Dynamically update Microsoft Office URLs and IPs

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
Palo Alto Networks Approved
Palo Alto Networks Approved
Community Expert Verified
Community Expert Verified

Dynamically update Microsoft Office URLs and IPs

L1 Bithead

Does anyone have any suggestions to dynamically update Microsoft Office 365 (including Sharepoint and Teams) URLs and IPs? Having to update a list of IPs and URLs is impractical and time consuming. Microsoft keeps updating their backend infrastructure through various CDNs, and having to update this has been time-consuming and tedious. How are other users managing this? With MineMeld "deprecated" to GitHub, is there a better option than MineMeld or is that still the best option?

2 accepted solutions

Accepted Solutions

Cyber Elite
Cyber Elite

Hello @Benzito

 

Palo Alto has hosted EDL for this purpose: https://live.paloaltonetworks.com/t5/blogs/edl-hosting-service-helps-to-safely-enable-microsoft-365/...

It is automatically updated without manual intervention.

 

Kind Regards

Pavel

Help the community: Like helpful comments and mark solutions.

View solution in original post

Cyber Elite
Cyber Elite

@Adrian_Jensen,

There's currently not a way to use an EDL for either purpose. Microsoft actually already  publishes optimization URLs and IPs that you can use that account for the majority of 365 traffic. That information is available HERE and is really all you should need in this regard. Microsoft makes a point to keep these the same so you don't have to always be on the lookup to keep them updated. 

View solution in original post

4 REPLIES 4

Cyber Elite
Cyber Elite

Hello @Benzito

 

Palo Alto has hosted EDL for this purpose: https://live.paloaltonetworks.com/t5/blogs/edl-hosting-service-helps-to-safely-enable-microsoft-365/...

It is automatically updated without manual intervention.

 

Kind Regards

Pavel

Help the community: Like helpful comments and mark solutions.

L6 Presenter

@PavelK 

 

Interesting. Is there a way to add an EDL list to the GlobalProtect client gateway config for split tunneling IPs? I can add static/FQDN address objects and address groups to the tplit tunnel access route include/exclude lists, but the EDL objects do not come up. Likewise I can't add an EDL object to an address group either.

Cyber Elite
Cyber Elite

@Adrian_Jensen,

There's currently not a way to use an EDL for either purpose. Microsoft actually already  publishes optimization URLs and IPs that you can use that account for the majority of 365 traffic. That information is available HERE and is really all you should need in this regard. Microsoft makes a point to keep these the same so you don't have to always be on the lookup to keep them updated. 

L1 Bithead

Many thanks, for those great and helpful answers!

  • 2 accepted solutions
  • 3707 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!