Forum Discussion
Vlan Production Clients - Firewall Microsoftconnection
Hello together,
We want to go with our production clients in a seperate vlan. This vlan shouldnt have access to internet, BUT to all services from Microsoft, like Intune / Defender / Windows Updates ...
So, what rules are needed for our Sophos Firewall? Is there document from Microsoft with all needed URL's / IP's / Ports?
THX
Peter
1 Reply
To allow production clients in a VLAN to reach Microsoft services (Intune, Defender, Windows Update, etc.) without general internet access, configure your firewall to permit traffic to Microsoft’s published service endpoints.
https://learn.microsoft.com/en-us/intune/fundamentals/endpoints?tabs=north-america
