Azure IP Ranges and Service Tags – Public Cloud

Service Tags and Resources

Source JSON Files

Revision Number: 360

Microsoft Azure IP Ranges and Service Tags: Microsoft page

Latest JSON file with a standardized name: ServiceTags_Public.json

Latest Specific version: json-history/ServiceTags_Public_20250616.json

Previous JSON Versions: View JSON History

Palo Alto Networks Ready Files

Formatted TXT files for Palo Alto Networks firewalls are available on this page: ranges-services-pa/

Each file is organized by service name (e.g., AzureBackup.txt, AzureActiveDirectory.txt). Simply download the file for the Azure service you need and import it into your PA firewall configuration.

Automation-Friendly Design

This page was created to simplify the integration of Microsoft Azure IP ranges into Palo Alto Networks firewalls. Since the JSON file provided by Microsoft was not directly compatible, this project automates the generation of TXT files specifically formatted for PA firewalls.

Additionally, this project provides a static link to download the latest JSON file without having to parse Microsoft’s website, saving time and improving automation workflows.

Azure IP Ranges Script

This page was automatically generated using a Python script available at GitHub Repository, and updated regularly through GitHub Actions.

We recommend forking this script if you plan to automate your infrastructure with it. Forking ensures you maintain control of updates, can customize it for your environment, and enhance security by avoiding dependencies on this repository.

Features

Note: Microsoft updates these IP ranges weekly. Always verify the ranges against your requirements before implementation. Some service tags might not be available in all clouds and regions.