port whitelist regarding

nandhitha nanni 0

https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide Hi Team,

Over this article we could notice that you have mentioned to whitelist certain domains over the port 80 which uses HTTP. Could you please let us know in detail, why this HTTP is required to be whitelisted. Since in our org the HTTP is strongly restricted.

If there is any article which explain the same, would be highly helpful.

Thanks in advance

1 answer

Jiajing Hua-MFST 10,645 Reputation points Microsoft Vendor

2024-09-10T02:57:12.03+00:00

Hi @nandhitha nanni

As these URLs and IP addresses are related to the Cloud Services of Office apps and other Microsoft 365 products, such as the Translate in Word.

(For more such intelligent services of Office apps, please refer to: https://support.microsoft.com/en-gb/office/work-smarter-with-intelligent-services-4145a3f6-2d98-44db-8a8d-c77343eb90f1)

If you block these URLs and IP addresses, some cloud services may be blocked.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
nandhitha nanni 0 Reputation points

2024-09-10T05:53:32.7+00:00

Hi Jiajing,

Thank you for your response. I understand that these URLs and IP addresses are linked to Microsoft 365 cloud services, and blocking them could disrupt certain functionalities. However, since our organization has strict policies restricting HTTP traffic, I’d like to clarify the following:

Is HTTP specifically required for initial communication or metadata retrieval, or are there particular services that exclusively depend on HTTP?

Are all the services reliant on HTTP (port 80) available via HTTPS (port 443) as well? If not, could you provide more details on which services explicitly require HTTP?

Is there any documentation or guidance available from Microsoft explaining the security considerations for allowing HTTP traffic for these services, while still maintaining security standards in restricted environments like ours?

Any further explanation or articles on how to manage these URLs with strict HTTP restrictions would be helpful. We are trying to understand how to balance functionality with security policies.

Thank you in advance for your assistance!

Jiajing Hua-MFST 10,645 Reputation points Microsoft Vendor

2024-09-12T08:59:16.8133333+00:00

Hi，

Sorry, I currently don't find further information about what services are specific to the Http protocol.

But from what I've observed, Port 443 is used for every Microsoft 365 Common and Office Online ID. If you need to enable some "Required" services, you can try to allow HTTPS (port 443) traffic first.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

port whitelist regarding

1 answer

Your answer