Maintained Lists Content Overview available ?

[marcus69]

Hi Guys,

i've just imported the most recent Version of the Ruleset "Bypass Microsoft (Office 365) Services" out of the MWG Library. So all the required Maintained Lists are subscribed and up to Date.

But recently we again encounter Problems with Activation of Office 365 Pro through Webgateway.

A Ruletrace shows up that obviously Microsoft has established new IP-Adresses that does not seem to be covered unsing the current Content of the subscribed lists on Office 365:

I've disovered a few of them beeing in another List (e.g. Microsoft Azure Datacenter IP Ranges) that are currently not referenced by the defauft O365 Bypass Ruleset. Also there are a lot of other subscribable Microsoft Lists. Of course i only want to subscribe the lists that are necessary, and not everything, and i do not want to reinvent the wheel by creating my own Custom lists, not knowing that the affected IP is already in another subscribable list that i do not know of.

Long Story short: Does somebody know if there is a Website or a Database where all Content of the Webgateways McAfee Maintained List is listed in order to check, if the required IP is already in one of the lists ?

Best Regards,
    Marcus

[mkutrieba]

Hello,

there is not website where you can check the live status of available lists containing IP's and URL's.
In general, the lists are based on official "Microsoft O365 URLs and IPs" website.

But I will forward this to my colleague who is more or less responsible for this.

I will update the thread once I have further details.

[marcus69]

Hello Marcel,

thanks so much for taking care of it  👍👍👍

Best Regards
     Marcus

[mkutrieba]

I Marcus,

I could not find these IP addresses in any of our lists (also not in  "Microsoft Azure Datacenter IP Ranges"). Then I did a research on Microsoft O365 website but could not find them either, also no IP address range that would cover these IP's.

I reached out to the colleague who is taking care about this and he confirmed my findings.

We are retrieving these lists from Microsoft 1:1, so obviously, these IP's are also not covered in their O365 lists.

Question now is, can you share a source/website from Microsoft that is showing the related service, IP's, Ports and URL's? 
I tried to find something with Google but was not successful but maybe my "Googeling" on a Friday is just too bad 😁

[marcus69]

Hi Marcel,

Thanks for your Quick reply.

The Screenshot in the posting above is only an exerpt, there are way more unknown Microsoft IPs that could have been seen on my RuleTrace. We did this Ruletrace while tryin to Activate Microsoft Office 365 (Excel + Word).
Here is the Rest of the Screenshots:

For privacy reason i blurred out our customers domain.
Actually 52.114.128.43 is definetly in MS Azure Datacenter IP-Ranges.

I worked around this issue establishing a custom Whitelist that was filled by trial an error.
My customer also hinted me that this is not a permanent problem, sometimes it works as supposed.

---

@mkutrieba wrote:

Question now is, can you share a source/website from Microsoft that is showing the related service, IP's, Ports and URL's? 

---

I would have posted it, if i had that kind of information, but i was hoping McAfees wire to Microsoft is better than mine 😉

My guess woud be that Microsoft did some (dynamical) changes to their IP-Ranges that are not yet published to the world in terms of documentation.
The seen IPs belong mostly to Microsoft: e.g. 13.107.246.10 

Best regards
    Marcus