office365.com/
admin.microsoft.com/
portal.cloudappsecurity.com/
us.portal.cloudappsecurity.com/
eu.portal.cloudappsecurity.com/
eu2.portal.cloudappsecurity.com/
us2.portal.cloudappsecurity.com/
us3.portal.cloudappsecurity.com/
onmicrosoft.com/
account.office.net/
agent.office.net/
delve.office.com/
home.office.com/
portal.office.com/
suite.office.net/
webshell.suite.office.com/
www.office.com/
aria.microsoft.com/
portal.microsoftonline.com/
clientlog.portal.office.com/
nexus.officeapps.live.com/
nexusrules.officeapps.live.com/
amp.azure.net/
o365weve.net/
auth.gfx.ms/
appsforoffice.microsoft.com/
assets.onestore.ms/
az826701.vo.msecnd.net/
c.microsoft.com/
c1.microsoft.com/
client.hip.live.com/
contentstorage.osi.office.net/
dgps.support.microsoft.com/
docs.microsoft.com/
groupsapi-prod.outlookgroups.ms/
groupsapi2-prod.outlookgroups.ms/
groupsapi3-prod.outlookgroups.ms/
groupsapi4-prod.outlookgroups.ms/
msdn.microsoft.com/
platform.linkedin.com/
products.office.com/
prod.msocdn.com/
res.delve.office.com/
shellprod.msocdn.com/
support.content.office.com/
support.microsoft.com/
support.office.com/
technet.microsoft.com/
templates.office.com/
video.osi.office.net/
videocontent.osi.office.net/
videoplayer.osi.office.net/
manage.office.com/
protection.office.com/
blob.core.windows.net/
helpshift.com/
localytics.com/
firstpartyapps.oaspapps.com/
outlook.uservoice.com/
prod.firstpartyapps.oaspapps.com.akadns.net/
rink.hockeyapp.net/
sdk.hockeyapp.net/
telemetryservice.firstpartyapps.oaspapps.com/
wus-firstpartyapps.oaspapps.com/
liverdcxstorage.blob.core.windowsazure.com/
telemetry.remoteapp.windowsazure.com/
vortex.data.microsoft.com/
www.remoteapp.windowsazure.com/
hockeyapp.net/
sharepointonline.com/
staffhub.office.com/
api.office.com/
enterpriseregistration.windows.net/
dc.applicationinsights.microsoft.com/
dc.services.visualstudio.com/
forms.microsoft.com/
forms.office.com/
graph.windows.net/
mem.gfx.ms/
office365servicehealthcommunications.cloudapp.net/
securescore.office.com/
signup.microsoft.com/
staffhub.ms/
staffhubweb.azureedge.net/
staffhub.uservoice.com/
forms.osi.office.net/
watson.telemetry.microsoft.com/
wu.client.hip.live.com/
testconnectivity.microsoft.com/


Note: For some specific features, it may be required to exclude the following second-level domains altogether:

microsoft.com/
msocdn.com/
office.com/
office.net/
onmicrosoft.com/