Azure Firewall - web categories

Question

When configuring a rule with destination type set to "Web categories", is there way to get an actual IP list behind those categories ? Ideally via an API ?

Answer 1

Hello @Peter Stieber

Unfortunately, Azure Firewall allows you to define rules using predefined web categories (e.g., "Social Media", "News", etc.) as destination types. However, Microsoft does not publicly expose the underlying IP address lists for these categories directly. This is because the IPs behind web categories are dynamic and managed internally by Microsoft, and they can change frequently.

---

I hope this has been helpful!

If above is unclear and/or you are unsure about something add a comment below.

Please don’t forget to close the thread by clicking "Accept the answer" and "Yes" wherever the information provided helps you, as this can be beneficial to other community members.

Answer 2

Hi, you can’t. Microsoft doesn’t release any IP or URL list for Web Categories: the azureWebCategories API only allows you to list category names or ask for a single URL to be classified, nothing more; resolutions happen at runtime and the detail only appears in the firewall application logs (WebCategory field); if you need a static IP list, you’ll have to use a third-party feed.