Microsoft IP-ranges

Question

Hello community,

I am currently running a new data center with Zer-Trust.

For my servers, I now need activations in the direction of MS, which I would like to map collectively in a proxy.

To do this, I need the mirrors from MS as FQDN with port, log... I need the addresses for the following products:

• PSGalley, NuGet, CMLets, Smartscreen, Chocolatey, WindowsUpdate.

The current search on the World Wide Web, as with MS itself, has so far been in circles and I cannot find a valid list of nodes for DE or Europe.

Can this be provided?

Thank you in advance.

REFENTRY: https://answers.microsoft.com/de-de/windows/forum/windows_other-networking/microsoft-ip-ranges-f%C3%BCr-ms-services/879af014-861a-4561-90d9-aeb07b360795

Answer 1

Microsoft publishes a JSON file containing the required FQDNs and IP ranges for the Windows Update service. You can download it here:

https://endpoints.office.com/endpoints/worldwide?clientrequestid=b10c5ed1-bad1-445f-b386-b919946339a7

Other Microsoft services (like Office 365), you can find the required endpoints, ports, and IP ranges here:

https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide

You should allow access to the following FQDNs on port 443 for SmartScreen service:

• *.smartscreen.microsoft.com
• *.smartscreen-prod.microsoft.com

NuGet: api.nuget.org

Chocolatey: chocolatey.org

hope this list helps