diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet.md b/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet.md
index adc51a6063..bb1614d7a6 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet.md
@@ -113,7 +113,7 @@ If a proxy or firewall is blocking all traffic by default and allowing only spec
|**Item**|**Description**|
|:-----|:-----|
-|[](downloads/mdatp-urls.xlsx)
[Spreadsheet](downloads/mdatp-urls.xlsx) | The spreadsheet provides specific DNS records for service locations, geographic locations, and OS.
+|[](downloads/mdatp-urls.xlsx)
[Spreadsheet](mdatp-urls.xlsx) | The spreadsheet provides specific DNS records for service locations, geographic locations, and OS.
If a proxy or firewall has HTTPS scanning (SSL inspection) enabled, exclude the domains listed in the above table from HTTPS scanning.
diff --git a/windows/security/threat-protection/microsoft-defender-atp/mdatp-urls.xlsx b/windows/security/threat-protection/microsoft-defender-atp/mdatp-urls.xlsx
new file mode 100644
index 0000000000..ded3b76626
Binary files /dev/null and b/windows/security/threat-protection/microsoft-defender-atp/mdatp-urls.xlsx differ