add add'l clouds to safelist article

Author: kfollis

articles/azure-portal/azure-portal-safelist-urls.md

@@ -5,7 +5,7 @@ services: azure-portal
 keywords: 
 author: kfollis
 ms.author: kfollis
-ms.date: 07/29/2019
+ms.date: 08/29/2019
 ms.topic: conceptual
 
 ms.service: azure-portal
@@ -17,36 +17,78 @@ For good performance and connectivity between your local- or wide-area network a
 
 ## Azure portal URLs for proxy bypass
 
+The URL endpoints to safelist for the Azure portal differ, depending on the Azure cloud where your organization is deployed. This article lists the URLs to safelist for the following clouds:
+
+* [Worldwide Cloud](#worldwide-cloud)
+* [U.S. Government Cloud](#u.s.-government-cloud)
+* [China Government Cloud](#china-government-cloud)
+
 Add the following list of URLs to your proxy server or firewall to allow network traffic to these endpoints to bypass restrictions:
 
+### Worldwide Cloud
+
 * *.aadcdn.microsoftonline-p.com
+* *.account.microsoft.com
 * *.aimon.applicationinsights.io
+* *.aka.ms
 * *.azure.com
+* *.azureafd.net
+* *.azure-api.net
 * *.azuredatalakestore.net
 * *.azureedge.net
 * *.exp.azure.com
 * *.ext.azure.com
 * *.gfx.ms
-* *.account.microsoft.com
 * *.hosting.portal.azure.net
+* *.loganalytics.io
 * *.marketplaceapi.microsoft.com
+* *.microsoft.com
 * *.microsoftonline.com
+* *.microsoftonline-p.com
 * *.msauth.net
 * *.msftauth.net
 * *.portal.azure.com
 * *.portalext.visualstudio.com
 * *.sts.microsoft.com
+* *.trafficmanager.net
 * *.vortex.data.microsoft.com
 * *.vscommerce.visualstudio.com
 * *.vssps.visualstudio.com
 * *.windows.net
+* *.windows-int.net
 * *.wpc.azureedge.net
 
+### U.S. Government Cloud
+
+* *.azure.us
+* *.loganalytics.us
+* *.microsoft.us
+* *.microsoftonline.us
+* *.usgovcloudapi.net
+* *.usgovtrafficmanager.net
+* *.windowsazure.us
+
+### China Government Cloud
+
+* *.azure.cn
+* *.microsoft.cn
+* *.microsoftonline.cn
+* *.chinacloudapi.cn
+* *.trafficmanager.cn
+* *.chinacloudsites.cn
+* *.windowsazure.cn
+
 > [!NOTE]
 > Traffic to these endpoints uses standard TCP ports for HTTP (80) and HTTPS (443).
 >
 >
 ## Next steps
 
-* Need to safelist IP addresses? Download the list of [Microsoft Azure datacenter IP ranges](https://www.microsoft.com/download/details.aspx?id=41653).
-* Other Microsoft services use additional URLs and IP addresses for connectivity. To optimize network connectivity for Microsoft 365 services, see [Set up your network for Office 365](/office365/enterprise/set-up-network-for-office-365).
+Need to safelist IP addresses? Download the list of Microsoft Azure datacenter IP ranges for your cloud:
+
+* [Worldwide](https://www.microsoft.com/download/details.aspx?id=56519)
+* [U.S. Government](http://www.microsoft.com/download/details.aspx?id=57063)
+* [Germany](http://www.microsoft.com/download/details.aspx?id=57064)
+* [China](http://www.microsoft.com/download/details.aspx?id=57062)
+
+Other Microsoft services use additional URLs and IP addresses for connectivity. To optimize network connectivity for Microsoft 365 services, see [Set up your network for Office 365](/office365/enterprise/set-up-network-for-office-365).