Merge pull request #87035 from kfollis/kfollis_safelistupdate

add add'l clouds to safelist article

Author: v-shils

articles/azure-portal/azure-portal-safelist-urls.md

@@ -5,7 +5,7 @@ services: azure-portal
 keywords: 
 author: kfollis
 ms.author: kfollis
-ms.date: 07/29/2019
+ms.date: 08/29/2019
 ms.topic: conceptual
 
 ms.service: azure-portal
@@ -17,36 +17,66 @@ For good performance and connectivity between your local- or wide-area network a
 
 ## Azure portal URLs for proxy bypass
 
-Add the following list of URLs to your proxy server or firewall to allow network traffic to these endpoints to bypass restrictions:
-
-* *.aadcdn.microsoftonline-p.com
-* *.aimon.applicationinsights.io
-* *.azure.com
-* *.azuredatalakestore.net
-* *.azureedge.net
-* *.exp.azure.com
-* *.ext.azure.com
-* *.gfx.ms
-* *.account.microsoft.com
-* *.hosting.portal.azure.net
-* *.marketplaceapi.microsoft.com
-* *.microsoftonline.com
-* *.msauth.net
-* *.msftauth.net
-* *.portal.azure.com
-* *.portalext.visualstudio.com
-* *.sts.microsoft.com
-* *.vortex.data.microsoft.com
-* *.vscommerce.visualstudio.com
-* *.vssps.visualstudio.com
-* *.windows.net
-* *.wpc.azureedge.net
+The URL endpoints to safelist for the Azure portal are specific to the Azure cloud where your organization is deployed. Select your cloud, then add the list of URLs to your proxy server or firewall to allow network traffic to these endpoints to bypass restrictions.
+
+#### [Public Cloud](#tab/public-cloud)
+```
+*.aadcdn.microsoftonline-p.com
+*.aka.ms
+*.applicationinsights.io
+*.azure.com
+*.azure.net
+*.azureafd.net
+*.azure-api.net
+*.azuredatalakestore.net
+*.azureedge.net
+*.loganalytics.io
+*.microsoft.com
+*.microsoftonline.com
+*.microsoftonline-p.com
+*.msauth.net
+*.msftauth.net
+*.trafficmanager.net
+*.visualstudio.com
+*.windows.net
+*.windows-int.net
+```
+
+#### [U.S. Government Cloud](#tab/us-government-cloud)
+```
+*.azure.us
+*.loganalytics.us
+*.microsoft.us
+*.microsoftonline.us
+*.msauth.net
+*.usgovcloudapi.net
+*.usgovtrafficmanager.net
+*.windowsazure.us
+```
+
+#### [China Government Cloud](#tab/china-government-cloud)
+```
+*.azure.cn
+*.microsoft.cn
+*.microsoftonline.cn
+*.chinacloudapi.cn
+*.trafficmanager.cn
+*.chinacloudsites.cn
+*.windowsazure.cn
+```
+---
 
 > [!NOTE]
 > Traffic to these endpoints uses standard TCP ports for HTTP (80) and HTTPS (443).
 >
 >
 ## Next steps
 
-* Need to safelist IP addresses? Download the list of [Microsoft Azure datacenter IP ranges](https://www.microsoft.com/download/details.aspx?id=41653).
-* Other Microsoft services use additional URLs and IP addresses for connectivity. To optimize network connectivity for Microsoft 365 services, see [Set up your network for Office 365](/office365/enterprise/set-up-network-for-office-365).
+Need to safelist IP addresses? Download the list of Microsoft Azure datacenter IP ranges for your cloud:
+
+* [Worldwide](https://www.microsoft.com/download/details.aspx?id=56519)
+* [U.S. Government](http://www.microsoft.com/download/details.aspx?id=57063)
+* [Germany](http://www.microsoft.com/download/details.aspx?id=57064)
+* [China](http://www.microsoft.com/download/details.aspx?id=57062)
+
+Other Microsoft services use additional URLs and IP addresses for connectivity. To optimize network connectivity for Microsoft 365 services, see [Set up your network for Office 365](/office365/enterprise/set-up-network-for-office-365).