Microsoft IP ranges and FQDN-s in outgoing rules

Goran_A — Thu, 01 Oct 2020 02:13:38 GMT

Hi all,

must be someone had similar thoughts too,

we have a customer who'd like to secure outgoing traffic, by specifying not only applications, but also restrict destination FQDN-s and/or IP ranges.

Issue with Microsoft is that their FQDN-s, and moreover IP public ranges, change monthly.

I was just wandering if there is a smart way to address this issue?

Is there any feature in roadmap, possibly getting a pre-defined range for Microsoft, that gets dynamically updated, just like country IP ranges?

Thanks,

Alex

Re: Microsoft IP ranges and FQDN-s in outgoing rules

rmfalconer — Thu, 01 Oct 2020 16:53:48 GMT

Is the goal to allow access to only specific tenants within MS? There are some things you can do with header insertion in URL profiles to provide access only to sanctioned Microsoft resources that match your policy.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POJACA4

topic Microsoft IP ranges and FQDN-s in outgoing rules in General Topics

Microsoft IP ranges and FQDN-s in outgoing rules

Re: Microsoft IP ranges and FQDN-s in outgoing rules