SCCM – Full list of web security proxy exceptions

When using Configuration Manager, you may find that some things may not work fully if you are also behind a web security proxy service. We came across this problem recently where the Asset Intelligence Point was being blocked from contacting the internet due to web security. This caused this error in our Configuration Manager Console: So we started to investigate this and found that we had to whitelist sc.microsoft.com.nsatc.net in our web security. After that, it started working again, but this led us to think about what else should be whitelisted. Below is what we have found, so please feel free to copy this list if you require to whitelist your Configuration Manager environment.

Whitelist URL’s

Module	URL to whitelist	Service
Asset Intelligence Synchronisation Point	sc.microsoft.com.nsatc.net	Asset Intelligence
Client		Microsoft Active Protection Service
Client		Microsoft Active Protection Service
Client	has.spserv.microsoft.com	Cloud Device Attestation Service
Console	login.windows.net/	Any component requiring logon to online services
Primary Site	*.core.windows.net	Cloud Distribution Point
Primary Site	*.cloudapp.net	Cloud Distribution Point
Primary Site		Windows Store for Business
Primary Site	https://login.microsoftonline.com/	Windows Store for Business
Service Connection Point	*akamaiedge.net	Updates and Servicing
Service Connection Point	*.manage.microsoft.com	Updates and Servicing
Service Connection Point	go.microsoft.com	Updates and Servicing
Service Connection Point	blob.core.windows.net	Updates and Servicing
Service Connection Point	download.microsoft.com	Updates and Servicing
Service Connection Point	sccmconnected-a01.cloudapp.net	Updates and Servicing
Service Connection Point	https://silverlight.dlservice.microsoft.com	Updates and Servicing
Service Connection Point	*.manage.microsoft.com	Microsoft Intune
Service Connection Point		Microsoft Intune
Service Connection Point	https://login.microsoftonline.com//	Microsoft Intune
Service Connection Point	download.microsoft.com	Windows 10 Servicing
Service Connection Point	https://go.microsoft.com/fwlink/?LinkID=619849	Windows 10 Servicing
Site Server	has.spserv.microsoft.com	Cloud Device Attestation Service
SUP	windowsupdate.microsoft.com	Software Updates
SUP	*.windowsupdate.microsoft.com	Software Updates
SUP	*.update.microsoft.com	Software Updates
SUP	*.windowsupdate.com	Software Updates
SUP	download.windowsupdate.com	Software Updates
SUP	download.microsoft.com	Software Updates
SUP	*.download.windowsupdate.com	Software Updates
SUP	wustat.windows.com	Software Updates
SUP	ntservicepack.microsoft.com	Software Updates
SUP	go.microsoft.com	Software Updates
SUP	officecdn.microsoft.com	Office 365 Software Updates
SUP	officecdn.microsoft.com.edgesuite.net	Office 365 Software Updates

Comments

If you have any feedback or questions on this guide, please feel free to leave us a message below in our comments section.