none
Updated FQDNs for Office 365 activation through Firewall - are the URLs updated? RRS feed

  • Question

  • We are having an issue that the supplied URLs and IP addresses are not allowing activation of Office 365 through our Firewall.

    We are using the lists provided here (Office 365 URLs and IP)

    Can anyone confirm if these lists are correct?

    Our usage scenario is: We block the Internet to students during exam periods, but need to maintain a connection to O365 for activation purposes. Students do NOT require access to Onedrive or Sharepoint services.

    We have added the following list of FQDNs to the firewall:

    activation.sls.microsoft.com

    crl.microsoft.com

    odc.officeapps.live.com  

    clientconfig.microsoftonline-p.net

    ols.officeapps.live.com

    office15client.microsoft.com

    login.windows.net

    login.microsoftonline.com

    officecdn.microsoft.com

    But are still finding that O365 cannot resolve through them. Any suggestions on which ones I need to add the firewall?

    Thanks in advance!

    Friday, September 4, 2015 7:40 AM

Answers

  • And resolved.

    Our PAN-2020 firewall would not allow for the easy option of referencing the URLs for license activation. What we had to do was to manually enter each IP address (from the Portal and ID section) into the firewall.

    Once these had been committed and resolved, our clients are now able to authenticate their licenses.

    On the odd side - we have had to resolve some unknown IPs that were not listed by MS in the list - MS: When was the last time that the IP list was updated?

    Lastly, we have unfortunately found out that the activation process takes several minutes longer than when all traffic is allowed. I think some optimisation is in order, either on our side for the traffic or on the destination side.

    • Marked as answer by ABAdmin Friday, September 18, 2015 7:08 AM
    Friday, September 18, 2015 7:08 AM

All replies

  • Hi,

    Yes, this article is the Microsoft official document about Office 365 URLs and IP, these lists are correct. 

    Then, please see this article, the firewall may have to be configured to enable access to the following:

    • http://officecdn.microsoft.com
    • https://ols.officeapps.live.com/olsc
    • https://activation.sls.microsoft.com
    • https://odc.officeapps.live.com
    • http://crl.microsoft.com/pki/crl/products/MicrosoftProductSecureServer.crl
    • http://crl.microsoft.com/pki/crl/products/MicrosoftRootAuthority.crl
    • http://crl.microsoft.com/pki/crl/products/MicrosoftProductSecureCommunicationsPCA.crl
    • http://www.microsoft.com/pki/crl/products/MicrosoftProductSecureCommunicationsPCA.crl
    • go.microsoft.com
    • office15client.microsoft.com
    • sls.microsoft.com

    Hope it's helpful.

    Regards,

    George Zhao
    TechNet Community Support


    It's recommended to download and install Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office programs.

    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.
    Monday, September 7, 2015 7:01 AM
    Moderator
  • Still trying to resolve this. Unfortunately our firewall (a Palo Alto networks) does not allow for the use of the URLs in that format - I have to use either IP or FQDN (www.whatever.com).

    But unfortunately I am still hitting issues so have lodged a case with them on how best to proceed.

    Thanks for the info.

    Wednesday, September 9, 2015 11:06 AM
  • And resolved.

    Our PAN-2020 firewall would not allow for the easy option of referencing the URLs for license activation. What we had to do was to manually enter each IP address (from the Portal and ID section) into the firewall.

    Once these had been committed and resolved, our clients are now able to authenticate their licenses.

    On the odd side - we have had to resolve some unknown IPs that were not listed by MS in the list - MS: When was the last time that the IP list was updated?

    Lastly, we have unfortunately found out that the activation process takes several minutes longer than when all traffic is allowed. I think some optimisation is in order, either on our side for the traffic or on the destination side.

    • Marked as answer by ABAdmin Friday, September 18, 2015 7:08 AM
    Friday, September 18, 2015 7:08 AM
  • Palo alo has very good feature mine meld vm with External Dynamic List.

    How-to-Safely-Enable-access-to-Office-365-using-MineMeld-Updated/ta-p/224148



    Tuesday, August 20, 2019 6:11 AM