SCCM – Full list of web security proxy exceptions

System Center Configuration Manager SCCM

When using Configuration Manager, you may find that some things may not work fully if you are also behind a web security proxy service.

We came across this problem recently where the Asset Intelligence Point was being blocked from contacting the internet due to web security. This caused this error in our Configuration Manager Console:

So we started to investigate this and found that we had to whitelist sc.microsoft.com.nsatc.net in our web security. After that, it started working again, but this led us to think about what else should be whitelisted.

Below is what we have found, so please feel free to copy this list if you require to whitelist your Configuration Manager environment.

Whitelist URL’s

Module URL to whitelist Service
Asset Intelligence Synchronisation Point sc.microsoft.com.nsatc.net Asset Intelligence
Client Microsoft Active Protection Service
Client Microsoft Active Protection Service
Client has.spserv.microsoft.com Cloud Device Attestation Service
Console login.windows.net/ Any component requiring logon to online services
Primary Site *.core.windows.net Cloud Distribution Point
Primary Site *.cloudapp.net Cloud Distribution Point
Primary Site Windows Store for Business
Primary Site https://login.microsoftonline.com/ Windows Store for Business
Service Connection Point *akamaiedge.net Updates and Servicing
Service Connection Point *.manage.microsoft.com Updates and Servicing
Service Connection Point go.microsoft.com Updates and Servicing
Service Connection Point blob.core.windows.net Updates and Servicing
Service Connection Point download.microsoft.com Updates and Servicing
Service Connection Point sccmconnected-a01.cloudapp.net Updates and Servicing
Service Connection Point http://silverlight.dlservice.microsoft.com Updates and Servicing
Service Connection Point *.manage.microsoft.com Microsoft Intune
Service Connection Point Microsoft Intune
Service Connection Point https://login.microsoftonline.com// Microsoft Intune
Service Connection Point download.microsoft.com Windows 10 Servicing
Service Connection Point https://go.microsoft.com/fwlink/?LinkID=619849 Windows 10 Servicing
Site Server has.spserv.microsoft.com Cloud Device Attestation Service
SUP windowsupdate.microsoft.com Software Updates
SUP *.windowsupdate.microsoft.com Software Updates
SUP *.update.microsoft.com Software Updates
SUP *.windowsupdate.com Software Updates
SUP download.windowsupdate.com Software Updates
SUP download.microsoft.com Software Updates
SUP *.download.windowsupdate.com Software Updates
SUP wustat.windows.com Software Updates
SUP ntservicepack.microsoft.com Software Updates
SUP go.microsoft.com Software Updates
SUP officecdn.microsoft.com Office 365 Software Updates
SUP officecdn.microsoft.com.edgesuite.net Office 365 Software Updates

Comments

If you have any feedback or questions on this guide, please feel free to leave us a message below in our comments section.

Free Subscription

If you want to be notified when we post more quality guides like this one, sign up to our free subscription service and you will receive an email when a new post is live.

Join 118 other subscribers

No need to worry, we will not be filling your inbox with spam and you can unsubscribe anytime you like.

About A.J. Armstrong

Founder of TechyGeeksHome and Head Editor for over eight years! IT expert in multiple areas for over 20 years. Sharing experience and knowledge whenever possible! Making IT Happen.

View all posts by A.J. Armstrong

Leave us a message...

This site uses Akismet to reduce spam. Learn how your comment data is processed.