Forum Discussion
thekernel
Sep 08, 2020Copper Contributor
IP addresses used by Sentinel
Does anyone have to hand the IP ranges that the MMA agent would use to forward logs to Sentinel? I presume it's workspace/region dependent...but I can't seem to find anything and we can't just allow ...
CliveWatson
Microsoft
The MMA is owned by the Azure Monitor Team (as is "Log Analytics" a.k.a Azure Monitor Logs), so the docs are under their name not Azure Sentinel: https://docs.microsoft.com/en-us/azure/azure-monitor/app/ip-addresses
Thanks
esmond365
Jan 27, 2021Copper Contributor
Wondering if this worked for the OP? I also need to find Sentinel IPs but the intent is for a TI vendor to whitelist connecting agents.