| api.apple-cloudkit.com | Allowed | |
| 0.pool.ntp.org | Allowed | |
| mask.icloud.com | Allowed | |
| xp.apple.com | Allowed | |
| mesu.apple.com | Allowed | |
github.com | Allowed | , |
api.github.com | Allowed | , |
| swscan.apple.com | Allowed | |
| swdist.apple.com | Allowed | |
| token.safebrowsing.apple | Allowed | |
| proxy.safebrowsing.apple | Allowed | |
| gdmf.apple.com | Allowed | |
| aka.ms | Allowed | , |
builds.dotnet.microsoft.com | Allowed | , |
| ocsp2.apple.com | Allowed | |
| api.nuget.org | Allowed | , |
| dc.services.visualstudio.com | Allowed | , |
| updates.cdn-apple.com | Allowed | |
ghcr.io | Allowed | |
pkg-containers.githubusercontent.com | Allowed | |
| index.crates.io | Allowed | , |
| static.crates.io | Allowed | , |
westus2-global.in.applicationinsights.azure.com | Allowed | |
| init.itunes.apple.com | Allowed | |
| repo.maven.apache.org | Allowed | , |
| repo1.maven.org | Allowed | , |
| nugetapiprod.trafficmanager.net | Allowed | |
dc.applicationinsights.azure.com | Allowed | |
global.in.ai.monitor.azure.com | Allowed | |
| crl3.digicert.com | Allowed | |
www.microsoft.com | Allowed | , |
| ts-crl.ws.symantec.com | Allowed | |
| crl4.digicert.com | Allowed | |
| s.symcb.com | Allowed | , |
| archive.apache.org | Allowed | , |
proxy.golang.org | Allowed | , |
registry-1.docker.io | Allowed | |
mcr.microsoft.com | Allowed | |
auth.docker.io | Allowed | |
| production.cloudfront.docker.com | Allowed | |
| governancecontainerregistry.azurecr.io | Allowed | |
| wus2managed66.blob.core.windows.net | Allowed | |
centralus.data.mcr.microsoft.com | Allowed | |
| ocsp.sectigo.com | Allowed | |
oneocsp.microsoft.com | Allowed | |
| ocsp.digicert.com | Allowed | |
| s.symcd.com | Allowed | |
| ts-ocsp.ws.symantec.com | Allowed | |
fe2cr.update.microsoft.com | Allowed | |
| x1.c.lencr.org | Allowed | |
| yr.c.lencr.org | Allowed | |
| yr2.c.lencr.org | Allowed | |
settings-win.data.microsoft.com | Allowed | |
| ocsp2.globalsign.com | Allowed | |