Locking down internet access from SCOM servers

I haven’t hit this for some time but a client is asking me to provide the urls that SCOM needs to access so they can lock it down on the proxy server. Currently I am using procmon to investigate this but does anyone know of a page of urls? Ideally MS would publish this like the Office 365 url access

I would try it with the IP address ranges from Azure Datacenters:

https://blogs.msdn.microsoft.com/hsirtl/2017/02/16/public-ip-addresses-of-azure-datacenters/

https://www.microsoft.com/en-us/download/details.aspx?id=41653

CRL-checking would be needed for example.