Issue:
Licensing and activation in Office 365/Microsoft 365 are being blocked by Browsing protection/Web content control.
Resolution:
Following domains/URL are necessary for Microsoft365/ Office365. Browsing protection category sometimes consider those as Webmail/SNS/Entertainment/etc depending on the site reputation report. Please allow those URL in your profile by adding Web site exceptions.
https://officecdn.microsoft.com
https://ols.officeapps.live.com/olsc
https://activation.sls.microsoft.com
https://odc.officeapps.live.com
https://crl.microsoft.com/pki/crl/products/MicrosoftProductSecureServer.crl
https://crl.microsoft.com/pki/crl/products/MicrosoftRootAuthority.crl
https://crl.microsoft.com/pki/crl/products/MicrosoftProductSecureCommunicationsPCA.crl
https://www.microsoft.com/pki/crl/products/MicrosoftProductSecureCommunicationsPCA.crl
go.microsoft.com
office15client.microsoft.com
#Wrongly categorized url can be corrected via SAS(submit-a-sample) request.
https://www.withsecure.com/en/support/contact-support/submit-a-sample
All the domains for Office/Microsoft 365 licensing can be found in this article step3.
https://docs.microsoft.com/en-my/office/troubleshoot/activation/issue-when-activate-office-from-office-365
#Those domains can be changing anytime and Withsecure cannot provide latest information. By allowing root domain can be workaround for that. This may cause lower security.
*microsoft.com
*live.com
Article no: 000030914