We would like to retrieve IP addresses from O365, but only for a specific endpoint set (in that instance, endpoint set 56 which is related to O365 authentication (login.microsoft.com etc.), as you can see here: https://docs.microsoft.com/en-us/office365/enterprise/urls-and-ip-address-ranges)
What is the best way to achieve this? Create a new class based on the O365-API one and modify the code so that instead of retrieving all the IP addresses, we would only retrieve the IP addresses in endpoint set 56? Or add filters in an existing prototype / node and do something similar to this thread? https://live.paloaltonetworks.com/t5/MineMeld-Discussions/Cannot-apply-advanced-filters-for-O365-API-feeds/m-p/233214#M2592
I am sorry I did not understand in this thread where the "infilters" would need to be configured in the UI, and how instead of "condition Express Route" I could add "condition: endpoint set ID: 56".
Thanks and Regards,
... View more