MIP classification sync fail

Products

• Data Loss Prevention Enterprise Suite
• Data Loss Prevention Cloud Prevent for Microsoft Office 365

Issue/Introduction

When importing MIP credential profiles via System->Settings->MIP credential profile -> Add MIP Classification.

Then syncing the profile via System->Settings->Data Classification

The following error is observed:

MIP classification sync failed. Could not connect to Microsoft Azure AD or Microsoft 365 Security.

An analysis of Wireshark capture during a sync attempt shows traffic going to an address (10x.xx.xx.xx) which appears to be

dataservice.protection.outlook.com.

Environment

Release : 15.8

Cause

The URL is required to be allowed through the firewall.

Resolution

Allow *.dataservice.protection.outlook.com through the firewall. 

Additional Information

Microsoft has provided on the following site with firewall rules:

https://learn.microsoft.com/en-us/azure/azure-portal/azure-portal-safelist-urls?tabs=public-cloud