RECENTProduct update
Tenant Allow/Block List in Microsoft 365 now supports IPv6 address
Analysis / inference: Microsoft Defender for Office 365 now supports allowing and blocking IPv6 addresses across all cloud environments.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Office 365 - What's new · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
The Tenant Allow/Block List has been updated to accept IPv6 addresses for both allow and block operations across Worldwide, GCC, GCC High, DoD, and 21Vianet deployments.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisWhy it matters
SOC analysts and administrators can now directly block or permit IPv6 addresses using the Tenant Allow/Block List across all Microsoft 365 environments, expanding network perimeter controls.
Operational impact
Expands filtering capabilities to support IPv6 network entities in tenant-level security entries.
Section 03 · Recommended actions
- Review existing perimeter defense requirements to determine if IPv6 blocking or allowing rules need to be added to the Tenant Allow/Block List.
What to check
- Verify tenant configuration in Microsoft Defender to ensure IPv6 addresses are properly formatted when adding entries to the Tenant Allow/Block List.
Affected scope
ProductsDefender for Office 365