{
  "name": "ChangeIntel Defender for Identity sensor",
  "policyRules": [
    {
      "@odata.type": "#microsoft.graph.networkaccess.fqdnFilteringRule",
      "name": "ChangeIntel Defender for Identity sensor FQDNs",
      "ruleType": "fqdn",
      "destinations": [
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.atp.azure.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "crl.microsoft.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "ctldl.windowsupdate.com"
        }
      ]
    },
    {
      "@odata.type": "#microsoft.graph.networkaccess.urlDestinationFilteringRule",
      "name": "ChangeIntel Defender for Identity sensor URLs",
      "ruleType": "url",
      "destinations": [
        {
          "@odata.type": "#microsoft.graph.networkaccess.url",
          "value": "www.microsoft.com/pkiops/*"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.url",
          "value": "www.microsoft.com/pki/*"
        }
      ]
    }
  ],
  "action": "allow"
}