Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Microsoft Edge requires connectivity to the Internet to support its features. This article identifies the domain URLs that you need to add to the Allow list to ensure communications through firewalls and other security mechanisms.
Note
Applies to Microsoft Edge version 77 or later.
Allow the following domain URLs for Microsoft Edge.
The service that Microsoft Edge uses to check for new updates.
https://msedge.api.cdp.microsoft.com
https://config.edge.skype.com
Locations Microsoft Edge can be downloaded from during an initial install or when an update is available. The download location determined by the Update Service.
http://msedge.f.tlu.dl.delivery.mp.microsoft.com
http://msedge.f.dl.delivery.mp.microsoft.com
http://msedge.b.tlu.dl.delivery.mp.microsoft.com
http://msedge.b.dl.delivery.mp.microsoft.com
https://msedge.sf.tlu.dl.delivery.mp.microsoft.com
https://msedge.sf.dl.delivery.mp.microsoft.com
https://msedge.sb.tlu.dl.delivery.mp.microsoft.com
https://msedge.sb.dl.delivery.mp.microsoft.com
Tip
To simplify the allow list for download locations a wild card can be used:
*.dl.delivery.mp.microsoft.com
Locations Microsoft Edge Extensions can be downloaded from during an initial install or when an update is available. The download location determined by the Update Service.
http://msedgeextensions.f.tlu.dl.delivery.mp.microsoft.com
http://msedgeextensions.f.dl.delivery.mp.microsoft.com
http://msedgeextensions.b.tlu.dl.delivery.mp.microsoft.com
http://msedgeextensions.b.dl.delivery.mp.microsoft.com
https://msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com
https://msedgeextensions.sf.dl.delivery.mp.microsoft.com
https://msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com
https://msedgeextensions.sb.dl.delivery.mp.microsoft.com
Tip
To simplify the allowlist for download locations a wild card can be used:
*.dl.delivery.mp.microsoft.com
The service that supports AI-assisted tab group features. Auto-named tab groups automatically name tab groups upon creation and organize tabs groups tabs by relevance and assign them a name and a color.
https://edge.microsoft.com/taggrouptitlegeneration/api/TitleGeneration/gen/
https://edge.microsoft.com/taggrouptitlegeneration/api/AutoGrouping/groupingacstreaming
For information about delivery optimization, see Delivery Optimization for Windows 10 updates.
- Client to Service communication:
*.do.dsp.mp.microsoft.com
(HTTP Port 80, HTTPS Port 443) - Client to Client communication: TCP port 7680 should be open for inbound traffic
These endpoints are required to ensure proper profile sign-in for both Microsoft personal accounts and Entra ID (formerly Azure AD) enterprise accounts.
https://login.live.com
https://login.microsoftonline.com
https://login.microsoft.com
https://login.windows.net
https://odc.officeapps.live.com
https://graph.microsoft.com
https://substrate.office.com
https://privacy.microsoft.com
https://cdn.odc.officeapps.live.com
https://logincdn.msauth.net
Note: This list of endpoints isn't exhaustive and may be updated over time. Refer to official documentation for the latest required endpoints as changes may occur.
These endpoints manage the reading and writing of synced data, rights management for secure data, and notifying the browser when new sync data is available.
Microsoft Edge sync service endpoints:
https://edge.microsoft.com
Azure Information Protection endpoints:
https://api.aadrm.com
(for most tenants)https://api.aadrm.de
(for tenants in Germany)https://api.aadrm.cn
(for tenants in China)
Microsoft Edge cloud messaging service endpoints:
https://*.cloudmessaging.edge.microsoft.com/
wss://*.cloudmessaging.edge.microsoft.com/
The service that Microsoft Edge uses to download the cloud-hosted site list for Internet Explorer (IE) mode. For more information, see Cloud Site List Management
https://edge.microsoft.com/
The service that Microsoft Edge uses to download the configuration profiles. For more information, see Microsoft Edge management service.
https://edge.microsoft.com/
https://clients.config.office.net
Microsoft Defender SmartScreen helps protect users from malicious sites and downloads.
https://*.smartscreen.microsoft.com/
https://*.smartscreen-prod.microsoft.com
https://*.urs.microsoft.com/
The service that supports Copilot, and other apps, in the Microsoft Edge sidebar.
http://edgeservices.bing.com/
https://edgeservices.bing.com/
Note
Other endpoints that Copilot requires to function can be found in the Copilot network requirements.
The service that supports Microsoft Rewards.
https://prod.rewardsplatform.microsoft.com/
The service that supports Web Content Filtering. For more information, see Configure Web Content Filtering on Microsoft Edge.
https://edge.microsoft.com/webcontentfiltering/api/categories
https://edge.microsoft.com/webcontentfiltering/api/guestmode-categories
https://edge.microsoft.com/webcontentfiltering/settings/v1
The service that supports feedback and diagnostics for desktop and mobile users.
https://api.msa.diagnostics.office.com
https://api.diagnostics.office.com
Provide metadata for browser features such as tracking protection, certificate revocation lists, and other browser component updates. Provide downloadable spellcheck dictionaries and ad-blocking blocklists. Provide services to support browser features such as collections, autofill, and extension store.
http://edge.microsoft.com/
http://msedge.f.tlu.dl.delivery.mp.microsoft.com
http://msedge.f.dl.delivery.mp.microsoft.com
http://msedge.b.tlu.dl.delivery.mp.microsoft.com
http://msedge.b.dl.delivery.mp.microsoft.com
https://edge.microsoft.com/
https://msedge.sf.tlu.dl.delivery.mp.microsoft.com
https://msedge.sf.dl.delivery.mp.microsoft.com
https://msedge.sb.tlu.dl.delivery.mp.microsoft.com
https://msedge.sb.dl.delivery.mp.microsoft.com