Microsoft Intune
FundamentalsEndpoints
In brief
The documented unauthenticated proxy access list for some Intune tasks now includes manage.microsoft.com and graph.microsoft.com; *.azureedge.net was removed.
What Intune admins need to know
Review proxy allowlists supporting Intune tasks to align them with the updated endpoint requirements.
This summary was assembled from the tracked documentation change. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
The information in this section also applies to the Microsoft Intune Certificate Connector. The connector has the same network requirements as managed devices.
The endpoints in this article allow access to the ports identified in the following tables.
For some tasks, Intune requires unauthenticated proxy server access to manage.microsoft.com,
*.azureedge.net,and graph.microsoft.com.Note
@@ -58,7 +58,7 @@ Note The information in this section also applies to the [Microsoft Intune Certificate Connector](certificates/connector/prerequisites). The connector has the same network requirements as managed devices.
- The endpoints in this article allow access to the ports identified in the following tables.
-- For some tasks, Intune requires unauthenticated proxy server access to manage.microsoft.com, \*.azureedge.net, and graph.microsoft.com.
+- For some tasks, Intune requires unauthenticated proxy server access to manage.microsoft.com, and graph.microsoft.com.
Note