diff --git a/eng/pipelines/official.yml b/eng/pipelines/official.yml
index 42c96f3bc..d621f9644 100644
--- a/eng/pipelines/official.yml
+++ b/eng/pipelines/official.yml
@@ -162,6 +162,10 @@ resources:
 extends:
   template: v1/1ES.Official.PipelineTemplate.yml@1esPipelines
   parameters:
+    settings:
+      # Default is 'Permissive,CFSClean' which blocks NuGet.org for publishing.
+      # Docs: https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-build/cloudbuild/security/1espt-network-isolation
+      networkIsolationPolicy: Permissive
     sdl:
       # Docs: https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-pipeline-templates/features/sdlanalysis/sourceanalysisstage#my-pipeline-uses-multiple-repositories-how-to-ensure-that-sdl-sources-stage-is-injected-for-all-the-repositories
       sourceRepositoriesToScan:
@@ -225,6 +229,7 @@ extends:
             image: 1es-windows-2022
             os: windows
           templateContext:
+            # Docs: https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-pipeline-templates/features/releasepipelines/overview
             type: releaseJob
             isProduction: true
           strategy: