Whitelist xbox Live from decryption policy

Discus and support Whitelist xbox Live from decryption policy in XBoX on Consoles to solve the problem; Hi We have a physical firewall on site that is running SSL inspection, it is stopping the xbox live app working. The policy can be bypassed if we... Discussion in 'XBoX on Consoles' started by D2023456, Apr 26, 2023.

  1. D2023456
    D2023456 Guest

    Whitelist xbox Live from decryption policy


    Hi

    We have a physical firewall on site that is running SSL inspection, it is stopping the xbox live app working.

    The policy can be bypassed if we have a list of urls. I keep adding them as they are discovered but still cannot get it working.

    Is there a complete list of URLs that the app will use so a whitelist can be populated?

    Thanks

    :)
     
    D2023456, Apr 26, 2023
    #1
  2. Kathy A. Win User

    Whitelist xbox Live from decryption policy

    Hello D2023456,

    Thank you for your patience as we investigated this issue for you. Unfortunately we do not publish IP ranges for Xbox services. You may be able to approximate some of the IP ranges using the publicly available list of IP ranges used by Azure: https://www.microsoft.com/en-us/download/details.aspx?id=56519. However, there is no guarantee that all of the Xbox services in question will fall within these ranges. Also, allow-listing IP ranges for Xbox will only be part of the scenario that it sounds like you’re trying to address. Games and apps running on Xbox will also typically connect to web services, which may be hosted by game studios, third party cloud providers, etc. A more feasible approach to your scenario might be to programmatically identify the Xbox consoles on your network in order to exclude them from SSL inspection.

    Thank you for understanding.

    Regards,

  3. D2023456 Win User

    Whitelist xbox Live from decryption policy

    Hi

    That's correct, exactly what i am trying to setup.

    All the URL's mentioned in the second article have been added (and more) and it's still not working.

    I need a complete list of URLs that the client uses, something similar to this:

    Network ports used by the Xbox network on the Xbox console | Xbox Support

    Or another example would be similar to this which has been provided for Office:

    Office 365 URLs and IP address ranges - Microsoft 365 Enterprise | Microsoft Learn

    But for a PC using Xbox game pass.

    Thanks
  4. Darhyl Mayte Amizola Win User

    Whitelist xbox Live from decryption policy

    Hey, there!

    Thank you for contacting us and welcome to the Microsoft Community.

    My name is Darhyl. I'm an Independent Advisor and I will do my best to help you sort this out.

    I'm sorry you are experiencing any trouble right now. No worries, I'm here to help you.

    There seems to be no complete list of URLs however you might want to check what the user named Bmorris1 said in forums regarding Xbox Live & Decryption:

    "Recently I have faced an issue where Xbox Live fails to connect or more specifically, fails to 'authorize' when decryption is enabled.

    Looking into this further it seems that Xbox Live connects to similar services that Windows uses for Microsoft updates. It is known that in order to get microsoft updates to work when enabling decrypted, you have to exempt certain URLs as the server just rejects the connection.

    Apple is also similar, described in this article: https://live.paloaltonetworks.com/t5/Management......

    The same applies with Xbox Live.

    The no decrypt rule will look like this:"

    (The screenshot can be seen here on this link)

    https://live.paloaltonetworks.com/t5/general-to...
  5. D2023456 Win User

    Whitelist xbox Live from decryption policy

    Hi

    This will be for enterprise appliance.

    I can try to add that as well, didn't realize that would be needed.

    If they could provide a list of the exact requirements it would be helpful.

    Thanks
  6. Kathy A. Win User

    Whitelist xbox Live from decryption policy

    Hello D2023456,

    Thanks for your reply.

    I did not have any response from the team yet. I will post in here once I have one.

    Thank you for your time and patience.

    Regards,

Thema:

Whitelist xbox Live from decryption policy

Loading...
  1. Whitelist xbox Live from decryption policy - Similar Threads - Whitelist Live decryption

  2. Badge Xbox Live Gold 2002-2023 never received

    in XboX Insiders
    Badge Xbox Live Gold 2002-2023 never received: Hi, I'm sure many of you have never received the 2002-2023 Xbox Live Gold badge, which can be viewed on your Xbox profile. I've been an Xbox Live Gold member for several years, and I don't...
  3. I cant seem to be able to play online xbox live games.

    in XboX Insiders
    I cant seem to be able to play online xbox live games.: It first started last week, when i wasnt able to hop on Ark Survival Evolved. It said join failed. I check and the Ark server i play on had a discord, and they said xbox people may have connection...
  4. Feature Request: Native YouTube Live Streaming Support on Xbox

    in XboX Insiders
    Feature Request: Native YouTube Live Streaming Support on Xbox: Hi Xbox Team, As a Game Pass Ultimate subscriber and content creator, I’d love to see native support for YouTube Live streaming directly from Xbox consoles. While the current Twitch integration...
  5. xbox 360 wont sign in on xbox live??

    in XboX Insiders
    xbox 360 wont sign in on xbox live??: I was on a chat with an xbox player for 3 hours trying to figure out how to fix this issue. We tried all the methods and none were working. It got to the point where he asked me to write a report....
  6. whitelist on microsoft realms?

    in XBoX Accessibility
    whitelist on microsoft realms?: Hello, how does one setup a white list on Microsoft Realms to only allow specific members to join? 0523193b-b812-495c-b405-f3bde0fa1a02
  7. PURE whitelist for Xbox One S? How to block even "E for Everyone" category?

    in XBoX Accessibility
    PURE whitelist for Xbox One S? How to block even "E for Everyone" category?: I want a pure whitelist for my children accounts. Meaning, I want to block ALL ESRB categories, and only allow games I make exceptions to. But the content restrictions system always allows "E for...
  8. Xbox insider and the correct domains to whitelist for PiHole

    in XboX Insiders
    Xbox insider and the correct domains to whitelist for PiHole: I was wondering what domains need to be whitelisted so my PiHole doesn’t block any important domains in regards to the insider programme? I’ve whitelisted all the Microsoft domains I can find and...
  9. New domain to whitelist for PiHole

    in XboX Insiders
    New domain to whitelist for PiHole: Those using PiHole may want to add assets1.xboxlive.com to the whitelist. I've recently started getting errors trying to start an OS update whenever a new build is pushed live. This domain started...
  10. adding facebook to whitelist to Microsoft Xbox

    in XBoX on Windows
    adding facebook to whitelist to Microsoft Xbox: Been trying since i got this game and can't get connected to facebook keeps wanting me to add it to a whitelist and can't seam to find were i need to go for it can someone please help me?...