Forum Discussion
Vlan Production Clients - Firewall Microsoftconnection
Hello together, We want to go with our production clients in a seperate vlan. This vlan shouldnt have access to internet, BUT to all services from Microsoft, like Intune / Defender / Windows Updates...
To allow production clients in a VLAN to reach Microsoft services (Intune, Defender, Windows Update, etc.) without general internet access, configure your firewall to permit traffic to Microsoft’s published service endpoints.
https://learn.microsoft.com/en-us/intune/fundamentals/endpoints?tabs=north-america