docs/content/copilot/reference/allowlist-reference.md

title, allowTitleToDifferFromFilename, intro, permissions, versions, topics, category, redirect_from, contentType

title	allowTitleToDifferFromFilename	intro	permissions	versions	topics	category	redirect_from	contentType
Allowlist reference	true	Learn how to allow certain traffic through your firewall or proxy server for {% data variables.product.prodname_copilot_short %} to work as intended in your organization.	Proxy server maintainers or firewall maintainers	feature copilot	Copilot	Configure Copilot	/copilot/reference/proxy-server-and-firewall-settings-for-copilot /copilot/managing-copilot/managing-github-copilot-in-your-organization/configuring-your-proxy-server-or-firewall-for-copilot /copilot/how-tos/administer/organizations/configuring-your-proxy-server-or-firewall-for-copilot	reference

If your company employs security measures like a firewall or proxy server, you should add the following URLs, ports, and protocols to an allowlist to ensure {% data variables.product.prodname_copilot_short %} works as expected:

{% data variables.product.github %} public URLs

Domain and/or URL	Purpose
https://github.com/login/*	Authentication
https://github.com/enterprises/YOUR-ENTERPRISE/*	Authentication for {% data variables.enterprise.prodname_managed_users %}, only required with {% data variables.product.prodname_emus %}
https://api.github.com/user	User Management
https://api.github.com/copilot_internal/*	User Management
https://copilot-telemetry.githubusercontent.com/telemetry	Telemetry
https://collector.github.com/*	Analytics telemetry
https://default.exp-tas.com	Telemetry
https://copilot-proxy.githubusercontent.com	API service for {% data variables.product.prodname_copilot_short %} suggestions
https://origin-tracker.githubusercontent.com	API service for {% data variables.product.prodname_copilot_short %} suggestions
https://*.githubcopilot.com/*1	API service for {% data variables.product.prodname_copilot_short %} suggestions
https://*.individual.githubcopilot.com2	API service for {% data variables.product.prodname_copilot_short %} suggestions
https://*.business.githubcopilot.com3	API service for {% data variables.product.prodname_copilot_short %} suggestions
https://*.enterprise.githubcopilot.com4	API service for {% data variables.product.prodname_copilot_short %} suggestions
https://*.SUBDOMAIN.ghe.com	For {% data variables.product.prodname_copilot_short %} users on {% data variables.enterprise.data_residency_site %}
https://SUBDOMAIN.ghe.com	For {% data variables.product.prodname_copilot_short %} users on {% data variables.enterprise.data_residency_site %}

Depending on the security policies and editors your organization uses, you may need to allowlist additional domains and URLs. For more information on specific editors, see Further reading.

Every user of the proxy server or firewall also needs to configure their own environment to connect to {% data variables.product.prodname_copilot_short %}. See AUTOTITLE.

Further reading

• Network Connections in {% data variables.product.prodname_vscode %} in the {% data variables.product.prodname_vs %} documentation
• Install and use {% data variables.product.prodname_vs %} and Azure Services behind a firewall or proxy server in the Microsoft documentation

---

1. Allows access to authorized users regardless of {% data variables.product.prodname_copilot_short %} plan. Do not add this URL to your allowlist if you are using subscription-based network routing. For more information on subscription-based network routing, see AUTOTITLE. ↩︎

2. Allows access to authorized users via a {% data variables.copilot.copilot_individuals_short %} plan. Do not add this URL to your allowlist if you are using subscription-based network routing. ↩︎

3. Allows access to authorized users via a {% data variables.copilot.copilot_business_short %} plan. Do not add this URL to your allowlist if you want to use subscription-based network routing to block users from using {% data variables.copilot.copilot_business_short %} on your network. ↩︎

4. Allows access to authorized users via a {% data variables.copilot.copilot_enterprise_short %} plan. Do not add this URL to your allowlist if you want to use subscription-based network routing to block users from using {% data variables.copilot.copilot_enterprise_short %} on your network. ↩︎