topic Re: No sound/video MS Teams while using minemeld to pull Microsoft IP's in General Topics

No sound/video MS Teams while using minemeld to pull Microsoft IP's

JonasVanraes — Tue, 08 Jan 2019 10:12:23 GMT

Hi,

When we start a teams meeting we have no sound or video, one to one call works!

We use minemeld with palo alto to get list of allowed microsoft IP's.

But we see requests to the following microsoft IP's that are not in this list:

51.144.76.36
51.144.127.181
213.119.108.243
146.20.192.75
146.20.192.80
146.20.192.79
62.109.232.228
74.125.134.86
51.145.129.18
170.194.22.165
62.109.232.153
62.109.233.9
62.109.232.147
62.109.232.179
74.125.134.85
51.144.120.18
51.145.140.46
51.144.73.16
51.145.133.231
51.145.155.38
51.145.152.56
51.145.131.96
51.145.159.119
40.91.200.78
155.56.38.222
51.144.75.67
62.109.233.161
62.109.229.193
51.145.153.45
51.145.129.235
131.180.0.234
131.180.0.209
10.21.15.32
40.70.40.66
62.109.232.253
62.109.209.17
74.125.134.87
62.109.209.32
62.109.233.215

We got confirmation from Microsoft that the above IP's must be whitelisted too.

Is this an issue from minemeld side or microsoft side that these IP's aren't present in the list that minemeld pulls from micrsoft?

Thanks in advance

Kind regards

Jonas Vanraes

Re: No sound/video MS Teams while using minemeld to pull Microsoft IP's

lmori — Tue, 08 Jan 2019 12:02:54 GMT

Hi @JonasVanraes,

thank you for reporting this. These IPs are not present in the original feed from MSFT. I will report them, but before could you give me additional details?

- I see that some of the IPs are actually owned by Cisco for WebEx. How did you collect the IPs?

- Did you also use URLs? IPs are not enough usually

Thanks,

Luigi

Re: No sound/video MS Teams while using minemeld to pull Microsoft IP's

JonasVanraes — Tue, 08 Jan 2019 12:43:09 GMT

Hi @lmori

Thanks for the quick answer!

We let the users setup a team session with video/sound and we looked in our palo alto logging to see which IP's were contacted at that specific moment.

Probably we took to much IP's out of the logging and therefor there are some cisco webex IP's in it too.
These can be ignored, sorry for that.

And yes we use the msft_office365_ipv4 list and the msft_office365_url list

Thanks in advance

Kind Regards

Jonas Vanraes