{
  "name": "ChangeIntel Entra Cloud Sync agent",
  "policyRules": [
    {
      "@odata.type": "#microsoft.graph.networkaccess.fqdnFilteringRule",
      "name": "ChangeIntel Entra Cloud Sync agent FQDNs",
      "ruleType": "fqdn",
      "destinations": [
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.msappproxy.us"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.servicebus.usgovcloudapi.net"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "mscrl.microsoft.us"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "crl.microsoft.us"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "ocsp.msocsp.us"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "www.microsoft.us"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "login.windows.us"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "secure.aadcdn.microsoftonline-p.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.microsoftonline.us"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.microsoftonline-p.us"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.msauth.net"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.msauthimages.net"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.msecnd.net"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.msftauth.net"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.msftauthimages.net"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.phonefactor.net"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "enterpriseregistration.windows.net"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "management.azure.com"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "policykeyservice.dc.ad.msft.net"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "ctldl.windowsupdate.us"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "aadcdn.msftauthimages.us"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "*.microsoft.us"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "msauthimages.us"
        },
        {
          "@odata.type": "#microsoft.graph.networkaccess.fqdn",
          "value": "msftauthimages.us"
        }
      ]
    }
  ],
  "action": "allow"
}