Update windows-endpoints-1903-non-enterprise-editions.md

This commit is contained in:
Mike Edgar
2019-05-08 19:31:51 -07:00
committed by GitHub
parent 294d08f16e
commit 2d64996a22

View File

@ -199,42 +199,73 @@ We used the following methodology to derive these network endpoints:
| **Destination** | **Protocol** | **Description** | | **Destination** | **Protocol** | **Description** |
| --- | --- | --- | | --- | --- | --- |
| *.b.akamaiedge.net | HTTPS | Used to check for updates to maps that have been downloaded for offline use. | |\*.b.akamaiedge.net|HTTPS|Used to check for updates to maps that have been downloaded for offline use
| *.e-msedge.net | HTTPS | Used by OfficeHub to get the metadata of Office apps. | |\*.c-msedge.net|HTTP|Used by OfficeHub to get the metadata of Office apps
| *.g.akamaiedge.net | HTTPS | Used to check for updates to maps that have been downloaded for offline use. | |\*.dl.delivery.mp.microsoft.com*|HTTP|Windows Update
| *.s-msedge.net | HTTPS | Used by OfficeHub to get the metadata of Office apps. | |\*.e-msedge.net|HTTPS|Used by OfficeHub to get the metadata of Office apps
| *.telecommand.telemetry.microsoft.com.akadns.net | HTTPS | Used by Windows Error Reporting. | |\*.g.akamaiedge.net|HTTPS|Used to check for updates to Maps that have been downloaded for offline use
| *.tlu.dl.delivery.mp.microsoft.com\* | HTTP | Enables connections to Windows Update. | |\*.licensing.md.mp.microsoft.com.akadns.net|HTTPS|Microsoft Store
| *.windowsupdate.com\* | HTTP | Enables connections to Windows Update. | |\*.settings.data.microsoft.com.akadns.net|HTTPS|Microsoft Store
| *geo-prod.do.dsp.mp.microsoft.com | HTTPS | Enables connections to Windows Update. | |\*.skype.com*|HTTPS|Used to retrieve Skype configuration values
| au.download.windowsupdate.com\* | HTTP | Enables connections to Windows Update. | |\*.smartscreen*.microsoft.com|HTTPS|Windows Defender
| cdn.onenote.net/livetile/* | HTTPS | Used for OneNote Live Tile. | |\*.s-msedge.net|HTTPS|Used by OfficeHub to get the metadata of Office apps
| client-office365-tas.msedge.net/* | HTTPS | Used to connect to the Office 365 portals shared infrastructure, including Office Online. | |\*.telecommand.telemetry.microsoft.com*|HTTPS|Used by Windows Error Reporting
| config.edge.skype.com/* | HTTPS | Used to retrieve Skype configuration values.  | |\*.wac.phicdn.net|HTTP|Windows Update
| ctldl.windowsupdate.com/* | HTTP | Used to download certificates that are publicly known to be fraudulent. | |\*.windowsupdate.com*|HTTP|Windows Update
| cy2.displaycatalog.md.mp.microsoft.com.akadns.net | HTTPS | Used to communicate with Microsoft Store. | |\*.wns.windows.com|HTTPS|Windows Notifications Service
| cy2.licensing.md.mp.microsoft.com.akadns.net | HTTPS | Used to communicate with Microsoft Store. | |\*.wpc.*.net|HTTP|Diagnostic Data
| cy2.settings.data.microsoft.com.akadns.net | HTTPS | Used to communicate with Microsoft Store. | |\*displaycatalog.md.mp.microsoft.com.akadns.net|HTTPS|Microsoft Store
| displaycatalog.mp.microsoft.com/* | HTTPS | Used to communicate with Microsoft Store. | |\*dsp.mp.microsoft.com|HTTPS|Windows Update
| download.windowsupdate.com/* | HTTPS | Enables connections to Windows Update. | |a1158.g.akamai.net|HTTP|Maps
| emdl.ws.microsoft.com/* | HTTP | Used to download apps from the Microsoft Store. | |a122.dscg3.akamai.net|HTTP|Maps
| fe2.update.microsoft.com/* | HTTPS | Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store. | |a767.dscg3.akamai.net|HTTP|Maps
| fe3.delivery.dsp.mp.microsoft.com.nsatc.net | HTTPS | Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store. | |au.download.windowsupdate.com*|HTTP|Windows Update
| fe3.delivery.mp.microsoft.com/* | HTTPS | Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store. | |bing.com/*|HTTPS|Used for updates for Cortana, apps, and Live Tiles
| g.live.com/odclientsettings/* | HTTPS | Used by OneDrive for Business to download and verify app updates. | |blob.dz5prdstr01a.store.core.windows.net|HTTPS|Microsoft Store
| g.msn.com.nsatc.net | HTTPS | Used to retrieve Windows Spotlight metadata. | |browser.pipe.aria.microsoft.com|HTTP|Used by OfficeHub to get the metadata of Office apps
| ipv4.login.msa.akadns6.net | HTTPS | Used for Microsoft accounts to sign in. | |cdn.onenote.net/livetile/*|HTTPS|Used for OneNote Live Tile
| licensing.mp.microsoft.com/* | HTTPS | Used for online activation and some app licensing. | |cds.p9u4n2q3.hwcdn.net|HTTP|Used by the Highwinds Content Delivery Network to perform Windows updates
| maps.windows.com/windows-app-web-link | HTTPS | Link to Maps application | |client-office365-tas.msedge.net/*|HTTPS|Office 365 porta and Office Online
| modern.watson.data.microsoft.com.akadns.net | HTTPS | Used by Windows Error Reporting. | |ctldl.windowsupdate.com*|HTTP|Used to download certificates that are publicly known to be fraudulent
| ocos-office365-s2s.msedge.net/* | HTTPS | Used to connect to the Office 365 portal's shared infrastructure. | |displaycatalog.mp.microsoft.com/*|HTTPS|Microsoft Store
| ocsp.digicert.com\* | HTTP | CRL and OCSP checks to the issuing certificate authorities. | |dmd.metaservices.microsoft.com*|HTTP|Device Authentication
| oneclient.sfx.ms/* | HTTPS | Used by OneDrive for Business to download and verify app updates. | |download.windowsupdate.com*|HTTPS|Windows Update
| settings-win.data.microsoft.com/settings/* | HTTPS | Used as a way for apps to dynamically update their configuration. | |emdl.ws.microsoft.com/*|HTTP|Used to download apps from the Microsoft Store
| sls.update.microsoft.com/* | HTTPS | Enables connections to Windows Update. | |evoke-windowsservices-tas.msedge.net|HTTPS|Photo app
| storecatalogrevocation.storequality.microsoft.com/* | HTTPS | Used to revoke licenses for malicious apps on the Microsoft Store. | |fe2.update.microsoft.com*|HTTPS|Windows Update, Microsoft Update, Microsoft Store services
| tile-service.weather.microsoft.com/* | HTTP | Used to download updates to the Weather app Live Tile. | |fe3.delivery.dsp.mp.microsoft.com.nsatc.net|HTTPS|Windows Update, Microsoft Update, Microsoft Store services
| tsfe.trafficshaping.dsp.mp.microsoft.com | HTTPS | Used for content regulation. | |fe3.delivery.mp.microsoft.com*|HTTPS|Windows Update, Microsoft Update, Microsoft Store services
| vip5.afdorigin-prod-ch02.afdogw.com | HTTPS | Used to serve office 365 experimentation traffic. | |g.live.com*|HTTPS|Used by OneDrive for Business to download and verify app updates
| watson.telemetry.microsoft.com/Telemetry.Request | HTTPS | Used by Windows Error Reporting. | |g.msn.com.nsatc.net|HTTPS|Used to retrieve Windows Spotlight metadata
| bing.com/* | HTTPS | Used for updates for Cortana, apps, and Live Tiles. | |go.microsoft.com|HTTP|Windows Defender
|iecvlist.microsoft.com|HTTPS|Microsoft Edge browser
|ipv4.login.msa.akadns6.net|HTTPS|Used for Microsoft accounts to sign in
|licensing.mp.microsoft.com*|HTTPS|Used for online activation and some app licensing
|login.live.com|HTTPS|Device Authentication
|maps.windows.com/windows-app-web-link|HTTPS|Maps application
|modern.watson.data.microsoft.com.akadns.net|HTTPS|Used by Windows Error Reporting
|msagfx.live.com|HTTPS|OneDrive
|ocos-office365-s2s.msedge.net/*|HTTPS|Used to connect to the Office 365 portal's shared infrastructure
|ocsp.digicert.com*|HTTP|CRL and OCSP checks to the issuing certificate authorities
|oneclient.sfx.ms/*|HTTPS|Used by OneDrive for Business to download and verify app updates
|onecollector.cloudapp.aria.akadns.net|HTTPS|Microsoft Office
|pti.store.microsoft.com|HTTPS|Microsoft Store
|settings-win.data.microsoft.com/settings/*|HTTPS|Used as a way for apps to dynamically update their configuration
|share.microsoft.com|HTTPS|Microsoft Store
|skypeecs-prod-usw-0.cloudapp.net|HTTPS|Skype
|sls.update.microsoft.com*|HTTPS|Windows Update
|storecatalogrevocation.storequality.microsoft.com*|HTTPS|Used to revoke licenses for malicious apps on the Microsoft Store
|tile-service.weather.microsoft.com*|HTTP|Used to download updates to the Weather app Live Tile
|tsfe.trafficshaping.dsp.mp.microsoft.com|HTTPS|Windows Update
|v10.events.data.microsoft.com*|HTTPS|Diagnostic Data
|vip5.afdorigin-prod-ch02.afdogw.com|HTTPS|Used to serve Office 365 experimentation traffic
|watson.telemetry.microsoft.com*|HTTPS|Used by Windows Error Reporting
|wdcp.microsoft.com|HTTPS|Windows Defender
|wd-prod-cp-us-east-1-fe.eastus.cloudapp.azure.com|HTTPS|Azure
|wusofficehome.msocdn.com|HTTPS|Microsoft Office
|www.bing.com|HTTPS|Cortana and Search
|www.microsoft.com|HTTP|Diagnostic Data
|www.microsoft.com/pkiops/certs/*|HTTP|CRL and OCSP checks to the issuing certificate authorities
|www.msftconnecttest.com|HTTP|Network Connection
|www.office.com|HTTPS|Microsoft Office