Forum Discussion
How to make users connect to Exchange online without Internet
I feel you pain ! Was in a similar situation sometime back and in the end it boiled down to new set of IP addresses being used by Microsoft in addition to office 365 IP ranges to route the connection! the list keeps changing, most of the times the IPs related to exchange online workload are static but the IPs MS uses to route your connection to EXO change. To isolate, when you are trying to create a profile and getting failures check firewall for packet drops against MS IP addresses and see if you can find IPs related to MS which you have not whitelisted !
Yeah, I couldn't agree more with you. I seem to find some way to resolve the issue. Our firewall is PaloAlto, the firewall have a External Dynamic List service, PaloAlto providers publish lists of IP addresses and URLs as destination endpoints for their SaaS applications. The EDL service have M365 IP AND URL. So I create a policy for the IP and URL list.The client now can access exchange online normal after I commit the policy. I hope the policy can resolve all issues. I also find somebody create a powershell script to get IP and URL list from Internet. Maybe you can try it.
