.com/"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.url",
          "value": "www.microsoft.com/pkiops/certs"
        }
      ]
    }
  ],
  "action": "allow"
}