Technical Tip: Different Internet Service Database groups for Microsoft Office 365

[Dongfang_Li_FTNT]

Description	This article describes the different Internet Service Database groups for Microsoft Office 365. In the Internet Service Database (ISDB), there are multiple entries for Microsoft Office 365. This article describes the differences between them and how to effectively use these groups to allow traffic to Office 365, Azure, and Teams.
Scope	FortiOS, all firmware.
Solution	ISDB refers to Office 365 URLs and IP address ranges for Microsoft-related objects. It is possible to enable Microsoft Office 365, Microsoft Outlook, Microsoft Skype Teams, and Microsoft Azure to allow traffic to Office 365, Azure, and Teams. Below is the difference between ISDB regarding for Microsoft Office 365: Microsoft-Office365.Published covers the IP addresses published in this article. Microsoft-Office365.Published.Allow, and Microsoft-Office365.Published.Optimize covers only IP addresses with the Optimize/Allow category. Microsoft-Office365.Published.USGOV covers the IP addresses for U.S. Government DoD and U.S. Government GCC High. Microsoft-Office365 covers the IP addresses in 'SharePoint Online and OneDrive for Business' and 'Microsoft 365 Common and Office Online' sections, and the IP addresses collected according to the corresponding Office365 FQDNs in these sections. The general Microsoft FQDNs and third-party FQDNs are not included. Microsoft-Outlook covers the IP addresses in the 'Exchange Online' section, and the IP addresses collected according to the corresponding Outlook FQDNs in the section. The general Microsoft FQDNs and third-party FQDNs are not included. Microsoft-Skype_Teams covers the IP addresses in the 'Skype for Business Online and Microsoft Teams' section, and the IP addresses collected according to the corresponding Skype/Teams FQDNs in the section. The general Microsoft FQDNs and third-party FQDNs are not included. Microsoft-Teams.Published.Worldwide.Allow and Microsoft-Teams.Published.Worldwide.Optimize covers only IP addresses with the Optimize/Allow category within the 'Skype for Business Online and Microsoft Teams' section. Microsoft-Teams.Published.Worldwide.Allow and Microsoft-Teams.Published.Worldwide.Optimize covers only IP addresses with the Optimize/Allow category within the 'Skype for Business Online and Microsoft Teams' section. Microsoft-Office365.Published only covers the IP addresses published in the article, whereas Microsoft-Outlook, Microsoft-Skype_Teams, and Microsoft-Office365 also cover the IP addresses resolved from the corresponding FQDNs in the article, which include more IP addresses used by Office 365 services.