Merge pull request #26797 from MicrosoftDocs/main

Publish main to live, Tuesday 10:30 PM PST, 10/22

copilot/manage-public-web-access.md

@@ -13,7 +13,7 @@ ms.collection:
 - m365copilot
 - magic-ai-copilot
 hideEdit: true
-ms.date: 10/04/2024
+ms.date: 10/22/2024
 ---
 
 # Data, privacy, and security for web queries in Microsoft 365 Copilot and Microsoft Copilot
@@ -95,6 +95,9 @@ To manage web search so it aligns with organizational policies, user preferences
 
 ### IT administrator control for both Microsoft 365 Copilot and Microsoft Copilot
 
+> [!NOTE]
+> In the second half of November 2024, we'll be adding a new policy to provide you with more control for making web search available to your users. The policy will be called "Allow web search in Copilot" and will be available only in [Cloud Policy service for Microsoft 365](/microsoft-365-apps/admin-center/overview-cloud-policy). We’ll update this section with more details once the new policy is available.
+
 Web search in both Microsoft 365 Copilot and Microsoft Copilot is part of optional connected experiences for Microsoft 365. The [privacy setting for optional connected experiences](/microsoft-365-apps/privacy/manage-privacy-controls#policy-setting-for-optional-connected-experiences) allows IT admins to either enable or disable web search for users or user groups across the tenant they manage in accordance with their organization’s policies, data privacy laws, or other regulatory requirements. This applies to both Microsoft 365 Copilot and Microsoft Copilot.
 
 If optional connected experiences, and thereby web search, are enabled, Microsoft 365 Copilot users within the tenant can choose for themselves whether to enable or disable web search using the web content plugin toggle. The web content plugin toggle isn't available as part of the Microsoft Copilot user experience.

microsoft-365/enterprise/urls-and-ip-address-ranges.md

@@ -62,8 +62,18 @@ Data columns shown are:
 
 - **Ports**: Lists the TCP or UDP ports that are combined with listed IP addresses to form the network endpoint. You may notice some duplication in IP address ranges where there are different ports listed.
 
+## [Microsoft 365 Unified Domains](cloud-microsoft-domain.md)
+
 > [!NOTE]
-> Microsoft has begun a long-term transition to providing services from the **cloud.microsoft** namespace to simplify the endpoints managed by our customers. If you are following existing guidance for allowing access to required endpoints as listed below, there’s no further action required from you.
+> In response to customer feedback and to streamline endpoint management, Microsoft has initiated the process of consolidating Microsoft 365 apps and services into a select group of dedicated, secured, and purpose-managed domains within the **.microsoft** top level domain (TLD). 
+> 
+> To avoid connectivity issues for users, please ensure that the following essential domains are included in your allow-list and that connectivity to these domains is not blocked.
+
+| ID | Category | Domain name| Purpose | Ports |
+|---|---|---|---|---|
+|184|Required|`*.cloud.microsoft`|Dedicated to authenticated user facing Microsoft SaaS product experiences.|**TCP:** 443,80<br>**UDP:** 443|
+|184|Required|`*.static.microsoft`|Dedicated to static (not customer generated) content hosted on CDNs.|**TCP:** 443,80<br>**UDP:** 443|
+|184|Required|`*.usercontent.microsoft`|Content used in Microsoft 365 experiences that requires domain isolation from applications.|**TCP:** 443,80<br>**UDP:** 443|
 
 [!INCLUDE [Microsoft 365 worldwide endpoints](../includes/office-365-worldwide-endpoints.md)]