FirePower and Allow O365 (Worldwide endpoints)

[Michael Bartholomæussen]

Hi Guys

I need to allow the urls found on https://docs.microsoft.com/en-us/office365/enterprise/urls-and-ip-address-ranges

But in firepower rule set the applications "Office 365, Exchange Online, Microsoft" doesn't all the URLs?

Any way to cover these urls and IP ranges in some cleaver maner? I would like to allow xxx applications, and then done.

best regards

Michael

[robert.humphreys1]

Hi,

Found this Cisco community article https://community.cisco.com/t5/network-security/import-of-office365-urls-and-ips-into-fmc-ftd2130-acl-s/td-p/3729929

@bart.raat 

linking to this feed parser:

https://github.com/chrivand/Firepower_O365_Feed_Parser

That looks like it will parse the following:

https://docs.microsoft.com/en-us/office365/enterprise/office-365-ip-web-service

Have not tried it yet so cannot recommend it but looks promising.