Office 365 Performance Management

Meet Paul Andrew | @pndrw Office 365 Technical Product Manager Office 365 datacenter, networking, identity management Passion for informing and inspiring IT Professionals to create simpler solutions to complex problems Meet Joshua Maher | @joshmaher Senior Content Developer, Office 365 Focus on improving the deployment experience for Office 365

M8: Planning for Office 365 Firewall Whitelisting

Agenda Inbound, outbound, and beyond Endpoints, interim points, and everything in-between Living in The Evergreen State Evolutions and revolutions

Inbound, outbound, and beyond Endpoints, interim points, and everything in-between Living in The Evergreen State Evolutions and revolutions

Inbound, outbound, and beyond What traffic are some customers whitelisting? Customers are whitelisting outbound traffic going to Office 365 In some cases, inbound whitelisting is also used for SMTP traffic because the SMTP traffic from Office 365 is more trusted than SMTP traffic from the internet Why are customers whitelisting this traffic? Should I implement whitelisting all of it?

Inbound, outbound, and beyond What traffic are some customers whitelisting? Why are customers whitelisting this traffic? When client computers want to connect to the internet, many networks have policies around what destinations those client computers can connect to Should I implement whitelisting all of it?

Inbound, outbound, and beyond What traffic are some customers whitelisting? Why are customers whitelisting this traffic? Should I implement whitelisting all of it? If you are going to filter, make sure you allow list all of the items for the services you are purchasing Don’t leave some out due to geography Keep in mind Content Delivery Networks are listed separately

Endpoints, interim points, and everything in-between Inbound, outbound, and beyond Endpoints, interim points, and everything in-between Living in The Evergreen State Evolutions and revolutions

Endpoints, interim points, and everything in-between Content delivery networks (CDNs) Office 365 stores images, downloads (such as Office 365 ProPlus), and other generic content on a variety of CDNs around the world The CDNs cache the files closer to client computers improving the experience If client computers are unable to access the CDNs, the experience may be slow and inconsistent Examples of CDNs are Akamai, Level 3, SingTel, Azure, & MSN URL whitelisting vs. IP whitelisting What are customers filtering with?

Endpoints, interim points, and everything in-between Content delivery networks (CDNs) URL whitelisting vs. IP whitelisting URL: less changes to URLs due to DNS IP: Supported by more Firewalls URL: Most modern Firewalls support URL whitelisting IP: URL whitelisting is slower URL: IP whitelisting only works for non-browser based clients URL: IP whitelisting may not be work with future authentication mechanisms What are customers whitelisting with?

Endpoints, interim points, and everything in-between Content delivery networks (CDNs) URL whitelisting vs. IP whitelisting What are customers whitelisting with? Most customers are whitelisting with their existing firewalls. Older firmware versions may not support URL whitelisting Some firewall firmware versions process URL allow lists in a less than optimal way

Living in The Evergreen State Inbound, outbound, and beyond Endpoints, interim points, and everything in-between Living in The Evergreen State Evolutions and revolutions

Living in The Evergreen State Where is the current list? The current list for all services is currently located on TechNet. http://technet.microsoft.com/library/hh373144.aspx Each service is broken out separately, regardless of which licenses you have, the first list (Office 365) is needed in addition to the lists for the other services you’ve licensed What changed since the last time I looked at the list? Can someone just email me when something changes?

URL and IP Addresses web page demo URL and IP Addresses web page

Living in The Evergreen State

Living in The Evergreen State Where is the current list? What changed since the last time I looked at the list? Things are always changing and we strive to get the site updated with as much advance warning as we can. There is a full log of all the changes (what, when, and so on) http://technet.microsoft.com/en-US/library/jj129402.aspx Can someone just email me when something changes?

Living in The Evergreen State

Living in The Evergreen State Where is the current list? What changed since the last time I looked at the list? Can someone just email me when something changes? Have no fear, RSS is here! Follow this link for the RSS feed http://onlinehelp.microsoft.com/en-us/office365-enterprises/o365ip.rss.xml If you would really rather use email, you can subscribe to RSS in Outlook or have a service such as IFTTT.com send you new RSS posts to any email address you want. http://blogs.msdn.com/b/pandrew/archive/2014/07/09/office-365-urls-and-ip-address-ranges-email- change-notification.aspx

Evolutions and revolutions Inbound, outbound, and beyond Endpoints, interim points, and everything in-between Living in The Evergreen State Evolutions and revolutions

Evolutions and revolutions Where do I upgrade to an automatic? Thanks for the trust, we’d love to be able to do this for you. Give us time to improve and continue to earn that trust I still don’t understand why this is necessary

Evolutions and revolutions Where do I upgrade to an automatic? I still don’t understand why this is necessary It isn’t. Really it is not necessary. Some customers prefer whitelisting. If you are already whitelisting search engines, news sites, and your other Cloud Services (HR system perhaps) then you may want to look into it. The majority of customers do not implement whitelisting.

M8 Summary: Office 365 Firewall Whitelisting Whitelisting is not required Most customers only implement outbound whitelisting Subscribe to the RSS feed for advance notifications of changes There will be changes, Office 365 is growing and evolving The regions exist for failover purposes The network is designed to offer the highest speed and availability