Endpunkte – Office 365 DeutschlandOffice 365 Germany endpoints

Gilt für: Office 365 AdministratorApplies To: Office 365 Admin

Für Office 365 ist eine Verbindung mit dem Internet erforderlich.Office 365 requires connectivity to the Internet. Die unten aufgeführten Endpunkte sollten nur für Kunden erreichbar sein, die Office 365 Deutschland -Pläne verwenden.The endpoints below should be reachable for customers using Office 365 Germany plans only.

Note

Microsoft has released a REST-based web service for the IP address and FQDN entries on this page.Microsoft has released a REST-based web service for the IP address and FQDN entries on this page. This new service will help you configure and update network perimeter devices such as firewalls and proxy servers.This new service will help you configure and update network perimeter devices such as firewalls and proxy servers. You can download the list of endpoints, the current version of the list, or specific changes.You can download the list of endpoints, the current version of the list, or specific changes. This service replaces the XML document linked from this page, which was deprecated on October 2, 2018.This service replaces the XML document linked from this page, which was deprecated on October 2, 2018. To try out this new service, go to Web service.To try out this new service, go to Web service.

Office 365-Endpunkte: Weltweit (einschließlich GCC) | Office 365, betrieben von 21Vianet | Office 365 Deutschland | Office 365 U.S. Government DoD | Office 365 U.S. Government GCC High |Office 365 endpoints: Worldwide (including GCC) | Office 365 operated by 21 Vianet | Office 365 Germany | Office 365 U.S. Government DoD | Office 365 U.S. Government GCC High |

Letzte Aktualisierung: 06/29/2020-  RSS- Änderungsprotokoll AbonnementLast updated: 06/29/2020 - RSS Change Log subscription Download: alle erforderlichen und optionalen Ziele in einer Liste im JSON-Format.Download: all required and optional destinations in one JSON formatted list.

Beginnen Sie mit der Verwaltung Office 365 Endpunkte , um unsere Empfehlungen für die Verwaltung der Netzwerkkonnektivität mithilfe dieser Daten zu verstehen.Start with Managing Office 365 endpoints to understand our recommendations for managing network connectivity using this data. Endpunkte-Daten werden zu Beginn jedes Monats mit neuen IP-Adressen und URLs aktualisiert, die 30 Tage vor der aktiven Veröffentlichung veröffentlicht wurden.Endpoints data is updated at the beginning of each month with new IP Addresses and URLs published 30 days in advance of being active. Auf diese Weise können Kunden, die noch nicht über automatisierte Updates verfügen, Ihre Prozesse abschließen, bevor neue Verbindungen erforderlich sind.This lets customers who do not yet have automated updates to complete their processes before new connectivity is required. Endpunkte können auch während des Monats bei Bedarf aktualisiert werden, um Support Eskalationen, Sicherheitsvorfälle oder andere unmittelbare betriebliche Anforderungen zu beheben.Endpoints may also be updated during the month if needed to address support escalations, security incidents, or other immediate operational requirements. Sie können sich jederzeit auf das Abonnement für Änderungsprotokolleberufen.You can always refer to the change log subscription.

Die auf dieser Seite unten gezeigten Daten werden aus den Rest-basierten Webdiensten generiert.The data shown on this page below is all generated from the REST-based web services. Wenn Sie für den Zugriff auf diese Daten ein Skript oder ein Netzwerkgerät verwenden, sollten Sie direkt zum Webdienst wechseln.If you are using a script or a network device to access this data, you should go to the Web service directly.

Endpoint data below lists requirements for connectivity from a user’s machine to Office 365.Endpoint data below lists requirements for connectivity from a user’s machine to Office 365. It does not include network connections from Microsoft into a customer network, sometimes called hybrid or inbound network connections.It does not include network connections from Microsoft into a customer network, sometimes called hybrid or inbound network connections.

The endpoints are grouped into four service areas.The endpoints are grouped into four service areas. The first three service areas can be independently selected for connectivity.The first three service areas can be independently selected for connectivity. The fourth service area is a common dependency (called Microsoft 365 Common and Office) and must always have network connectivity.The fourth service area is a common dependency (called Microsoft 365 Common and Office) and must always have network connectivity.

Dies sind die dargestellten Datenspalten:Data columns shown are:

  • ID: The ID number of the row, also known as an endpoint set.ID: The ID number of the row, also known as an endpoint set. This ID is the same as is returned by the web service for the endpoint set.This ID is the same as is returned by the web service for the endpoint set.

  • Category: Shows whether the endpoint set is categorized as “Optimize”, “Allow”, or “Default”.Category: Shows whether the endpoint set is categorized as “Optimize”, “Allow”, or “Default”. You can read about these categories and guidance for management of them at https://aka.ms/pnc.You can read about these categories and guidance for management of them at https://aka.ms/pnc. This column also lists which endpoint sets are required to have network connectivity.This column also lists which endpoint sets are required to have network connectivity. For endpoint sets which are not required to have network connectivity, we provide notes in this field to indicate what functionality would be missing if the endpoint set is blocked.For endpoint sets which are not required to have network connectivity, we provide notes in this field to indicate what functionality would be missing if the endpoint set is blocked. If you are excluding an entire service area, the endpoint sets listed as required do not require connectivity.If you are excluding an entire service area, the endpoint sets listed as required do not require connectivity.

  • ER: This is Yes if the endpoint set is supported over Azure ExpressRoute with Office 365 route prefixes.ER: This is Yes if the endpoint set is supported over Azure ExpressRoute with Office 365 route prefixes. The BGP community that includes the route prefixes shown aligns with the service area listed.The BGP community that includes the route prefixes shown aligns with the service area listed. When ER is No, this means that ExpressRoute is not supported for this endpoint set.When ER is No, this means that ExpressRoute is not supported for this endpoint set. However, it should not be assumed that no routes are advertised for an endpoint set where ER is No.However, it should not be assumed that no routes are advertised for an endpoint set where ER is No.

  • Addresses: Lists the FQDNs or wildcard domain names and IP Address ranges for the endpoint set.Addresses: Lists the FQDNs or wildcard domain names and IP Address ranges for the endpoint set. Note that an IP Address range is in CIDR format and may include many individual IP Addresses in the specified network.Note that an IP Address range is in CIDR format and may include many individual IP Addresses in the specified network.

  • Ports: Lists the TCP or UDP ports that are combined with the Addresses to form the network endpoint.Ports: Lists the TCP or UDP ports that are combined with the Addresses to form the network endpoint. You may notice some duplication in IP Address ranges where there are different ports listed.You may notice some duplication in IP Address ranges where there are different ports listed.

Exchange OnlineExchange Online

IDID KategorieCategory ERER AddressesAddresses PortsPorts
11 OptimierenOptimize
ErforderlichRequired
NeinNo outlook.office.de
51.4.64.0/23, 51.5.64.0/23
TCP: 443, 80TCP: 443, 80
22 StandardDefault
ErforderlichRequired
NeinNo r1.res.office365.com TCP: 443, 80TCP: 443, 80
33 StandardDefault
ErforderlichRequired
NeinNo outlook.office.de TCP: 143, 25, 587, 993, 995TCP: 143, 25, 587, 993, 995
44 StandardDefault
ErforderlichRequired
NeinNo attachments.office365-net.de, autodiscover-s.outlook.de TCP: 443, 80TCP: 443, 80
55 ZulassenAllow
ErforderlichRequired
NeinNo *.protection.outlook.de
51.4.72.0/24, 51.4.80.0/27, 51.5.72.0/24, 51.5.80.0/27, 2a01:4180:4050:400::/64, 2a01:4180:4050:800::/64, 2a01:4180:4051:400::/64, 2a01:4180:4051:800::/64
TCP: 25, 443TCP: 25, 443

SharePoint Online und OneDrive for BusinessSharePoint Online and OneDrive for Business

IDID KategorieCategory ERER AddressesAddresses PortsPorts
88 OptimierenOptimize
ErforderlichRequired
NeinNo <tenant>.sharepoint.de
51.4.66.0/23, 51.5.66.0/23, 2a01:4180:4030::/44
TCP: 443, 80TCP: 443, 80
99 StandardDefault
ErforderlichRequired
NeinNo odc.osi.office.de TCP: 443, 80TCP: 443, 80
1010 StandardDefault
ErforderlichRequired
NeinNo *.wns.windows.com TCP: 443, 80TCP: 443, 80
1111 StandardDefault
ErforderlichRequired
NeinNo officeapps.live.com TCP: 443, 80TCP: 443, 80
1212 StandardDefault
ErforderlichRequired
NeinNo shellprod.msocdn.de, spoprod-a.akamaihd.net, static.sharepointonline.com TCP: 443, 80TCP: 443, 80
1313 StandardDefault
ErforderlichRequired
NeinNo *.search.production.de.azuretrafficmanager.de TCP: 443TCP: 443
1414 StandardDefault
ErforderlichRequired
NeinNo odc.officeapps.live.com, officeclient.microsoft.com TCP: 443, 80TCP: 443, 80
1515 StandardDefault
ErforderlichRequired
NeinNo mobile.pipe.aria.microsoft.com, ssw.live.com, watson.telemetry.microsoft.com TCP: 443, 80TCP: 443, 80
1616 StandardDefault
ErforderlichRequired
NeinNo oneclient.sfx.ms TCP: 443, 80TCP: 443, 80
1717 StandardDefault
ErforderlichRequired
NeinNo *.svc.ms TCP: 443, 80TCP: 443, 80

Skype for Business Online und Microsoft TeamsSkype for Business Online and Microsoft Teams

IDID KategorieCategory ERER AddressesAddresses PortsPorts
66 OptimierenOptimize
ErforderlichRequired
NeinNo *.germeetings.skype.de, *.infra.skype.de, *.online.skype.de, *.resources.skype.de
51.4.68.0/26, 51.4.68.128/25, 51.5.69.0/26, 51.5.69.128/25, 2a01:4180:4040:1::/64, 2a01:4180:4040:2::/64, 2a01:4180:4040:7::/64, 2a01:4180:4040:8::/64
TCP: 443, 80TCP: 443, 80
UDP: 3478UDP: 3478
77 StandardDefault
ErforderlichRequired
NeinNo *.germeetings.skype.de, *.infra.skype.de, *.online.skype.de, *.resources.skype.de TCP: 5061, 50000-59999TCP: 5061, 50000-59999
UDP: 50000-59999UDP: 50000-59999

Microsoft 365 allgemein und Office OnlineMicrosoft 365 Common and Office Online

IDID KategorieCategory ERER AddressesAddresses PortsPorts
1818 ZulassenAllow
ErforderlichRequired
NeinNo *.online.office.de
51.4.144.200/32, 51.5.149.3/32, 51.18.16.0/23
TCP: 443TCP: 443
1919 StandardDefault
ErforderlichRequired
NeinNo *.cdn.office.net, broadcast.cdn.office.de, excel.cdn.office.de, officeapps.cdn.office.de, onenote.cdn.office.de, powerpoint.cdn.office.de, view.cdn.office.de, visio.cdn.office.de, word-edit.cdn.office.de, word-view.cdn.office.de TCP: 443TCP: 443
2020 ZulassenAllow
ErforderlichRequired
NeinNo adminwebservice.microsoftonline.de, becws.microsoftonline.de, companymanager.microsoftonline.de, device.login.microsoftonline.de, directoryprovisioning.cloudapi.de, graph.cloudapi.de, graph.microsoft.de, login.microsoftonline.de, logincert.microsoftonline.de, pas.cloudapi.de, passwordreset.activedirectory.microsoftazure.de, provisioningapi.microsoftonline.de, syncservice.microsoftonline.de
51.4.2.10/32, 51.4.71.61/32, 51.4.136.38/31, 51.4.136.40/31, 51.4.136.42/32, 51.4.146.38/32, 51.4.146.206/32, 51.5.16.7/32, 51.5.71.22/32, 51.5.136.32/30, 51.5.136.36/32, 51.5.145.29/32, 51.5.145.122/32
TCP: 443, 80TCP: 443, 80
2222 StandardDefault
ErforderlichRequired
NeinNo *.msauth.net, *.msauthimages.de, *.msftauth.net, *.msftauthimages.de, secure.aadcdn.microsoftonline-p.com, secure.aadcdn.microsoftonline-p.de TCP: 443, 80TCP: 443, 80
2525 StandardDefault
ErforderlichRequired
NeinNo *.de.msods.nsatc.net, *.office.de.akadns.net, *.windows.de.nsatc.net, officehome.msocdn.de, shellprod.msocdn.com TCP: 443, 80TCP: 443, 80
2626 StandardDefault
ErforderlichRequired
NeinNo *.d-trust.net TCP: 443, 80TCP: 443, 80
2727 ZulassenAllow
ErforderlichRequired
NeinNo *.onmicrosoft.de, *.osi.office.de, office.de, portal.office.de, webshell.suite.office.de, www.office.de
51.4.70.0/24, 51.4.71.0/24, 51.4.226.115/32, 51.4.227.178/32, 51.4.230.178/32, 51.5.70.0/24, 51.5.71.0/24, 51.5.147.48/32, 51.5.242.163/32, 51.5.245.67/32, 2a01:4180:2001::2/128, 2a01:4180:2001::92/128, 2a01:4180:2001::234/128, 2a01:4180:2001::3b8/128, 2a01:4180:2401::5/128, 2a01:4180:2401::11f/128, 2a01:4180:2401::33b/128, 2a01:4180:2401::55b/128
TCP: 443, 80TCP: 443, 80
2828 StandardDefault
ErforderlichRequired
NeinNo *.cloudfront.net, prod.msocdn.de, r1.res.office365.com, shellprod.msocdn.de TCP: 443, 80TCP: 443, 80
2929 ZulassenAllow
ErforderlichRequired
NeinNo 51.4.144.41/32, 51.4.144.174/32, 51.4.145.38/32, 51.4.147.81/32, 51.4.147.233/32, 51.4.148.12/32, 51.4.150.145/32, 51.5.147.242/32, 51.5.149.100/32, 51.5.149.119/32, 51.5.149.123/32, 51.5.149.180/32, 51.5.149.186/32, 51.18.0.0/21 TCP: 443, 80TCP: 443, 80
3030 StandardDefault
ErforderlichRequired
NeinNo sharepoint.de TCP: 443, 80TCP: 443, 80
3131 StandardDefault
ErforderlichRequired
NeinNo o15.officeredir.microsoft.com, odc.officeapps.live.com, odcsm.officeapps.live.com, office.microsoft.com, office15client.microsoft.com, officeimg.vo.msecnd.net, roaming.officeapps.live.com TCP: 443, 80TCP: 443, 80
3333 StandardDefault
ErforderlichRequired
NeinNo res.delve.office.com TCP: 443TCP: 443
3434 StandardDefault
ErforderlichRequired
NeinNo lpcres.delve.office.com TCP: 443TCP: 443
3535 StandardDefault
ErforderlichRequired
NeinNo *.office.de TCP: 443, 80TCP: 443, 80