{"id":8114,"date":"2024-09-14T08:02:52","date_gmt":"2024-09-13T23:02:52","guid":{"rendered":"https:\/\/m365jp.net\/?p=8114"},"modified":"2024-09-14T08:15:42","modified_gmt":"2024-09-13T23:15:42","slug":"mc889519-microsoft-defender-for-office-365-tenant-allow-block-list-will-support-ipv6-allow-and-block-entries","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2024-09-14-mc889519-microsoft-defender-for-office-365-tenant-allow-block-list-will-support-ipv6-allow-and-block-entries","title":{"rendered":"MC889519 | Microsoft Defender for Office 365: Tenant Allow\/Block List will support IPv6 allow and block entries"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">MC889519 | Microsoft Defender for Office 365: Tenant Allow\/Block List will support IPv6 allow and block entries<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Classification<\/th>\n<td>stayInformed<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>09\/13\/2024 22:26:38<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>09\/13\/2024 22:26:14<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>12\/20\/2024 08:00:00<\/td>\n<\/tr>\n<tr>\n<th>Message Content<\/th>\n<td>\n<p><b>NOTE:<\/b> This applies to customers with Microsoft Exchange Online Protection or Microsoft Defender for Office 365 Plan 1 or Plan 2 service plans.  <\/p>\n<p>Soon, it will be possible to create IPv6 allow and block entries in the <a href=\"https:\/\/security.microsoft.com\/tenantAllowBlockList\" target=\"_blank\" rel=\"noopener\">  Tenant Allow\/Block Lists<\/a>.  <\/p>\n<p>This message is associated with Microsoft 365 Roadmap ID <a href=\"https:\/\/www.microsoft.com\/microsoft-365\/roadmap?filters=&amp;searchterms=406166\" target=\"_blank\" rel=\"noopener\">  406166<\/a>.  <\/p>\n<p>[When this will happen:]  <\/p>\n<p>General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out late September 2024 and expect to complete by late October 2024.  <\/p>\n<p>[How this will affect your organization:]  <\/p>\n<p>Before this rollout: Admins cannot block or allow IPv6 addresses.  <\/p>\n<p>After this rollout, you can make IPv6 allow and block entries in these formats:  <\/p>\n<ul>\n<li>Colon-hexadecimal notation single IPv6 address (for example, 2001:0db8:85a3:0000:0000:8a2e:0370:7334)  <\/li>\n<li>Zero compression single IPv6 address (for example, 2001:db8::1)  <\/li>\n<li>Classless inter-domain routing (CIDR) IPv6 (for example, 2001:0db8::\/32). The range supported is 1-128.  <\/li>\n<\/ul>\n<p>The IP block entry will drop any email sent from that IP at the edge, whereas the IP allow will just override the IP filtering, allowing the rest of the Defender for Office 365 stack to evaluate threats. IP block has a higher priority over IP allow entries.  <\/p>\n<p>Admins can create entries in the Defender portal or with the Microsoft PowerShell  <a href=\"https:\/\/learn.microsoft.com\/powershell\/module\/exchange\/new-tenantallowblocklistitems?view=exchange-ps\" target=\"_blank\" rel=\"noopener\">  New-TenantAllowBlockListItems<\/a> cmdlet (ListType parameter with value IP) without need for submissions.  <\/p>\n<p><img decoding=\"async\" style=\"width: 400px;\" alt=\"admin controls\" src=\"https:\/\/img-prod-cms-rt-microsoft-com.akamaized.net\/cms\/api\/am\/imageFileData\/RW1p1RW?ver=a4dc\">  <\/p>\n<p>This change will not impact any of your current <a href=\"https:\/\/security.microsoft.com\/tenantAllowBlockList\" target=\"_blank\" rel=\"noopener\">  Tenant Allow\/Block List <\/a>entries or your IPv4 entries in the<a href=\"https:\/\/learn.microsoft.com\/defender-office-365\/connection-filter-policies-configure\" target=\"_blank\" rel=\"noopener\"> hosted connection filter policy<\/a> or  <a href=\"https:\/\/learn.microsoft.com\/Exchange\/mail-flow-best-practices\/use-connectors-to-configure-mail-flow\/enhanced-filtering-for-connectors\" target=\"_blank\" rel=\"noopener\">  enhanced filtering connection policy<\/a>  <\/p>\n<p><i>Last used date support for IPv6 allow and block will be added soon.<\/i>  <\/p>\n<p>Entry limits for IPv6:  <\/p>\n<ul>\n<li>Exchange Online Protection: The maximum number of allow entries is 500, and the maximum number of block entries is 500 (1000 entries in total).  <\/li>\n<li>Defender for Office 365 Plan 1: The maximum number of allow entries is 1000, and the maximum number of block entries is 1000 (2000 entries in total).  <\/li>\n<li>Defender for Office 365 Plan 2: The maximum number of allow entries is 5000, and the maximum number of block entries is 10000 (15000 entries in total).  <\/li>\n<\/ul>\n<p>Permissions:<\/p>\n<p>The same <a href=\"https:\/\/learn.microsoft.com\/defender-office-365\/tenant-allow-block-list-email-spoof-configure?source=recommendations\" target=\"_blank\" rel=\"noopener\">  existing set of permissions we have for Tenant Allow\/Block List<\/a> will also apply to this rollout.  <\/p>\n<p>[What you need to do to prepare:]  <\/p>\n<p>This rollout will happen automatically by the specified date with no admin action required before the rollout. If one wants to block emails from IPv6 addresses or allow email from IPv6 addresses, the admin need to create entries to do so.<\/p>\n<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\n<p><b>\u624b\u8a18\uff1a<\/b> \u3053\u308c\u306f\u3001Microsoft Exchange Online Protection \u307e\u305f\u306f Microsoft Defender for Office 365 \u30d7\u30e9\u30f3 1 \u307e\u305f\u306f\u30d7\u30e9\u30f3 2 \u306e\u30b5\u30fc\u30d3\u30b9 \u30d7\u30e9\u30f3\u3092\u3054\u5229\u7528\u306e\u304a\u5ba2\u69d8\u306b\u9069\u7528\u3055\u308c\u307e\u3059\u3002<\/p>\n<p>\u307e\u3082\u306a\u304f\u3001 <a href=\"https:\/\/security.microsoft.com\/tenantAllowBlockList\" target=\"_blank\" rel=\"noopener\">  \u30c6\u30ca\u30f3\u30c8\u306e\u8a31\u53ef\/\u30d6\u30ed\u30c3\u30af\u30ea\u30b9\u30c8\u306b<\/a> IPv6 \u306e\u8a31\u53ef\u30a8\u30f3\u30c8\u30ea\u3068\u30d6\u30ed\u30c3\u30af\u30a8\u30f3\u30c8\u30ea\u3092\u4f5c\u6210\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<p>\u3053\u306e\u30e1\u30c3\u30bb\u30fc\u30b8\u306f\u3001Microsoft 365 \u30ed\u30fc\u30c9\u30de\u30c3\u30d7 ID <a href=\"https:\/\/www.microsoft.com\/microsoft-365\/roadmap?filters=&amp;searchterms=406166\" target=\"_blank\" rel=\"noopener\">  406166\u306b\u95a2\u9023\u4ed8\u3051\u3089\u308c\u3066\u3044\u307e\u3059<\/a>\u3002<\/p>\n<p>[\u3053\u308c\u304c\u3044\u3064\u8d77\u3053\u308b\u304b:]<\/p>\n<p>\u4e00\u822c\u63d0\u4f9b (\u5168\u4e16\u754c\u3001GCC\u3001GCC High\u3001DoD): 2024 \u5e74 9 \u6708\u4e0b\u65ec\u306b\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u3092\u958b\u59cb\u3057\u30012024 \u5e74 10 \u6708\u4e0b\u65ec\u307e\u3067\u306b\u5b8c\u4e86\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002<\/p>\n<p>[\u3053\u308c\u304c\u3042\u306a\u305f\u306e\u7d44\u7e54\u306b\u3069\u306e\u3088\u3046\u306b\u5f71\u97ff\u3057\u307e\u3059\u304b:]  <\/p>\n<p>\u3053\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u524d: \u7ba1\u7406\u8005\u306f IPv6 \u30a2\u30c9\u30ec\u30b9\u3092\u30d6\u30ed\u30c3\u30af\u307e\u305f\u306f\u8a31\u53ef\u3067\u304d\u307e\u305b\u3093\u3002<\/p>\n<p>\u3053\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u5f8c\u3001IPv6 \u3067\u6b21\u306e\u5f62\u5f0f\u306e\u30a8\u30f3\u30c8\u30ea\u3092\u8a31\u53ef\u304a\u3088\u3073\u30d6\u30ed\u30c3\u30af\u3067\u304d\u307e\u3059\u3002<\/p>\n<ul>\n<li>\u30b3\u30ed\u30f3 16 \u9032\u8868\u8a18\u306e 1 \u3064\u306e IPv6 \u30a2\u30c9\u30ec\u30b9 (\u4f8b: 2001:0db8:85a3:0000:0000:8a2e:0370:7334)<\/li>\n<li>\u30bc\u30ed\u5727\u7e2e\u306e 1 \u3064\u306e IPv6 \u30a2\u30c9\u30ec\u30b9 (\u4f8b: 2001:db8::1)<\/li>\n<li>\u30af\u30e9\u30b9\u30ec\u30b9 \u30c9\u30e1\u30a4\u30f3\u9593\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0 (CIDR) IPv6 (\u4f8b: 2001:0db8::\/32)\u3002\u30b5\u30dd\u30fc\u30c8\u3055\u308c\u308b\u7bc4\u56f2\u306f 1 \u301c 128 \u3067\u3059\u3002<\/li>\n<\/ul>\n<p>IP \u30d6\u30ed\u30c3\u30af \u30a8\u30f3\u30c8\u30ea\u306f\u3001\u305d\u306e IP \u304b\u3089\u9001\u4fe1\u3055\u308c\u305f\u3059\u3079\u3066\u306e\u96fb\u5b50\u30e1\u30fc\u30eb\u3092\u30a8\u30c3\u30b8\u3067\u30c9\u30ed\u30c3\u30d7\u3057\u307e\u3059\u304c\u3001IP \u8a31\u53ef\u306f IP \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3092\u30aa\u30fc\u30d0\u30fc\u30e9\u30a4\u30c9\u3059\u308b\u3060\u3051\u3067\u3001Defender for Office 365 \u30b9\u30bf\u30c3\u30af\u306e\u6b8b\u308a\u306e\u90e8\u5206\u304c\u8105\u5a01\u3092\u8a55\u4fa1\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002IP \u30d6\u30ed\u30c3\u30af\u306f\u3001IP \u8a31\u53ef\u30a8\u30f3\u30c8\u30ea\u3088\u308a\u3082\u512a\u5148\u5ea6\u304c\u9ad8\u304f\u306a\u308a\u307e\u3059\u3002<\/p>\n<p>\u7ba1\u7406\u8005\u306f\u3001Defender \u30dd\u30fc\u30bf\u30eb\u307e\u305f\u306f Microsoft PowerShell <a href=\"https:\/\/learn.microsoft.com\/powershell\/module\/exchange\/new-tenantallowblocklistitems?view=exchange-ps\" target=\"_blank\" rel=\"noopener\">  \u306e New-TenantAllowBlockListItems<\/a> \u30b3\u30de\u30f3\u30c9\u30ec\u30c3\u30c8 (\u5024 IP \u3092\u6301\u3064 ListType \u30d1\u30e9\u30e1\u30fc\u30bf\u30fc) \u3092\u4f7f\u7528\u3057\u3066\u3001\u9001\u4fe1\u3092\u5fc5\u8981\u3068\u305b\u305a\u306b\u30a8\u30f3\u30c8\u30ea\u3092\u4f5c\u6210\u3067\u304d\u307e\u3059\u3002<\/p>\n<p><img decoding=\"async\" style=\"width: 400px;\" alt=\"admin controls\" src=\"https:\/\/img-prod-cms-rt-microsoft-com.akamaized.net\/cms\/api\/am\/imageFileData\/RW1p1RW?ver=a4dc\">  <\/p>\n<p>\u3053\u306e\u5909\u66f4\u306f\u3001\u73fe\u5728\u306e<a href=\"https:\/\/security.microsoft.com\/tenantAllowBlockList\" target=\"_blank\" rel=\"noopener\">\u30c6\u30ca\u30f3\u30c8\u8a31\u53ef\/\u30d6\u30ed\u30c3\u30af \u30ea\u30b9\u30c8  <\/a>\u30a8\u30f3\u30c8\u30ea\u3084\u3001<a href=\"https:\/\/learn.microsoft.com\/defender-office-365\/connection-filter-policies-configure\" target=\"_blank\" rel=\"noopener\">\u30db\u30b9\u30c8\u578b\u63a5\u7d9a\u30d5\u30a3\u30eb\u30bf\u30fc \u30dd\u30ea\u30b7\u30fc<\/a>\u307e\u305f\u306f<a href=\"https:\/\/learn.microsoft.com\/Exchange\/mail-flow-best-practices\/use-connectors-to-configure-mail-flow\/enhanced-filtering-for-connectors\" target=\"_blank\" rel=\"noopener\">\u62e1\u5f35\u30d5\u30a3\u30eb\u30bf\u30fc\u63a5\u7d9a\u30dd\u30ea\u30b7\u30fc<\/a>\u306e   IPv4 \u30a8\u30f3\u30c8\u30ea\u306b\u306f\u5f71\u97ff\u3057\u307e\u305b\u3093  <\/p>\n<p><i>IPv6 \u306e\u8a31\u53ef\u3068\u30d6\u30ed\u30c3\u30af\u306e\u6700\u7d42\u4f7f\u7528\u65e5\u306e\u30b5\u30dd\u30fc\u30c8\u306f\u3001\u307e\u3082\u306a\u304f\u8ffd\u52a0\u3055\u308c\u307e\u3059\u3002<\/i>  <\/p>\n<p>IPv6 \u306e\u30a8\u30f3\u30c8\u30ea\u5236\u9650:<\/p>\n<ul>\n<li>Exchange Online Protection: \u8a31\u53ef\u30a8\u30f3\u30c8\u30ea\u306e\u6700\u5927\u6570\u306f 500 \u3067\u3001\u30d6\u30ed\u30c3\u30af \u30a8\u30f3\u30c8\u30ea\u306e\u6700\u5927\u6570\u306f 500 (\u5408\u8a08 1000 \u30a8\u30f3\u30c8\u30ea) \u3067\u3059\u3002<\/li>\n<li>Defender for Office 365 \u30d7\u30e9\u30f3 1: \u8a31\u53ef\u30a8\u30f3\u30c8\u30ea\u306e\u6700\u5927\u6570\u306f 1000 \u3067\u3001\u30d6\u30ed\u30c3\u30af \u30a8\u30f3\u30c8\u30ea\u306e\u6700\u5927\u6570\u306f 1000 (\u5408\u8a08 2000 \u30a8\u30f3\u30c8\u30ea) \u3067\u3059\u3002<\/li>\n<li>Defender for Office 365 \u30d7\u30e9\u30f3 2: \u8a31\u53ef\u30a8\u30f3\u30c8\u30ea\u306e\u6700\u5927\u6570\u306f 5000 \u3067\u3001\u30d6\u30ed\u30c3\u30af \u30a8\u30f3\u30c8\u30ea\u306e\u6700\u5927\u6570\u306f 10000 (\u5408\u8a08 15000 \u30a8\u30f3\u30c8\u30ea) \u3067\u3059\u3002<\/li>\n<\/ul>\n<p>\u6a29\u9650\uff1a<\/p>\n<p><a href=\"https:\/\/learn.microsoft.com\/defender-office-365\/tenant-allow-block-list-email-spoof-configure?source=recommendations\" target=\"_blank\" rel=\"noopener\">\u30c6\u30ca\u30f3\u30c8\u8a31\u53ef\/\u30d6\u30ed\u30c3\u30af \u30ea\u30b9\u30c8\u306b\u5bfe\u3057\u3066\u6301\u3063\u3066\u3044\u308b\u65e2\u5b58\u306e\u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u306e\u30bb\u30c3\u30c8<\/a>\u306f\u3001\u3053\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u306b\u3082\u9069\u7528\u3055\u308c\u307e\u3059\u3002<\/p>\n<p>\u3010\u6e96\u5099\u306b\u5fc5\u8981\u306a\u3053\u3068\u3011<\/p>\n<p>\u3053\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u306f\u3001\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u524d\u306b\u7ba1\u7406\u8005\u306e\u64cd\u4f5c\u3092\u5fc5\u8981\u3068\u305b\u305a\u306b\u3001\u6307\u5b9a\u3055\u308c\u305f\u65e5\u4ed8\u307e\u3067\u306b\u81ea\u52d5\u7684\u306b\u884c\u308f\u308c\u307e\u3059\u3002IPv6\u30a2\u30c9\u30ec\u30b9\u304b\u3089\u306e\u30e1\u30fc\u30eb\u3092\u30d6\u30ed\u30c3\u30af\u3057\u305f\u3044\u5834\u5408\u3001\u307e\u305f\u306fIPv6\u30a2\u30c9\u30ec\u30b9\u304b\u3089\u306e\u30e1\u30fc\u30eb\u3092\u8a31\u53ef\u3057\u305f\u3044\u5834\u5408\u306f\u3001\u7ba1\u7406\u8005\u304c\u30a8\u30f3\u30c8\u30ea\u30fc\u3092\u4f5c\u6210\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>MC889519 | Microsoft Defender for Office 365: Tenant Allow\/Block List will support IPv6 allow and block entrie [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-8114","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/8114","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=8114"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/8114\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=8114"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=8114"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=8114"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}