Last updated on March 30th, 2023 at 06:03 pm
When using Configuration Manager, you may find that some things may not work fully if you are also behind a web security proxy service.
We came across this problem recently where the Asset Intelligence Point was being blocked from contacting the internet due to web security. This caused this error in our Configuration Manager Console:
So we started to investigate this and found that we had to whitelist sc.microsoft.com.nsatc.net in our web security. After that, it started working again, but this led us to think about what else should be whitelisted.
Below is what we have found, so please feel free to copy this list if you require to whitelist your Configuration Manager environment.
Whitelist URL’s
| Module | URL to whitelist | Service |
| Asset Intelligence Synchronisation Point | sc.microsoft.com.nsatc.net | Asset Intelligence |
| Client | Microsoft Active Protection Service | |
| Client | Microsoft Active Protection Service | |
| Client | has.spserv.microsoft.com | Cloud Device Attestation Service |
| Console | login.windows.net/ | Any component requiring logon to online services |
| Primary Site | *.core.windows.net | Cloud Distribution Point |
| Primary Site | *.cloudapp.net | Cloud Distribution Point |
| Primary Site | Windows Store for Business | |
| Primary Site | https://login.microsoftonline.com/ | Windows Store for Business |
| Service Connection Point | *akamaiedge.net | Updates and Servicing |
| Service Connection Point | *.manage.microsoft.com | Updates and Servicing |
| Service Connection Point | go.microsoft.com | Updates and Servicing |
| Service Connection Point | blob.core.windows.net | Updates and Servicing |
| Service Connection Point | download.microsoft.com | Updates and Servicing |
| Service Connection Point | sccmconnected-a01.cloudapp.net | Updates and Servicing |
| Service Connection Point | https://silverlight.dlservice.microsoft.com | Updates and Servicing |
| Service Connection Point | *.manage.microsoft.com | Microsoft Intune |
| Service Connection Point | Microsoft Intune | |
| Service Connection Point | https://login.microsoftonline.com// | Microsoft Intune |
| Service Connection Point | download.microsoft.com | Windows 10 Servicing |
| Service Connection Point | https://go.microsoft.com/fwlink/?LinkID=619849 | Windows 10 Servicing |
| Site Server | has.spserv.microsoft.com | Cloud Device Attestation Service |
| SUP | windowsupdate.microsoft.com | Software Updates |
| SUP | *.windowsupdate.microsoft.com | Software Updates |
| SUP | *.update.microsoft.com | Software Updates |
| SUP | *.windowsupdate.com | Software Updates |
| SUP | download.windowsupdate.com | Software Updates |
| SUP | download.microsoft.com | Software Updates |
| SUP | *.download.windowsupdate.com | Software Updates |
| SUP | wustat.windows.com | Software Updates |
| SUP | ntservicepack.microsoft.com | Software Updates |
| SUP | go.microsoft.com | Software Updates |
| SUP | officecdn.microsoft.com | Office 365 Software Updates |
| SUP | officecdn.microsoft.com.edgesuite.net | Office 365 Software Updates |
Comments
If you have any feedback or questions on this guide, please feel free to leave us a message below in our comments section.
Discover more from TechyGeeksHome
Subscribe to get the latest posts to your email.
