Allow access to Microsoft 365 via NSG service tags to virtual machines.

Rahamim Levi 156

Hi all,

Is there a way to limit virtual machines http traffic to Microsoft services only (SharePoint, Exchange, etc...) via NSG?

We don't want to open http to any traffic.

Thanks, Rahamim.

KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2023-10-13T05:45:45.47+00:00

@Rahamim Levi

Reaching out to check if there are any questions on this.

Please let us know if we can be of any further assistance here.

Thanks,

Kapil
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2023-10-16T10:15:50.5566667+00:00

@Rahamim Levi

I have converted my comment to a new answer.

I would highly appreciate if you could Accept the answer and close this thread

Original posters help the community find answers faster by identifying the correct answer.

Thanks,

Kapil
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2023-10-18T09:35:53.3733333+00:00

@Rahamim Levi

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,

Kapil

1 answer

KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2023-10-12T06:48:05.2233333+00:00
@Rahamim Levi

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I understand that you would like to know if we can only allow access to Microsoft services using NSG.

Currently, this won't be feasible using NSG.

We do not have an explicit Service Tag that we can use in an NSG for Office365 services currently.

However, you can do this by using an Azure Firewall.

You can find a list of Office 365 URLs and IP address ranges here.

You must configure the Azure Firewall to only allow the above URLs and IP address ranges.

These below documents may come in handy:

What is Azure Firewall?

Deploy and configure Azure Firewall using the Azure portal

Azure Firewall Policy rule sets

Rule processing using Firewall Policy

Hope this helps.

Please let me know should you require more information.

Cheers,

Kapil
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Your answer