Microsoft Azure Datacenter IP Ranges

cancel
Showing results for 
Search instead for 
Did you mean: 

Microsoft Azure Datacenter IP Ranges

L1 Bithead

Hi Luigi,

 

One of my customers needs to allow traffic to Microsoft Azure Datacenter IP Ranges for Microsoft Power Bi. Any plans to add a miner for it?

The URL source is http://www.microsoft.com/EN-US/DOWNLOAD/confirmation.aspx?id=41653

The file is in XML format

I tried to create a new prototype but I couldn't find an XML class. Are you planning to add it?

 

Thanks,

14 REPLIES 14

Can anybody suggest where I can learn about how to apply/modify the mentioned  "output node input filter capabilities"?     I guess my question is -- where would I put input filter code such as is shown here?  

 

Thanks,

It would like something like this

 

nodes:
  azure_cloudIPs:
    inputs: []
    output: true
    prototype: azure.cloudIPs
  cloud_IPv4s:
    inputs:
      - azure_cloudIPs
    output: true
    prototype: stdlib.aggregatorIPv4Generic
  azure_IPv4s:
    inputs:
      - cloud_IPv4s
    output: false
    prototype: stdlib.feedHCWithValue
  azure_uksouth_IPv4s:
    inputs:
      - cloud_IPv4s
    output: false
    prototype: stdlib.feedHCWithValue
    config:
infilters: - actions: - accept conditions: - __method == 'withdraw' name: accept withdraws - actions: - accept conditions: - azure_region == 'uksouth' - share_level == 'green' name: accept azure IP for region uksouth - actions: - drop name: drop all

 

Hi All

 

I've got a follow on to this discussion.  I've tried the Azure IP miner and it works nicely, but it doesn't give the level of granularity that I need.  It lists prefixes by azure region, but not by Azure service.

 

I need to end with a list of IP addresses by PaaS service, specifically storage & sql in my case.  There is a differnet url that holds all the prefixes in json format here - https://www.microsoft.com/en-us/download/confirmation.aspx?id=56519

 

Does anyone have a miner prototype that can do this?

 

Thanks

Thanks for the suggestion, I opened a FR to track this: https://github.com/PaloAltoNetworks/minemeld-core/issues/311

Hello,

did you see the link used will be deprecated by June 30, 2020

 

IP Ranges for each cloud, broken down by region and by the tagged services in that cloud are now available on MS Download: Public: https://www.microsoft.com/en-us/download/details.aspx?id=56519
US Gov: http://www.microsoft.com/en-us/download/details.aspx?id=57063
Germany: http://www.microsoft.com/en-us/download/details.aspx?id=57064
China: http://www.microsoft.com/en-us/download/details.aspx?id=57062

These JSON files are updated weekly and include versioning both for the full file and each individual service tag in that file. The “AzureCloud” tag provides the IP ranges for that entire cloud (Public, USGov, Germany, China) and is also broken out by region within that cloud. Finally, the list of service tags in the file will be increasing as we’re constantly onboarding new azure teams to service tags.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!