Firewall Rules for Graph API File Downloads

In the Graph API documentation, when sending a download request to the Graph API, the response is as follows:

HTTP/1.1 302 Found
Location: https://b0mpua-by3301.files.1drv.com/y23vmagahszhxzlcvhasdhasghasodfi

I have two questions:

1. Want to confirm whether allowing access to *.files.1drv.com is expected and secure when using the Graph API for file downloads.
2. Are there any official recommendations or best practices for configuring firewall rules to ensure file downloads work correctly with the Graph API?

Thank you for your help!

从链接的 Microsoft Graph driveItem 内容文档开始，检查其下载响应如何重定向到 files.1drv.com 主机。记录官方的防火墙指导，并确认允许该主机是否符合预期且安全；当两个问题都有权威答案时，工作即完成。