FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Dongfang_Li_FTNT
Article Id 275258
Description

This article describes the different Internet Service Database groups for Microsoft Office 365.

 

In the Internet Service Database (ISDB), there are multiple entries for Microsoft Office 365. What are the differences between them? How do we effectively use these groups to allow traffic to Office 365, Azure, and Teams?

Scope FortiOS, all firmware.
Solution

ISDB refers to Office 365 URLs and IP address ranges for Microsoft-related objects.

 

It is possible to enable Microsoft Office 365, Microsoft Outlook, Microsoft Skype Teams, and Microsoft Azure to allow traffic to Office 365, Azure, and Teams.

 

Below is the difference between ISDB regarding for Microsoft Office 365:

 

Microsoft Office 365.

Published covers the IP addresses published in this Microsoft Outlook, the IP addresses in the 'Exchange Online' section.

The IP addresses collected according to the FQDNs in the section Microsoft Skype Teams cover the IP addresses in 'Skype for Business Online and Microsoft Teams section.

The IP addresses were collected according to the FQDNs in the section article, Microsoft Office 365.Published.Allow, and Microsoft Office 365.Published.Optimize cover IP addresses with the Optimize/Allow category only.

Microsoft-Office365.Published.USGOV covers the IP addresses for U.S. Government DoD and U.S. Government GCC High.

Microsoft Office 365 covers the IP addresses in 'SharePoint Online and OneDrive for Business' and 'Microsoft 365 Common and Office Online' sections, and the IP addresses are collected according to the FQDNs in these sections.

Microsoft Outlook covers the IP addresses in the 'Exchange Online' section, and the IP addresses collected according to the FQDNs in the section.

Microsoft-Teams.Published.Worldwide.Allow and Microsoft-Teams.Published.Worldwide.Optimize cover only IP addresses with the Optimize/Allow category within the 'Skype for Business Online and Microsoft Teams' section.

Microsoft-Teams.Published.Worldwide.Allow and Microsoft-Teams.Published.Worldwide.Optimize covers only IP addresses with the Optimize/Allow category within the 'Skype for Business Online and Microsoft Teams' section.

 

Microsoft-Office365.Published only covers the IP addresses published in the article, whereas Microsoft-Outlook, Microsoft-Skype_Teams, and Microsoft-Office365 also cover the IP addresses resolved from the FQDNs in the article, which include more IP addresses used by Office 365 services.