SCCM – Full list of web security proxy exceptions

System Center Configuration Manager SCCM

When using Configuration Manager, you may find that some things may not work fully if you are also behind a web security proxy service.

We came across this problem recently where the Asset Intelligence Point was being blocked from contacting the internet due to web security. This caused this error in our Configuration Manager Console:

So we started to investigate this and found that we had to whitelist sc.microsoft.com.nsatc.net in our web security. After that, it started working again, but this led us to think about what else should be whitelisted.

Below is what we have found, so please feel free to copy this list if you require to whitelist your Configuration Manager environment.

Whitelist URL’s

ModuleURL to whitelistService
Asset Intelligence Synchronisation Pointsc.microsoft.com.nsatc.netAsset Intelligence
ClientMicrosoft Active Protection Service
ClientMicrosoft Active Protection Service
Clienthas.spserv.microsoft.comCloud Device Attestation Service
Consolelogin.windows.net/Any component requiring logon to online services
Primary Site*.core.windows.netCloud Distribution Point
Primary Site*.cloudapp.netCloud Distribution Point
Primary SiteWindows Store for Business
Primary Sitehttps://login.microsoftonline.com/Windows Store for Business
Service Connection Point*akamaiedge.netUpdates and Servicing
Service Connection Point*.manage.microsoft.comUpdates and Servicing
Service Connection Pointgo.microsoft.comUpdates and Servicing
Service Connection Pointblob.core.windows.netUpdates and Servicing
Service Connection Pointdownload.microsoft.comUpdates and Servicing
Service Connection Pointsccmconnected-a01.cloudapp.netUpdates and Servicing
Service Connection Pointhttp://silverlight.dlservice.microsoft.comUpdates and Servicing
Service Connection Point*.manage.microsoft.comMicrosoft Intune
Service Connection PointMicrosoft Intune
Service Connection Pointhttps://login.microsoftonline.com//Microsoft Intune
Service Connection Pointdownload.microsoft.comWindows 10 Servicing
Service Connection Pointhttps://go.microsoft.com/fwlink/?LinkID=619849Windows 10 Servicing
Site Serverhas.spserv.microsoft.comCloud Device Attestation Service
SUPwindowsupdate.microsoft.comSoftware Updates
SUP*.windowsupdate.microsoft.comSoftware Updates
SUP*.update.microsoft.comSoftware Updates
SUP*.windowsupdate.comSoftware Updates
SUPdownload.windowsupdate.comSoftware Updates
SUPdownload.microsoft.comSoftware Updates
SUP*.download.windowsupdate.comSoftware Updates
SUPwustat.windows.comSoftware Updates
SUPntservicepack.microsoft.comSoftware Updates
SUPgo.microsoft.comSoftware Updates
SUPofficecdn.microsoft.comOffice 365 Software Updates
SUPofficecdn.microsoft.com.edgesuite.netOffice 365 Software Updates

Comments

If you have any feedback or questions on this guide, please feel free to leave us a message below in our comments section.


You might also like...

Leave us a message...

This site uses Akismet to reduce spam. Learn how your comment data is processed.