@Brandon_Wertz: We added those previously and nothing - traffic was still blocked for some or other reason In the end we resolved this by adding every IPv4 address MS has listed to Addresses with an appropriate Tag. In Address Groups we created a Dynamic Group based on the aforementioned Tag. In Policies we allowed for the Address Group. And now our clients are able to authenticate the Office 365 license. The authentication process is ridiculousloy slow though. With all traffic enabled, license authentication takes a second or two. With the internet restricted and this rule in place...it takes 2 - 3 minutes to authenticate. Very strange this, not to sure where the optimisation must be done. As we only need to get a license, we only added all IPs relating to Portal and ID. (Ps: But...to cover our bases - I have also added the IPv6 to Addresses, URLs to URL Category and created an Application Group based on the needed O365 applications in the PAN-2020. Nothing wrong with a little overkill 😉 Cheers and thanks for the help Anthony
... View more