Currently, the tooling allowlist only allows for individual IP addresses. I went to add Microsoft Defender for Endpoint Public IPs to this list, however I see this is not currently available. With the integration with Defender for Endpoint, we are significantly limited when using isolation in Huntress and lose the telemetry from MDE, as well as the ability to do things like collect investigation packages from MDE without removing isolation and leaving the environment at risk.