article Nominated Discussion: Dynamically Update Microsoft Office URLs and IPs in General Articles

article Nominated Discussion: Dynamically Update Microsoft Office URLs and IPs in General Articles https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-dynamically-update-microsoft-office-urls/ta-p/514953 <P><STRONG><EM><I data-stringify-type="italic">This article is based on a discussion,<SPAN><A title=" Dynamically update Microsoft Office URLs and IPs " href="https://live.paloaltonetworks.com/t5/general-topics/dynamically-update-microsoft-office-urls-and-ips/td-p/514659" target="_blank" rel="noopener"> Dynamically update Microsoft Office URLs and IPs </A>,</SPAN></I><I data-stringify-type="italic"> posted by <A href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/140372" target="_blank" rel="noopener">@Benzito</A> </I><I data-stringify-type="italic">and answered by <A href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/192693" target="_blank" rel="noopener">@PavelK</A>, <A href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/43480" target="_blank" rel="noopener">@BPry</A> and <A href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/184804" target="_blank" rel="noopener">@Adrian_Jensen</A>.</I><I data-stringify-type="italic"> Read on to see the discussion and solution!</I></EM></STRONG></P> <P> </P> <DIV class="lia-message-template-content-zone"> <BLOCKQUOTE> <P><SPAN>Does anyone have any suggestions to dynamically update Microsoft Office 365 (including Sharepoint and Teams) URLs and IPs? Having to update a list of IPs and URLs is impractical and time consuming. Microsoft keeps updating their backend infrastructure through various CDNs, and having to update this has been time-consuming and tedious. How are other users managing this? With MineMeld "deprecated" to GitHub, is there a better option than MineMeld or is that still the best option?<BR /></SPAN></P> </BLOCKQUOTE> <P>Palo Alto Networks has hosted EDL for this purpose: <STRONG><A title=" EDL Hosting Service Helps to Safely Enable Microsoft 365 " href="https://live.paloaltonetworks.com/t5/blogs/edl-hosting-service-helps-to-safely-enable-microsoft-365/ba-p/410972" target="_blank" rel="noopener">EDL Hosting Service Helps to Safely Enable Microsoft 365 </A></STRONG></P> <P>It is automatically updated without manual intervention.</P> <P> </P> <BLOCKQUOTE> <P>Is there a way to add an EDL list to the GlobalProtect client gateway config for split tunneling IPs? I can add static/FQDN address objects and address groups to the tplit tunnel access route include/exclude lists, but the EDL objects do not come up. Likewise I can't add an EDL object to an address group either.</P> </BLOCKQUOTE> <P> </P> <P>There's currently not a way to use an EDL for either purpose. Microsoft actually already publishes optimization URLs and IPs that you can use that account for the majority of 365 traffic. <STRONG><A title="Implementing VPN split tunneling for Microsoft 365" href="https://docs.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-vpn-implement-split-tunnel?view=o365-worldwide" target="_blank" rel="noopener">Implementing VPN split tunneling for Microsoft 365</A></STRONG> is really all you should need in this regard. Microsoft makes a point to keep these the same so you don't have to always be on the lookup to keep them updated. </P> </DIV> Thu, 15 Sep 2022 15:13:29 GMT kiwi 2022-09-15T15:13:29Z Nominated Discussion: Dynamically Update Microsoft Office URLs and IPs https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-dynamically-update-microsoft-office-urls/ta-p/514953 <P> </P> <DIV id="ConnectiveDocSignExtentionInstalled" data-extension-version="1.0.4"> </DIV> Thu, 15 Sep 2022 15:13:29 GMT https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-dynamically-update-microsoft-office-urls/ta-p/514953 kiwi 2022-09-15T15:13:29Z