SCCM – Full list of web security proxy exceptions

System Center Configuration Manager SCCM

Last updated on March 30th, 2023 at 06:03 pm

Read Time:2 Minute, 5 Second

When using Configuration Manager, you may find that some things may not work fully if you are also behind a web security proxy service.

We came across this problem recently where the Asset Intelligence Point was being blocked from contacting the internet due to web security. This caused this error in our Configuration Manager Console:

SCCM - Full list of web security proxy exceptions 1

So we started to investigate this and found that we had to whitelist sc.microsoft.com.nsatc.net in our web security. After that, it started working again, but this led us to think about what else should be whitelisted.

Below is what we have found, so please feel free to copy this list if you require to whitelist your Configuration Manager environment.

Whitelist URL’s

Module URL to whitelist Service
Asset Intelligence Synchronisation Point sc.microsoft.com.nsatc.net Asset Intelligence
Client Microsoft Active Protection Service
Client Microsoft Active Protection Service
Client has.spserv.microsoft.com Cloud Device Attestation Service
Console login.windows.net/ Any component requiring logon to online services
Primary Site *.core.windows.net Cloud Distribution Point
Primary Site *.cloudapp.net Cloud Distribution Point
Primary Site Windows Store for Business
Primary Site https://login.microsoftonline.com/ Windows Store for Business
Service Connection Point *akamaiedge.net Updates and Servicing
Service Connection Point *.manage.microsoft.com Updates and Servicing
Service Connection Point go.microsoft.com Updates and Servicing
Service Connection Point blob.core.windows.net Updates and Servicing
Service Connection Point download.microsoft.com Updates and Servicing
Service Connection Point sccmconnected-a01.cloudapp.net Updates and Servicing
Service Connection Point https://silverlight.dlservice.microsoft.com Updates and Servicing
Service Connection Point *.manage.microsoft.com Microsoft Intune
Service Connection Point Microsoft Intune
Service Connection Point https://login.microsoftonline.com// Microsoft Intune
Service Connection Point download.microsoft.com Windows 10 Servicing
Service Connection Point https://go.microsoft.com/fwlink/?LinkID=619849 Windows 10 Servicing
Site Server has.spserv.microsoft.com Cloud Device Attestation Service
SUP windowsupdate.microsoft.com Software Updates
SUP *.windowsupdate.microsoft.com Software Updates
SUP *.update.microsoft.com Software Updates
SUP *.windowsupdate.com Software Updates
SUP download.windowsupdate.com Software Updates
SUP download.microsoft.com Software Updates
SUP *.download.windowsupdate.com Software Updates
SUP wustat.windows.com Software Updates
SUP ntservicepack.microsoft.com Software Updates
SUP go.microsoft.com Software Updates
SUP officecdn.microsoft.com Office 365 Software Updates
SUP officecdn.microsoft.com.edgesuite.net Office 365 Software Updates

Comments

If you have any feedback or questions on this guide, please feel free to leave us a message below in our comments section.

Click to rate this post!
[Total: 0 Average: 0]

Free Subscription

If you want to be notified when we post more quality guides like this one, sign up to our free subscription service and you will receive an email when a new post is live.

Join 441 other subscribers.

No need to worry, we will not be filling your inbox with spam and you can unsubscribe anytime you like.


Leave us a message...

This site uses Akismet to reduce spam. Learn how your comment data is processed.