MS O365 ip address range

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

MS O365 ip address range

L4 Transporter

Hi

 

Any one know if PA have a dynmic range that covers MS ip address range.

 

Seems like the sort of thing that would be easy to implement and would save me a lot of time.

A

2 ACCEPTED SOLUTIONS

Accepted Solutions

@Alex_Samad,

Highly recommend spinning up MineMeld and simply using that to find the Office 365 addresses as it allow you to do a number of other EDL list mining to form usefull EDLs that can be utilized throughout the firewall. 

View solution in original post

Use Minemeld! You'll see that it will be useful in quite a few other situations than simply for o365.

 

(Or vote for FR ID 9113 and wait for the implementation)

View solution in original post

7 REPLIES 7

Cyber Elite
Cyber Elite

hi @Alex_Samad

 

There are only dynamic lists for malicious IPs provided by Palo Alto Networks, but you can easily get external dynamic lists and import them through an EDL object

Tom Piens
PANgurus - (co)managed services and consultancy

I do not have an instance to test, but you can create an O365 list in minemeld:

 

https://live.paloaltonetworks.com/t5/MineMeld-Articles/How-to-Safely-Enable-access-to-Office-365-usi...

 

In the past I have used the API and a powershell script to pull the list from Microsoft and create a dynamic address list from that, here are a few articles to point you in the right general direction:

https://support.office.com/en-us/article/office-365-urls-and-ip-address-ranges-8548a211-3fe7-47cb-ab...

https://gallery.technet.microsoft.com/office/Get-Office-365-IP-v4-562987d5

 

A smiliar strategy could be used to dump the list to an EDL if you have somewhere available to host it.

@Alex_Samad,

Highly recommend spinning up MineMeld and simply using that to find the Office 365 addresses as it allow you to do a number of other EDL list mining to form usefull EDLs that can be utilized throughout the firewall. 

Use Minemeld! You'll see that it will be useful in quite a few other situations than simply for o365.

 

(Or vote for FR ID 9113 and wait for the implementation)

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!