1. Office 365 Performance Management

2. Meet Paul Andrew | @pndrw
Office 365 Technical Product Manager
Office 365 datacenter, networking, identity management
Passion for informing and inspiring IT Professionals to create simpler solutions to complex problems
Meet Joshua Maher
Senior Content Developer, Office 365
Focus on improving the deployment experience for Office 365

3. M8: Planning for Office 365 Firewall Whitelisting

4. Agenda Inbound, outbound, and beyond
Endpoints, interim points, and everything in-between
Living in The Evergreen State
Evolutions and revolutions

5. Inbound, outbound, and beyond
Endpoints, interim points, and everything in-between
Living in The Evergreen State
Evolutions and revolutions

6. Inbound, outbound, and beyond
What traffic are some customers whitelisting?
Customers are whitelisting outbound traffic going to Office 365
In some cases, inbound whitelisting is also used for SMTP traffic because the SMTP traffic from Office 365 is more trusted than SMTP traffic from the internet
Why are customers whitelisting this traffic?
Should I implement whitelisting all of it?

7. Inbound, outbound, and beyond
What traffic are some customers whitelisting?
Why are customers whitelisting this traffic?
When client computers want to connect to the internet, many networks have policies around what destinations those client computers can connect to
Should I implement whitelisting all of it?

8. Inbound, outbound, and beyond
What traffic are some customers whitelisting?
Why are customers whitelisting this traffic?
Should I implement whitelisting all of it?
If you are going to filter, make sure you allow list all of the items for the services you are purchasing
Don’t leave some out due to geography
Keep in mind Content Delivery Networks are listed separately

9. Endpoints, interim points, and everything in-between
Inbound, outbound, and beyond
Endpoints, interim points, and everything in-between
Living in The Evergreen State
Evolutions and revolutions

10. Endpoints, interim points, and everything in-between
Content delivery networks (CDNs)
Office 365 stores images, downloads (such as Office 365 ProPlus), and other generic content on a variety of CDNs around the world
The CDNs cache the files closer to client computers improving the experience
If client computers are unable to access the CDNs, the experience may be slow and inconsistent
Examples of CDNs are Akamai, Level 3, SingTel, Azure, & MSN
URL whitelisting vs. IP whitelisting
What are customers filtering with?

11. Endpoints, interim points, and everything in-between
Content delivery networks (CDNs)
URL whitelisting vs. IP whitelisting
URL: less changes to URLs due to DNS
IP: Supported by more Firewalls
URL: Most modern Firewalls support URL whitelisting
IP: URL whitelisting is slower
URL: IP whitelisting only works for non-browser based clients
URL: IP whitelisting may not be work with future authentication mechanisms
What are customers whitelisting with?

12. Endpoints, interim points, and everything in-between
Content delivery networks (CDNs)
URL whitelisting vs. IP whitelisting
What are customers whitelisting with?
Most customers are whitelisting with their existing firewalls.
Older firmware versions may not support URL whitelisting
Some firewall firmware versions process URL allow lists in a less than optimal way

13. Living in The Evergreen State
Inbound, outbound, and beyond
Endpoints, interim points, and everything in-between
Living in The Evergreen State
Evolutions and revolutions

14. Living in The Evergreen State
Where is the current list?
The current list for all services is currently located on TechNet.
Each service is broken out separately, regardless of which licenses you have, the first list (Office 365) is needed in addition to the lists for the other services you’ve licensed
What changed since the last time I looked at the list?
Can someone just me when something changes?

15. URL and IP Addresses web page
demo
URL and IP Addresses web page

16. Living in The Evergreen State

17. Living in The Evergreen State
Where is the current list?
What changed since the last time I looked at the list?
Things are always changing and we strive to get the site updated with as much advance warning as we can.
There is a full log of all the changes (what, when, and so on)
Can someone just me when something changes?

18. Living in The Evergreen State

19. Living in The Evergreen State
Where is the current list?
What changed since the last time I looked at the list?
Can someone just me when something changes?
Have no fear, RSS is here! Follow this link for the RSS feed
If you would really rather use , you can subscribe to RSS in Outlook or have a service such as IFTTT.com send you new RSS posts to any address you want.
change-notification.aspx

20. Evolutions and revolutions
Inbound, outbound, and beyond
Endpoints, interim points, and everything in-between
Living in The Evergreen State
Evolutions and revolutions

21. Evolutions and revolutions
Where do I upgrade to an automatic?
Thanks for the trust, we’d love to be able to do this for you. Give us time to improve and continue to earn that trust
I still don’t understand why this is necessary

22. Evolutions and revolutions
Where do I upgrade to an automatic?
I still don’t understand why this is necessary
It isn’t. Really it is not necessary.
Some customers prefer whitelisting. If you are already whitelisting search engines, news sites, and your other Cloud Services (HR system perhaps) then you may want to look into it.
The majority of customers do not implement whitelisting.

23. M8 Summary: Office 365 Firewall Whitelisting
Whitelisting is not required
Most customers only implement outbound whitelisting
Subscribe to the RSS feed for advance notifications of changes
There will be changes, Office 365 is growing and evolving
The regions exist for failover purposes
The network is designed to offer the highest speed and availability