{
  "name": "ChangeIntel Azure Arc-enabled servers",
  "policyRules": [
    {
      "@odata.type": "#microsoft.graph.networkaccess.fqdnFilteringRule",
      "name": "ChangeIntel Azure Arc-enabled servers FQDNs",
      "ruleType": "fqdn",
      "destinations": [
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "download.microsoft.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "packages.microsoft.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "login.microsoftonline.us"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "pasff.usgovcloudapi.net"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "management.usgovcloudapi.net"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.his.arc.azure.us"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.guestconfiguration.azure.us"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.blob.core.usgovcloudapi.net"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "dc.applicationinsights.us"
        }
      ]
    },
    {
      "@odata.type": "#microsoft.graph.networkaccess.urlDestinationFilteringRule",
      "name": "ChangeIntel Azure Arc-enabled servers URLs",
      "ruleType": "url",
      "destinations": [
        {
          "@odata.type": "#microsoft.graph.networkaccess.url",
          "value": "www.microsoft.com/pkiops/certs"
        }
      ]
    }
  ],
  "action": "allow"
}