EDL Category Explanation - Teams

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

EDL Category Explanation - Teams

L1 Bithead

Hi

Can someone explain the difference between the EDL categories published as part of the EDL Hosting Service

I.e. looking at the Teams worldwide IPv4 EDLs, there are 4 categories (Base, Allow, Optimise & Required). 

The EDL Hosting page doesn't state the difference between each. 

EDL Hosting Service (paloaltonetworks.com)

 

Once all duplicates are removed, the Base, Allow & Required lists have the exact same 16 entries (as of 16th Jan 2024).  Therefore, why are there separate lists, was there ever an intended difference that has been lost over time?

 

Also the differences for the URL EDLs.  i.e. the Teams URL EDLs, do have differences.  What is the reason, is there a recommended one to use.

 

Any help to clear this up appreciated.

 

Thanks

1 accepted solution

Accepted Solutions

Cyber Elite
Cyber Elite

that's actually how microsoft lists them:

 

https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worl...

 

optimize are the ones they recommend you not decrypt and where possible split tunnel for direct access versus via tunnel)

required are the minimum ones you need to get teams to work

 

allow and default somewhat overlap and some of both are in the "required"

the leftovers i assume are for certain functionality/accessibility (MS lists contact pictures retrieval and conference room systems)

 

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

View solution in original post

2 REPLIES 2

Cyber Elite
Cyber Elite

that's actually how microsoft lists them:

 

https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worl...

 

optimize are the ones they recommend you not decrypt and where possible split tunnel for direct access versus via tunnel)

required are the minimum ones you need to get teams to work

 

allow and default somewhat overlap and some of both are in the "required"

the leftovers i assume are for certain functionality/accessibility (MS lists contact pictures retrieval and conference room systems)

 

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

L1 Bithead

Thanks for the information.  Didn't realise it's how Microsoft classes them, just assumed it was a Palo Alto classification.   I have now found Microsoft guidelines on this also. i.e.

Office 365 URLs and IP address ranges - Microsoft 365 Enterprise | Microsoft Learn

  • 1 accepted solution
  • 440 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!