All Knox devices and Workspace containers.

[Summary]

Some Samsung apps require connections to be open in order to function. Here is a list of some apps that need certain URLs to be whitelisted:

a. Specific URL for MS Office on Samsung Apps
http://www.samsungapps.com/appquery/appDetail.as?appId=com.microsoft.office.word
http://www.samsungapps.com/appquery/appDetail.as?appId=com.microsoft.office.excel
http://www.samsungapps.com/appquery/appDetail.as?appId=com.microsoft.office.powerpoint

b. SamsungApps needs:
http://apps.samsung.com/*
http://www.samsung.com/*
http://apps.samsung.cn/* => for China
http://img.samsungapps.com

c. Servers for applications updates :
http://vas.samsungapps.com/stub/*
https://vas.samsungapps.com/stub/*

d. Servers for APK files
http://hub-odc.samsungapps.com/ods.as
https://*-odc.samsungapps.com/ods.as
http://cn-ms.samsungapps.com/vas/stub/*
https://cn-ms.samsungapps.com/vas/stub/*
http://cf-dn.gw.samsungapps.com/*
http://cdnet-dn.gw.samsungapps.com/*

e. Additional URLs 
http://apps-dn2.ospserver.net/*
http://samsappsbn.vo.llnwd.net/*
*.samsungapps.com/*
*.samsung.com/*
samsappsbn.vo.llnwd.net/*

f. For CRL to be working
http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl

g. To add language for keybord in the container :
https://samsungresources.visionobject.com/*
https://skslm.swiftkey.net/*
https://gu.symcb.com/*
http://g.symcb.com/crls/gtglobal.crl (http://g.symcb.com.crls/gtglobal.crl)

h. Theme store
http://samsungresources.visionobjects.com
http://contentsblock.samqaicongen.com
http://webstore.samqaicongen.com
http://api.samsungosp.com

i. MS Office applications
https://inst.platform.bing.com/api/log