Microsoft Defender for Endpoint
Endpoint protectionStreamlined Device Connectivity Urls Commercial
In brief
The documentation now notes that access may also be needed for URLs listed under Microsoft 365 Unified Domains, in addition to the URLs in the existing table.
What Defender admins need to know
Review the linked Microsoft 365 Unified Domains list when configuring access for Defender connectivity.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
The following table lists the URL endpoints required for administrative and security operations to access the Microsoft Defender security portals. These endpoints don't need to be accessible to all devices.
| URL | Comment |
|---|---|
| *.blob.core.windows.net | Used for file downloads from the portal, such as onboarding packages - https://onboardingpackagescusprd.blob.core.windows.net and files retrieved from devices. |
@@ -186,6 +186,9 @@ The following table lists the URL endpoint services required for devices using D The following table lists the URL endpoints required for administrative and security operations to access the Microsoft Defender security portals. These endpoints don't need to be accessible to all devices. +> [!NOTE]+> In addition to the URLs listed in this table, you might also need to allow access to the URLs listed under [Microsoft 365 Unified Domains](/microsoft-365/enterprise/urls-and-ip-address-ranges#microsoft-365-unified-domains).+ |URL|Comment| |---|---| |*.blob.core.windows.net|Used for file downloads from the portal, such as onboarding packages - `https://onboardingpackagescusprd.blob.core.windows.net` and files retrieved from devices.|