Office 365 URLs and IP address ranges

Summary: Office 365 requires connectivity to the Internet. The endpoints below should be reachable for customers using Office 365 plans, including Government Community Cloud (GCC).

Note

Microsoft is developing a REST-based web service for the IP address and FQDN entries on this page. This new service will help you configure and update network perimeter devices such as firewalls and proxy servers. You can download the list of endpoints, the current version of the list, or specific changes. This service will eventually replace the XML document linked from this page. To try out this new service, go to Web service.

Office 365 Worldwide (+GCC) | Office 365 operated by 21 Vianet | Office 365 Germany | Office 365 U.S. Government DoD | Office 365 U.S. Government GCC High |

Last updated: 8/1/2018 - RSS Change Log subscription
Download: all required and optional destinations in one XML formatted list.
Use: our proxy PAC files

Start with Managing Office 365 endpoints to understand our recommendations for managing network connectivity using this data. Endpoints data is updated at the beginning of each month with new IP Addresses and URLs published 30 days in advance of being active. This allows for customers who do not yet have automated updates to complete their processes before new connectivity is required. Endpoints may also be updated during the month if needed to address support escalations, security incidents, or other immediate operational requirements. The data shown on this page below is all generated from the REST-based web services. If you are using a script or a network device to access this data, you should go to the Web service directly.

Endpoint data below lists requirements for connectivity from a user’s machine to Office 365. It does not include network connections from Microsoft into a customer network, sometimes called hybrid or inbound network connections.

The endpoints are grouped into four service areas. The first three service areas can be independently selected for connectivity. The fourth service area is a common dependency (called Microsoft 365 Common and Office Online) and must always have network connectivity.

Data columns shown are:

  • ID: The ID number of the row, also known as an endpoint set. This ID is the same as is returned by the web service for the endpoint set.

  • Category: Shows whether the endpoint set is categorized as “Optimize”, “Allow”, or “Default”. You can read about these categories and guidance for management of them at http://aka.ms/pnc. This column also lists which endpoint sets are required to have network connectivity. For endpoint sets which are not required to have network connectivity, we provide notes in this field to indicate what functionality would be missing if the endpoint set is blocked. If you are excluding an entire service area, the endpoint sets listed as required do not require connectivity.

  • ER: This is Yes if the endpoint set is supported over Azure ExpressRoute with Office 365 route prefixes. The BGP community that includes the route prefixes shown aligns with the service area listed. When ER is No, this means that ExpressRoute is not supported for this endpoint set. However, it should not be assumed that no routes are advertised for an endpoint set where ER is No.

  • Addresses: Lists the FQDNs or wildcard domain names and IP Address ranges for the endpoint set. Note that an IP Address range is in CIDR format and may include many individual IP Addresses in the specified network.

  • Ports: Lists the TCP or UDP ports that are combined with the Addresses to form the network endpoint. You may notice some duplication in IP Address ranges where there are different ports listed.

Exchange Online

ID Category ER Addresses Ports
1 Optimize
Required
Yes outlook.office.com, outlook.office365.com
13.107.6.152/31, 13.107.9.152/31, 13.107.18.10/31, 13.107.19.10/31, 13.107.128.0/22, 23.103.160.0/20, 23.103.224.0/19, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 111.221.112.0/21, 131.253.33.215/32, 132.245.0.0/16, 134.170.68.0/23, 150.171.32.0/22, 157.56.232.0/21, 157.56.240.0/20, 191.232.96.0/19, 191.234.6.152/32, 191.234.140.0/22, 204.79.197.215/32, 206.191.224.0/19, 2603:1006::/40, 2603:1016::/40, 2603:1020:800::/40, 2603:1026::/40, 2603:1026:200::/39, 2603:1026:400::/39, 2603:1026:600::/44, 2603:1026:620::/44, 2603:1026:800::/44, 2603:1026:820::/45, 2603:1036::/39, 2603:1036:200::/40, 2603:1036:400::/40, 2603:1036:600::/40, 2603:1036:800::/38, 2603:1036:c00::/40, 2603:1046::/37, 2603:1046:900::/40, 2603:1056::/40, 2603:1056:400::/40, 2603:1056:600::/40, 2603:1096::/38, 2603:1096:400::/40, 2603:1096:600::/40, 2603:1096:a00::/39, 2603:1096:c00::/40, 2603:10a6:200::/40, 2603:10a6:400::/40, 2603:10a6:600::/40, 2603:10a6:800::/40, 2603:10d6:200::/40, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128, 2a01:111:f400::/48
TCP: 443, 80
2 Allow
Required
Yes smtp.office365.com
13.107.6.152/31, 13.107.9.152/31, 13.107.18.10/31, 13.107.19.10/31, 13.107.128.0/22, 23.103.160.0/20, 23.103.224.0/19, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 111.221.112.0/21, 131.253.33.215/32, 132.245.0.0/16, 134.170.68.0/23, 150.171.32.0/22, 157.56.232.0/21, 157.56.240.0/20, 191.232.96.0/19, 191.234.6.152/32, 191.234.140.0/22, 204.79.197.215/32, 206.191.224.0/19, 2603:1006::/40, 2603:1016::/40, 2603:1020:800::/40, 2603:1026::/40, 2603:1026:200::/39, 2603:1026:400::/39, 2603:1026:600::/44, 2603:1026:620::/44, 2603:1026:800::/44, 2603:1026:820::/45, 2603:1036::/39, 2603:1036:200::/40, 2603:1036:400::/40, 2603:1036:600::/40, 2603:1036:800::/38, 2603:1036:c00::/40, 2603:1046::/37, 2603:1046:900::/40, 2603:1056::/40, 2603:1056:400::/40, 2603:1056:600::/40, 2603:1096::/38, 2603:1096:400::/40, 2603:1096:600::/40, 2603:1096:a00::/39, 2603:1096:c00::/40, 2603:10a6:200::/40, 2603:10a6:400::/40, 2603:10a6:600::/40, 2603:10a6:800::/40, 2603:10d6:200::/40, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128, 2a01:111:f400::/48
TCP: 587
3 Default
Required
No r1.res.office365.com, r3.res.office365.com, r4.res.office365.com, xsi.outlook.com TCP: 443, 80
4 Default
Optional
Notes: used to configure Exchange Hybrid, using the Exchange Hybrid Configuration Wizard.
No domains.live.com TCP: 443, 80
5 Default
Optional
Notes: Exchange Online IMAP4 migration
Yes *.outlook.office.com, outlook.office365.com
13.107.6.152/31, 13.107.9.152/31, 13.107.18.10/31, 13.107.19.10/31, 13.107.128.0/22, 23.103.160.0/20, 23.103.224.0/19, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 111.221.112.0/21, 131.253.33.215/32, 132.245.0.0/16, 134.170.68.0/23, 150.171.32.0/22, 157.56.232.0/21, 157.56.240.0/20, 191.232.96.0/19, 191.234.6.152/32, 191.234.140.0/22, 204.79.197.215/32, 206.191.224.0/19, 2603:1006::/40, 2603:1016::/40, 2603:1020:800::/40, 2603:1026::/40, 2603:1026:200::/39, 2603:1026:400::/39, 2603:1026:600::/44, 2603:1026:620::/44, 2603:1026:800::/44, 2603:1026:820::/45, 2603:1036::/39, 2603:1036:200::/40, 2603:1036:400::/40, 2603:1036:600::/40, 2603:1036:800::/38, 2603:1036:c00::/40, 2603:1046::/37, 2603:1046:900::/40, 2603:1056::/40, 2603:1056:400::/40, 2603:1056:600::/40, 2603:1096::/38, 2603:1096:400::/40, 2603:1096:600::/40, 2603:1096:a00::/39, 2603:1096:c00::/40, 2603:10a6:200::/40, 2603:10a6:400::/40, 2603:10a6:600::/40, 2603:10a6:800::/40, 2603:10d6:200::/40, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128, 2a01:111:f400::/48
TCP: 143, 993
6 Default
Optional
Notes: Exchange Online POP3 migration
Yes *.outlook.office.com, outlook.office365.com
13.107.6.152/31, 13.107.9.152/31, 13.107.18.10/31, 13.107.19.10/31, 13.107.128.0/22, 23.103.160.0/20, 23.103.224.0/19, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 111.221.112.0/21, 131.253.33.215/32, 132.245.0.0/16, 134.170.68.0/23, 150.171.32.0/22, 157.56.232.0/21, 157.56.240.0/20, 191.232.96.0/19, 191.234.6.152/32, 191.234.140.0/22, 204.79.197.215/32, 206.191.224.0/19, 2603:1006::/40, 2603:1016::/40, 2603:1020:800::/40, 2603:1026::/40, 2603:1026:200::/39, 2603:1026:400::/39, 2603:1026:600::/44, 2603:1026:620::/44, 2603:1026:800::/44, 2603:1026:820::/45, 2603:1036::/39, 2603:1036:200::/40, 2603:1036:400::/40, 2603:1036:600::/40, 2603:1036:800::/38, 2603:1036:c00::/40, 2603:1046::/37, 2603:1046:900::/40, 2603:1056::/40, 2603:1056:400::/40, 2603:1056:600::/40, 2603:1096::/38, 2603:1096:400::/40, 2603:1096:600::/40, 2603:1096:a00::/39, 2603:1096:c00::/40, 2603:10a6:200::/40, 2603:10a6:400::/40, 2603:10a6:600::/40, 2603:10a6:800::/40, 2603:10d6:200::/40, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128, 2a01:111:f400::/48
TCP: 995
7 Default
Optional
Notes: Used to configure Exchange Hybrid, using the Exchange Hybrid Configuration Wizard.
No *.store.core.windows.net, asl.configure.office.com, mshrcstorageprod.blob.core.windows.net, tds.configure.office.com TCP: 443, 80
8 Default
Required
No *.outlook.com, *.outlook.office.com, autodiscover-*.outlook.com TCP: 443, 80
9 Allow
Required
Yes *.protection.outlook.com
23.103.132.0/22, 23.103.136.0/21, 23.103.144.0/20, 23.103.198.0/23, 23.103.200.0/22, 40.92.0.0/14, 40.107.0.0/17, 52.100.0.0/14, 52.238.78.88/32, 65.55.88.0/24, 65.55.169.0/24, 94.245.120.64/26, 104.47.0.0/17, 157.55.234.0/24, 157.56.110.0/23, 157.56.112.0/24, 207.46.100.0/24, 207.46.163.0/24, 213.199.154.0/24, 213.199.180.128/26, 216.32.180.0/23, 2a01:111:f400:7c00::/54, 2a01:111:f400:fc00::/54, 2a01:111:f403::/48
TCP: 443
10 Allow
Required
Yes *.mail.protection.outlook.com
23.103.132.0/22, 23.103.136.0/21, 23.103.144.0/20, 23.103.198.0/23, 23.103.200.0/22, 40.92.0.0/14, 40.107.0.0/17, 52.100.0.0/14, 65.55.88.0/24, 65.55.169.0/24, 94.245.120.64/26, 104.47.0.0/17, 157.55.234.0/24, 157.56.110.0/23, 157.56.112.0/24, 207.46.100.0/24, 207.46.163.0/24, 213.199.154.0/24, 213.199.180.128/26, 216.32.180.0/23, 2a01:111:f400:7c00::/54, 2a01:111:f400:fc00::/54, 2a01:111:f403::/48
TCP: 25

SharePoint Online and OneDrive for Business

ID Category ER Addresses Ports
31 Optimize
Required
Yes *.sharepoint.com
13.107.6.150/31, 13.107.6.168/32, 13.107.9.150/31, 13.107.9.168/32, 13.107.136.0/22, 40.108.0.0/19, 40.108.128.0/17, 52.104.0.0/14, 104.146.0.0/19, 104.146.128.0/17, 134.170.200.0/21, 134.170.208.0/21, 150.171.40.0/22, 191.232.0.0/23, 191.235.0.0/20, 2603:1039:e01::/48, 2603:1039:1001::/48, 2620:1ec:8f8::/46, 2620:1ec:908::/46, 2620:1ec:a92::150/128, 2a01:111:f402::/48
TCP: 443, 80
32 Default
Optional
Notes: OneDrive for Business: supportability, telemetry, APIs, and embedded email links
No *.log.optimizely.com, click.email.microsoftonline.com, ssw.live.com, storage.live.com TCP: 443
33 Default
Optional
Notes: SharePoint Hybrid Search - Endpoint to SearchContentService where the hybrid crawler feeds documents
No *.search.production.apac.trafficmanager.net, *.search.production.emea.trafficmanager.net, *.search.production.us.trafficmanager.net TCP: 443
34 Default
Optional
Notes: SharePoint Hybrid Search - Endpoint to SearchContentService to successfully authenticate to remote farm with OAuth authentication and authorization.
No accounts.accesscontrol.windows.net TCP: 443
35 Default
Required
No admin.onedrive.com, officeclient.microsoft.com, skydrive.wns.windows.com TCP: 443, 80
36 Default
Required
No g.live.com, oneclient.sfx.ms TCP: 443, 80
37 Default
Required
No *.sharepointonline.com, cdn.sharepointonline.com, privatecdn.sharepointonline.com, publiccdn.sharepointonline.com, spoprod-a.akamaihd.net, static.sharepointonline.com TCP: 443, 80
38 Default
Optional
Notes: SharePoint Online: auxiliary URLs
No prod.msocdn.com, watson.telemetry.microsoft.com TCP: 443, 80
39 Default
Required
No *.svc.ms, *-files.sharepoint.com, *-myfiles.sharepoint.com TCP: 443, 80

Skype for Business Online and Microsoft Teams

ID Category ER Addresses Ports
11 Optimize
Required
Yes 13.107.64.0/18, 52.112.0.0/14 TCP: 443
UDP: 3478, 3479, 3480, 3481
12 Allow
Required
Yes *.lync.com, *.skype.com, *.teams.microsoft.com, teams.microsoft.com
13.70.151.216/32, 13.71.127.197/32, 13.72.245.115/32, 13.73.1.120/32, 13.75.126.169/32, 13.89.240.113/32, 13.107.3.0/24, 13.107.64.0/18, 51.140.143.149/32, 51.140.155.234/32, 51.140.203.190/32, 51.141.51.76/32, 52.112.0.0/14, 52.163.126.215/32, 52.170.21.67/32, 52.172.185.18/32, 52.178.94.2/32, 52.178.161.139/32, 52.228.25.96/32, 52.231.36.175/32, 52.231.207.185/32, 52.238.119.141/32, 52.242.23.189/32, 52.244.160.207/32, 104.215.11.144/32, 104.215.62.195/32, 138.91.237.237/32, 2603:1027::/48, 2603:1029:100::/48, 2603:1037::/48, 2603:1039:100::/48, 2603:1047::/48, 2603:1049:100::/48, 2603:1057::/48, 2620:1ec:6::/48, 2620:1ec:40::/42, 2620:1ec:42::/48, 2a01:111:2a:7::/64, 2a01:111:2a:8::/64, 2a01:111:2007:3::/64, 2a01:111:2007:4::/64, 2a01:111:200f:6::/64, 2a01:111:200f:7::/64, 2a01:111:200f:8::/64, 2a01:111:200f:9::/64, 2a01:111:200f:10::/64, 2a01:111:200f:11::/64, 2a01:111:2012:2::/64, 2a01:111:2012:3::/64, 2a01:111:2012:4::/64, 2a01:111:2012:5::/64, 2a01:111:2012:6::/64, 2a01:111:2012:7::/64, 2a01:111:202a:2::/64, 2a01:111:202a:3::/64, 2a01:111:202b:3::/64, 2a01:111:202b:4::/64, 2a01:111:202b:9::/64, 2a01:111:202b:a::/64, 2a01:111:202f::/48, 2a01:111:2034:2::/64, 2a01:111:2034:3::/64, 2a01:111:2035:6::/64, 2a01:111:2035:7::/64, 2a01:111:2036:2::/64, 2a01:111:2036:3::/64, 2a01:111:203e:1::/64, 2a01:111:203e:2::/64, 2a01:111:2040:1::/64, 2a01:111:2040:2::/64, 2a01:111:2046:4::/64, 2a01:111:2046:5::/64, 2a01:111:2047:1::/64, 2a01:111:2047:2::/64, 2a01:111:2048:1::/64, 2a01:111:2048:2::/64, 2a01:111:f402:5802::/64, 2a01:111:f402:5803::/64, 2a01:111:f402:5805::/64, 2a01:111:f404:c06::/64, 2a01:111:f404:c07::/64, 2a01:111:f404:c09::/64, 2a01:111:f404:c0a::/64, 2a01:111:f404:c0b::/64, 2a01:111:f404:c0c::/64, 2a01:111:f404:3400::/64, 2a01:111:f404:3401::/64, 2a01:111:f404:8002::/64, 2a01:111:f404:8003::/64, 2a01:111:f404:9400::/64, 2a01:111:f404:9401::/64, 2a01:111:f404:a000::/64, 2a01:111:f404:a001::/64, 2a01:111:f404:a800::/64, 2a01:111:f404:a801::/64, 2a01:111:f406:402::/64, 2a01:111:f406:403::/64, 2a01:111:f406:2400::/64, 2a01:111:f406:2401::/64, 2a01:111:f406:3405::/64, 2a01:111:f406:3406::/64
TCP: 443, 80
13 Allow
Required
Yes *.broadcast.skype.com, broadcast.skype.com
13.70.151.216/32, 13.71.127.197/32, 13.72.245.115/32, 13.73.1.120/32, 13.75.126.169/32, 13.89.240.113/32, 13.107.3.0/24, 13.107.64.0/18, 51.140.143.149/32, 51.140.155.234/32, 51.140.203.190/32, 51.141.51.76/32, 52.112.0.0/14, 52.163.126.215/32, 52.170.21.67/32, 52.172.185.18/32, 52.178.94.2/32, 52.178.161.139/32, 52.228.25.96/32, 52.231.36.175/32, 52.231.207.185/32, 52.238.119.141/32, 52.242.23.189/32, 52.244.160.207/32, 104.215.11.144/32, 104.215.62.195/32, 138.91.237.237/32, 2603:1027::/48, 2603:1029:100::/48, 2603:1037::/48, 2603:1039:100::/48, 2603:1047::/48, 2603:1049:100::/48, 2603:1057::/48, 2620:1ec:6::/48, 2620:1ec:40::/42, 2620:1ec:42::/48, 2a01:111:2a:7::/64, 2a01:111:2a:8::/64, 2a01:111:2007:3::/64, 2a01:111:2007:4::/64, 2a01:111:200f:6::/64, 2a01:111:200f:7::/64, 2a01:111:200f:8::/64, 2a01:111:200f:9::/64, 2a01:111:200f:10::/64, 2a01:111:200f:11::/64, 2a01:111:2012:2::/64, 2a01:111:2012:3::/64, 2a01:111:2012:4::/64, 2a01:111:2012:5::/64, 2a01:111:2012:6::/64, 2a01:111:2012:7::/64, 2a01:111:202a:2::/64, 2a01:111:202a:3::/64, 2a01:111:202b:3::/64, 2a01:111:202b:4::/64, 2a01:111:202b:9::/64, 2a01:111:202b:a::/64, 2a01:111:202f::/48, 2a01:111:2034:2::/64, 2a01:111:2034:3::/64, 2a01:111:2035:6::/64, 2a01:111:2035:7::/64, 2a01:111:2036:2::/64, 2a01:111:2036:3::/64, 2a01:111:203e:1::/64, 2a01:111:203e:2::/64, 2a01:111:2040:1::/64, 2a01:111:2040:2::/64, 2a01:111:2046:4::/64, 2a01:111:2046:5::/64, 2a01:111:2047:1::/64, 2a01:111:2047:2::/64, 2a01:111:2048:1::/64, 2a01:111:2048:2::/64, 2a01:111:f402:5802::/64, 2a01:111:f402:5803::/64, 2a01:111:f402:5805::/64, 2a01:111:f404:c06::/64, 2a01:111:f404:c07::/64, 2a01:111:f404:c09::/64, 2a01:111:f404:c0a::/64, 2a01:111:f404:c0b::/64, 2a01:111:f404:c0c::/64, 2a01:111:f404:3400::/64, 2a01:111:f404:3401::/64, 2a01:111:f404:8002::/64, 2a01:111:f404:8003::/64, 2a01:111:f404:9400::/64, 2a01:111:f404:9401::/64, 2a01:111:f404:a000::/64, 2a01:111:f404:a001::/64, 2a01:111:f404:a800::/64, 2a01:111:f404:a801::/64, 2a01:111:f406:402::/64, 2a01:111:f406:403::/64, 2a01:111:f406:2400::/64, 2a01:111:f406:2401::/64, 2a01:111:f406:3405::/64, 2a01:111:f406:3406::/64
TCP: 443
14 Default
Required
No quicktips.skypeforbusiness.com TCP: 443
15 Default
Required
No *.sfbassets.com, *.urlp.sfbassets.com, skypemaprdsitus.trafficmanager.net TCP: 443, 80
16 Default
Required
No *.keydelivery.mediaservices.windows.net, *.msecnd.net, *.streaming.mediaservices.windows.net, ajax.aspnetcdn.com, mlccdn.blob.core.windows.net TCP: 443
17 Default
Required
No aka.ms, amp.azure.net TCP: 443
18 Default
Optional
Notes: Federation with Skype and public IM connectivity: Contact picture retrieval
No *.users.storage.live.com TCP: 443
19 Default
Optional
Notes: Applies only to those who deploy the Conference Room Systems
No *.adl.windows.com TCP: 443, 80
20 Default
Optional
Notes: Needed when there are users are hosted both in Skype for Business on premises and online (Hybrid)
Yes 13.107.64.0/18, 52.112.0.0/14 TCP: 50000-59999
UDP: 50000-59999
22 Allow
Optional
Notes: Teams: Messaging interop with Skype for Business
Yes *.skypeforbusiness.com
13.70.151.216/32, 13.71.127.197/32, 13.72.245.115/32, 13.73.1.120/32, 13.75.126.169/32, 13.89.240.113/32, 13.107.3.0/24, 13.107.64.0/18, 51.140.143.149/32, 51.140.155.234/32, 51.140.203.190/32, 51.141.51.76/32, 52.112.0.0/14, 52.163.126.215/32, 52.170.21.67/32, 52.172.185.18/32, 52.178.94.2/32, 52.178.161.139/32, 52.228.25.96/32, 52.231.36.175/32, 52.231.207.185/32, 52.238.119.141/32, 52.242.23.189/32, 52.244.160.207/32, 104.215.11.144/32, 104.215.62.195/32, 138.91.237.237/32, 2603:1027::/48, 2603:1029:100::/48, 2603:1037::/48, 2603:1039:100::/48, 2603:1047::/48, 2603:1049:100::/48, 2603:1057::/48, 2620:1ec:6::/48, 2620:1ec:40::/42, 2620:1ec:42::/48, 2a01:111:2a:7::/64, 2a01:111:2a:8::/64, 2a01:111:2007:3::/64, 2a01:111:2007:4::/64, 2a01:111:200f:6::/64, 2a01:111:200f:7::/64, 2a01:111:200f:8::/64, 2a01:111:200f:9::/64, 2a01:111:200f:10::/64, 2a01:111:200f:11::/64, 2a01:111:2012:2::/64, 2a01:111:2012:3::/64, 2a01:111:2012:4::/64, 2a01:111:2012:5::/64, 2a01:111:2012:6::/64, 2a01:111:2012:7::/64, 2a01:111:202a:2::/64, 2a01:111:202a:3::/64, 2a01:111:202b:3::/64, 2a01:111:202b:4::/64, 2a01:111:202b:9::/64, 2a01:111:202b:a::/64, 2a01:111:202f::/48, 2a01:111:2034:2::/64, 2a01:111:2034:3::/64, 2a01:111:2035:6::/64, 2a01:111:2035:7::/64, 2a01:111:2036:2::/64, 2a01:111:2036:3::/64, 2a01:111:203e:1::/64, 2a01:111:203e:2::/64, 2a01:111:2040:1::/64, 2a01:111:2040:2::/64, 2a01:111:2046:4::/64, 2a01:111:2046:5::/64, 2a01:111:2047:1::/64, 2a01:111:2047:2::/64, 2a01:111:2048:1::/64, 2a01:111:2048:2::/64, 2a01:111:f402:5802::/64, 2a01:111:f402:5803::/64, 2a01:111:f402:5805::/64, 2a01:111:f404:c06::/64, 2a01:111:f404:c07::/64, 2a01:111:f404:c09::/64, 2a01:111:f404:c0a::/64, 2a01:111:f404:c0b::/64, 2a01:111:f404:c0c::/64, 2a01:111:f404:3400::/64, 2a01:111:f404:3401::/64, 2a01:111:f404:8002::/64, 2a01:111:f404:8003::/64, 2a01:111:f404:9400::/64, 2a01:111:f404:9401::/64, 2a01:111:f404:a000::/64, 2a01:111:f404:a001::/64, 2a01:111:f404:a800::/64, 2a01:111:f404:a801::/64, 2a01:111:f406:402::/64, 2a01:111:f406:403::/64, 2a01:111:f406:2400::/64, 2a01:111:f406:2401::/64, 2a01:111:f406:3405::/64, 2a01:111:f406:3406::/64
TCP: 443
25 Allow
Required
Yes *.dc.trouter.io, scsinstrument-ss-us.trafficmanager.net, scsquery-ss-asia.trafficmanager.net, scsquery-ss-eu.trafficmanager.net, scsquery-ss-us.trafficmanager.net
13.70.151.216/32, 13.71.127.197/32, 13.72.245.115/32, 13.73.1.120/32, 13.75.126.169/32, 13.89.240.113/32, 13.107.3.0/24, 13.107.64.0/18, 51.140.143.149/32, 51.140.155.234/32, 51.140.203.190/32, 51.141.51.76/32, 52.112.0.0/14, 52.163.126.215/32, 52.170.21.67/32, 52.172.185.18/32, 52.178.94.2/32, 52.178.161.139/32, 52.228.25.96/32, 52.231.36.175/32, 52.231.207.185/32, 52.238.119.141/32, 52.242.23.189/32, 52.244.160.207/32, 104.215.11.144/32, 104.215.62.195/32, 138.91.237.237/32, 2603:1027::/48, 2603:1029:100::/48, 2603:1037::/48, 2603:1039:100::/48, 2603:1047::/48, 2603:1049:100::/48, 2603:1057::/48, 2620:1ec:6::/48, 2620:1ec:40::/42, 2a01:111:202f::/48
TCP: 443
26 Default
Required
No *.msedge.net, compass-ssl.microsoft.com TCP: 443
27 Default
Required
No *.mstea.ms, *.secure.skypeassets.com, mlccdnprod.azureedge.net, videoplayercdn.osi.office.net TCP: 443
29 Default
Optional
Notes: Yammer third-party integration
No *.tenor.com TCP: 443, 80

Microsoft 365 Common and Office Online

ID Category ER Addresses Ports
40 Default
Optional
Notes: Office 365 Video CDNs
No ajax.aspnetcdn.com, r3.res.outlook.com, spoprod-a.akamaihd.net TCP: 443
41 Default
Optional
Notes: Microsoft Stream
No *.api.microsoftstream.com, *.cloudapp.net, *.notification.api.microsoftstream.com, amp.azure.net, api.microsoftstream.com, az416426.vo.msecnd.net, s0.assets-yammer.com, vortex.data.microsoft.com, web.microsoftstream.com TCP: 443
42 Default
Optional
Notes: Microsoft Stream CDN
No amsglob0cdnstream11.azureedge.net, amsglob0cdnstream12.azureedge.net TCP: 443
43 Default
Optional
Notes: Microsoft Stream 3rd party integration (including CDNs)
No nps.onyx.azure.net TCP: 443
44 Default
Optional
Notes: Microsoft Stream - unauthenticated
No *.azureedge.net, *.media.azure.net, *.streaming.mediaservices.windows.net TCP: 443
45 Default
Optional
Notes: Office 365 Video
No *.keydelivery.mediaservices.windows.net, *.streaming.mediaservices.windows.net TCP: 443
46 Allow
Required
Yes *broadcast.officeapps.live.com, *excel.officeapps.live.com, *onenote.officeapps.live.com, *powerpoint.officeapps.live.com, *view.officeapps.live.com, *visio.officeapps.live.com, *word-edit.officeapps.live.com, *word-view.officeapps.live.com, office.live.com
13.107.6.171/32, 13.107.140.6/32, 52.108.0.0/14, 52.238.106.116/32, 52.247.150.191/32, 2603:1010:2::cb/128, 2603:1010:200::c7/128, 2603:1020:200::682f:a0fd/128, 2603:1020:201:9::c6/128, 2603:1020:600::a1/128, 2603:1020:700::a2/128, 2603:1020:800:2::6/128, 2603:1020:900::8/128, 2603:1030:7::749/128, 2603:1030:800:5::bfee:ad3c/128, 2603:1030:f00::17/128, 2603:1030:1000::21a/128, 2603:1040:200::4f3/128, 2603:1040:401::762/128, 2603:1040:601::60f/128, 2603:1040:a01::1e/128, 2603:1040:c01::28/128, 2603:1040:e00:1::2f/128, 2603:1040:f00::1f/128, 2603:1050:1::cd/128, 2620:1ec:8fc::6/128, 2620:1ec:a92::171/128, 2a01:111:f100:2002::8975:2d79/128, 2a01:111:f100:2002::8975:2da8/128, 2a01:111:f100:7000::6fdd:6cd5/128, 2a01:111:f100:a004::bfeb:88cf/128
TCP: 443
47 Default
Required
No *.cdn.office.net, contentstorage.osi.office.net TCP: 443
48 Allow
Required
No www.onenote.com
13.107.6.171/32, 13.107.140.6/32, 52.108.0.0/14, 52.238.106.116/32, 52.247.150.191/32, 2603:1010:2::cb/128, 2603:1010:200::c7/128, 2603:1020:200::682f:a0fd/128, 2603:1020:201:9::c6/128, 2603:1020:600::a1/128, 2603:1020:700::a2/128, 2603:1020:800:2::6/128, 2603:1020:900::8/128, 2603:1030:7::749/128, 2603:1030:800:5::bfee:ad3c/128, 2603:1030:f00::17/128, 2603:1030:1000::21a/128, 2603:1040:200::4f3/128, 2603:1040:401::762/128, 2603:1040:601::60f/128, 2603:1040:a01::1e/128, 2603:1040:c01::28/128, 2603:1040:e00:1::2f/128, 2603:1040:f00::1f/128, 2603:1050:1::cd/128, 2620:1ec:8fc::6/128, 2620:1ec:a92::171/128, 2a01:111:f100:2002::8975:2d79/128, 2a01:111:f100:2002::8975:2da8/128, 2a01:111:f100:7000::6fdd:6cd5/128, 2a01:111:f100:a004::bfeb:88cf/128
TCP: 443
49 Default
Required
No *.onenote.com TCP: 443
50 Default
Optional
Notes: OneNote notebooks (wildcards)
No *.microsoft.com, *.msecnd.net, *.office.net TCP: 443
51 Default
Required
No *cdn.onenote.net, cdn.onenote.net, site-cdn.onenote.net TCP: 443
52 Default
Optional
Notes: OneNote 3rd party supporting services and CDNs
No ad.atdmt.com, s.ytimg.com, www.youtube.com TCP: 443
53 Default
Required
No ajax.aspnetcdn.com, apis.live.net, cdn.optimizely.com, officeapps.live.com, www.onedrive.com TCP: 443
54 Allow
Required
No ccs.login.microsoftonline.com TCP: 443, 80
55 Allow
Optional
Notes: Azure AD Connect Health
Yes login.microsoftonline.com, login.windows.net
13.67.50.224/29, 13.71.201.64/26, 13.75.48.16/29, 13.75.80.16/29, 13.106.4.128/25, 13.106.56.0/25, 20.190.128.0/18, 23.100.16.168/29, 23.100.32.136/29, 23.100.64.24/29, 23.100.72.32/29, 23.100.80.64/29, 23.100.88.32/29, 23.100.101.112/28, 23.100.104.16/28, 23.100.112.64/29, 23.100.120.64/29, 23.101.5.104/29, 23.101.144.136/29, 23.101.165.168/29, 23.101.181.128/29, 23.101.210.24/29, 23.101.222.240/28, 23.101.224.16/29, 23.101.226.16/28, 40.112.64.16/28, 40.113.192.16/29, 40.114.120.16/29, 40.115.152.16/28, 40.126.0.0/18, 40.127.67.24/29, 52.172.144.16/28, 65.52.1.16/29, 65.52.193.136/29, 65.54.170.128/25, 70.37.154.128/25, 104.40.240.48/28, 104.41.13.120/29, 104.41.216.16/28, 104.42.72.16/29, 104.43.208.16/29, 104.43.240.16/29, 104.44.218.128/25, 104.44.254.128/25, 104.44.255.0/25, 104.45.0.16/28, 104.45.208.104/29, 104.46.112.8/29, 104.46.224.64/28, 104.209.144.16/29, 104.210.48.8/29, 104.210.83.160/29, 104.210.208.16/29, 104.211.16.16/29, 104.211.48.16/29, 104.211.88.16/28, 104.211.216.32/27, 104.215.96.24/29, 104.215.144.64/29, 104.215.184.16/29, 132.245.165.0/25, 134.170.67.0/25, 134.170.116.0/25, 134.170.165.0/25, 134.170.172.128/25, 157.55.45.128/25, 157.55.59.128/25, 157.55.130.0/25, 157.55.145.0/25, 157.55.155.0/25, 157.55.227.192/26, 157.56.53.128/25, 157.56.55.0/25, 157.56.58.0/25, 157.56.151.0/25, 191.232.2.128/25, 191.237.248.32/29, 191.237.252.192/28, 2001:df0:d9:200::/64, 2603:1020:201::4a0/128, 2603:1020:201::4a1/128, 2603:1020:201::4a2/128, 2603:1020:201::4a3/128, 2603:1020:201::4a4/128, 2603:1020:201::4a5/128, 2603:1020:201::4a6/128, 2603:1020:201::4a7/128, 2603:1020:201::4aa/128, 2603:1020:201::581/128, 2603:1020:201::583/128, 2603:1020:201::584/128, 2603:1020:201::586/128, 2603:1020:201::588/128, 2603:1020:201::589/128, 2603:1020:201::58a/128, 2603:1020:201::58b/128, 2603:1020:201::58c/128, 2603:1020:201:2::/64, 2603:1020:201:3::/64, 2603:1030:7::2c/128, 2603:1030:7::2d/128, 2603:1030:7::2f/128, 2603:1030:7::30/128, 2603:1030:7::34/128, 2603:1030:7::3f/128, 2603:1030:7::40/128, 2603:1030:7::41/128, 2603:1047:100::/64, 2a01:111:2005:6::/64, 2a01:111:200a:a::/64, 2a01:111:2035:8::/64, 2a01:111:f100:1002::4134:d89f/128, 2a01:111:f100:1002::4134:d944/128, 2a01:111:f100:1002::4134:d95f/128, 2a01:111:f100:1002::4134:da55/128, 2a01:111:f100:1002::4134:da5c/128, 2a01:111:f100:1002::4134:da81/128, 2a01:111:f100:1002::4134:dab5/128, 2a01:111:f100:1002::4134:daee/128, 2a01:111:f100:1002::4134:db2a/128, 2a01:111:f100:1002::4134:db60/128, 2a01:111:f100:1002::4134:db89/128, 2a01:111:f100:1002::4134:dbe7/128, 2a01:111:f100:1002::4134:dc2d/128, 2a01:111:f100:1002::4134:dc2e/128, 2a01:111:f100:1002::4134:dc43/128, 2a01:111:f100:1002::4134:dc6e/128, 2a01:111:f100:1002::4134:dd7a/128, 2a01:111:f100:1002::4134:ddcb/128, 2a01:111:f100:2002::8975:2c3b/128, 2a01:111:f100:2002::8975:2c3f/128, 2a01:111:f100:2002::8975:2c6d/128, 2a01:111:f100:2002::8975:2cdd/128, 2a01:111:f100:2002::8975:2cea/128, 2a01:111:f100:2002::8975:2ced/128, 2a01:111:f100:2002::8975:2d08/128, 2a01:111:f100:2002::8975:2d19/128, 2a01:111:f100:2002::8975:2d25/128, 2a01:111:f100:2002::8975:2d4d/128, 2a01:111:f100:2002::8975:2d6a/128, 2a01:111:f100:2002::8975:2d97/128, 2a01:111:f100:2002::8975:2daa/128, 2a01:111:f100:2002::8975:2dc7/128, 2a01:111:f100:3002::8987:30a0/128, 2a01:111:f100:3002::8987:3103/128, 2a01:111:f100:3002::8987:3278/128, 2a01:111:f100:3002::8987:328f/128, 2a01:111:f100:3002::8987:3299/128, 2a01:111:f100:3002::8987:3344/128, 2a01:111:f100:3002::8987:3396/128, 2a01:111:f100:3002::8987:3398/128, 2a01:111:f100:3002::8987:33b3/128, 2a01:111:f100:3002::8987:33ec/128, 2a01:111:f100:3002::8987:34eb/128, 2a01:111:f100:3002::8987:34f8/128, 2a01:111:f100:3002::8987:353b/128, 2a01:111:f100:3002::8987:35b5/128, 2a01:111:f100:4001::4625:a3ee/128, 2a01:111:f100:4001::4625:a4b6/128, 2a01:111:f100:4001::4625:a4ba/128, 2a01:111:f100:4001::4625:a4c7/128, 2a01:111:f100:4001::4625:a4cf/128, 2a01:111:f100:4001::4625:a4ee/128, 2a01:111:f100:4001::4625:a56f/128, 2a01:111:f100:4001::4625:a589/128, 2a01:111:f100:7000::6fdd:6a44/128, 2a01:111:f100:7000::6fdd:6b96/128, 2a01:111:f100:7000::6fdd:6bb6/128, 2a01:111:f100:7000::6fdd:6c82/128, 2a01:111:f100:7000::6fdd:6d1c/128, 2a01:111:f100:7000::6fdd:6d23/128, 2a01:111:f100:7000::6fdd:6d50/128, 2a01:111:f100:7000::6fdd:6d88/128, 2a01:111:f100:a004::bfeb:8a92/128, 2a01:111:f100:a004::bfeb:8ab0/128, 2a01:111:f100:a004::bfeb:8b12/128, 2a01:111:f100:a004::bfeb:8b15/128, 2a01:111:f100:a004::bfeb:8b3c/128, 2a01:111:f100:a004::bfeb:8b47/128, 2a01:111:f100:a004::bfeb:8b6c/128, 2a01:111:f100:a004::bfeb:8beb/128, 2a01:111:f100:a004::bfeb:8c55/128, 2a01:111:f100:a004::bfeb:8c6d/128, 2a01:111:f100:a004::bfeb:8c6f/128, 2a01:111:f100:a004::bfeb:8c88/128, 2a01:111:f100:a004::bfeb:8cc0/128, 2a01:111:f100:a004::bfeb:8cdc/128, 2a01:111:f100:a004::bfeb:8d83/128, 2a01:111:f100:a004::bfeb:8d96/128, 2a01:111:f100:a004::bfeb:8daa/128, 2a01:111:f102:8001::1761:4929/128, 2a01:111:f102:8001::1761:4948/128, 2a01:111:f102:8001::1761:4b83/128, 2a01:111:f102:8001::1761:4f0d/128, 2a01:111:f102:8001::1761:4f32/128, 2a01:111:f102:8001::1761:4f64/128, 2a01:111:f102:8001::1761:4f8d/128, 2a01:111:f102:8001::1761:4fc0/128, 2a01:111:f406:1::/64, 2a01:111:f406:2::/64, 2a01:111:f406:c00::/64, 2a01:111:f406:1004::/64, 2a01:111:f406:1805::/64, 2a01:111:f406:3404::/64, 2a01:111:f406:8000::/64, 2a01:111:f406:8801::/64, 2a01:111:f406:a003::/64
TCP: 443
56 Allow
Required
Yes *.msappproxy.net, api.login.microsoftonline.com, api.passwordreset.microsoftonline.com, autologon.microsoftazuread-sso.com, becws.microsoftonline.com, clientconfig.microsoftonline-p.net, companymanager.microsoftonline.com, device.login.microsoftonline.com, hip.microsoftonline-p.net, hipservice.microsoftonline.com, login.microsoft.com, login.microsoftonline.com, login.microsoftonline-p.com, login.windows.net, logincert.microsoftonline.com, loginex.microsoftonline.com, login-us.microsoftonline.com, nexus.microsoftonline-p.com, passwordreset.microsoftonline.com, provisioningapi.microsoftonline.com, stamp2.login.microsoftonline.com
13.67.50.224/29, 13.71.201.64/26, 13.75.48.16/29, 13.75.80.16/29, 13.106.4.128/25, 13.106.56.0/25, 20.190.128.0/18, 23.100.16.168/29, 23.100.32.136/29, 23.100.64.24/29, 23.100.72.32/29, 23.100.80.64/29, 23.100.88.32/29, 23.100.101.112/28, 23.100.104.16/28, 23.100.112.64/29, 23.100.120.64/29, 23.101.5.104/29, 23.101.144.136/29, 23.101.165.168/29, 23.101.181.128/29, 23.101.210.24/29, 23.101.222.240/28, 23.101.224.16/29, 23.101.226.16/28, 40.112.64.16/28, 40.113.192.16/29, 40.114.120.16/29, 40.115.152.16/28, 40.126.0.0/18, 40.127.67.24/29, 52.172.144.16/28, 65.52.1.16/29, 65.52.193.136/29, 65.54.170.128/25, 70.37.154.128/25, 104.40.240.48/28, 104.41.13.120/29, 104.41.216.16/28, 104.42.72.16/29, 104.43.208.16/29, 104.43.240.16/29, 104.44.218.128/25, 104.44.254.128/25, 104.44.255.0/25, 104.45.0.16/28, 104.45.208.104/29, 104.46.112.8/29, 104.46.224.64/28, 104.209.144.16/29, 104.210.48.8/29, 104.210.83.160/29, 104.210.208.16/29, 104.211.16.16/29, 104.211.48.16/29, 104.211.88.16/28, 104.211.216.32/27, 104.215.96.24/29, 104.215.144.64/29, 104.215.184.16/29, 132.245.165.0/25, 134.170.67.0/25, 134.170.116.0/25, 134.170.165.0/25, 134.170.172.128/25, 157.55.45.128/25, 157.55.59.128/25, 157.55.130.0/25, 157.55.145.0/25, 157.55.155.0/25, 157.55.227.192/26, 157.56.53.128/25, 157.56.55.0/25, 157.56.58.0/25, 157.56.151.0/25, 191.232.2.128/25, 191.237.248.32/29, 191.237.252.192/28, 2001:df0:d9:200::/64, 2603:1020:201::4a0/128, 2603:1020:201::4a1/128, 2603:1020:201::4a2/128, 2603:1020:201::4a3/128, 2603:1020:201::4a4/128, 2603:1020:201::4a5/128, 2603:1020:201::4a6/128, 2603:1020:201::4a7/128, 2603:1020:201::4aa/128, 2603:1020:201::581/128, 2603:1020:201::583/128, 2603:1020:201::584/128, 2603:1020:201::586/128, 2603:1020:201::588/128, 2603:1020:201::589/128, 2603:1020:201::58a/128, 2603:1020:201::58b/128, 2603:1020:201::58c/128, 2603:1020:201:2::/64, 2603:1020:201:3::/64, 2603:1030:7::2c/128, 2603:1030:7::2d/128, 2603:1030:7::2f/128, 2603:1030:7::30/128, 2603:1030:7::34/128, 2603:1030:7::3f/128, 2603:1030:7::40/128, 2603:1030:7::41/128, 2603:1047:100::/64, 2a01:111:2005:6::/64, 2a01:111:200a:a::/64, 2a01:111:2035:8::/64, 2a01:111:f100:1002::4134:d89f/128, 2a01:111:f100:1002::4134:d944/128, 2a01:111:f100:1002::4134:d95f/128, 2a01:111:f100:1002::4134:da55/128, 2a01:111:f100:1002::4134:da5c/128, 2a01:111:f100:1002::4134:da81/128, 2a01:111:f100:1002::4134:dab5/128, 2a01:111:f100:1002::4134:daee/128, 2a01:111:f100:1002::4134:db2a/128, 2a01:111:f100:1002::4134:db60/128, 2a01:111:f100:1002::4134:db89/128, 2a01:111:f100:1002::4134:dbe7/128, 2a01:111:f100:1002::4134:dc2d/128, 2a01:111:f100:1002::4134:dc2e/128, 2a01:111:f100:1002::4134:dc43/128, 2a01:111:f100:1002::4134:dc6e/128, 2a01:111:f100:1002::4134:dd7a/128, 2a01:111:f100:1002::4134:ddcb/128, 2a01:111:f100:2002::8975:2c3b/128, 2a01:111:f100:2002::8975:2c3f/128, 2a01:111:f100:2002::8975:2c6d/128, 2a01:111:f100:2002::8975:2cdd/128, 2a01:111:f100:2002::8975:2cea/128, 2a01:111:f100:2002::8975:2ced/128, 2a01:111:f100:2002::8975:2d08/128, 2a01:111:f100:2002::8975:2d19/128, 2a01:111:f100:2002::8975:2d25/128, 2a01:111:f100:2002::8975:2d4d/128, 2a01:111:f100:2002::8975:2d6a/128, 2a01:111:f100:2002::8975:2d97/128, 2a01:111:f100:2002::8975:2daa/128, 2a01:111:f100:2002::8975:2dc7/128, 2a01:111:f100:3002::8987:30a0/128, 2a01:111:f100:3002::8987:3103/128, 2a01:111:f100:3002::8987:3278/128, 2a01:111:f100:3002::8987:328f/128, 2a01:111:f100:3002::8987:3299/128, 2a01:111:f100:3002::8987:3344/128, 2a01:111:f100:3002::8987:3396/128, 2a01:111:f100:3002::8987:3398/128, 2a01:111:f100:3002::8987:33b3/128, 2a01:111:f100:3002::8987:33ec/128, 2a01:111:f100:3002::8987:34eb/128, 2a01:111:f100:3002::8987:34f8/128, 2a01:111:f100:3002::8987:353b/128, 2a01:111:f100:3002::8987:35b5/128, 2a01:111:f100:4001::4625:a3ee/128, 2a01:111:f100:4001::4625:a4b6/128, 2a01:111:f100:4001::4625:a4ba/128, 2a01:111:f100:4001::4625:a4c7/128, 2a01:111:f100:4001::4625:a4cf/128, 2a01:111:f100:4001::4625:a4ee/128, 2a01:111:f100:4001::4625:a56f/128, 2a01:111:f100:4001::4625:a589/128, 2a01:111:f100:7000::6fdd:6a44/128, 2a01:111:f100:7000::6fdd:6b96/128, 2a01:111:f100:7000::6fdd:6bb6/128, 2a01:111:f100:7000::6fdd:6c82/128, 2a01:111:f100:7000::6fdd:6d1c/128, 2a01:111:f100:7000::6fdd:6d23/128, 2a01:111:f100:7000::6fdd:6d50/128, 2a01:111:f100:7000::6fdd:6d88/128, 2a01:111:f100:a004::bfeb:8a92/128, 2a01:111:f100:a004::bfeb:8ab0/128, 2a01:111:f100:a004::bfeb:8b12/128, 2a01:111:f100:a004::bfeb:8b15/128, 2a01:111:f100:a004::bfeb:8b3c/128, 2a01:111:f100:a004::bfeb:8b47/128, 2a01:111:f100:a004::bfeb:8b6c/128, 2a01:111:f100:a004::bfeb:8beb/128, 2a01:111:f100:a004::bfeb:8c55/128, 2a01:111:f100:a004::bfeb:8c6d/128, 2a01:111:f100:a004::bfeb:8c6f/128, 2a01:111:f100:a004::bfeb:8c88/128, 2a01:111:f100:a004::bfeb:8cc0/128, 2a01:111:f100:a004::bfeb:8cdc/128, 2a01:111:f100:a004::bfeb:8d83/128, 2a01:111:f100:a004::bfeb:8d96/128, 2a01:111:f100:a004::bfeb:8daa/128, 2a01:111:f102:8001::1761:4929/128, 2a01:111:f102:8001::1761:4948/128, 2a01:111:f102:8001::1761:4b83/128, 2a01:111:f102:8001::1761:4f0d/128, 2a01:111:f102:8001::1761:4f32/128, 2a01:111:f102:8001::1761:4f64/128, 2a01:111:f102:8001::1761:4f8d/128, 2a01:111:f102:8001::1761:4fc0/128, 2a01:111:f406:1::/64, 2a01:111:f406:2::/64, 2a01:111:f406:c00::/64, 2a01:111:f406:1004::/64, 2a01:111:f406:1805::/64, 2a01:111:f406:3404::/64, 2a01:111:f406:8000::/64, 2a01:111:f406:8801::/64, 2a01:111:f406:a003::/64
TCP: 443, 80
57 Allow
Optional
Notes: Azure AD Connect and DirSync
Yes adminwebservice.microsoftonline.com, login.windows.net, provisioningapi.microsoftonline.com
13.67.50.224/29, 13.71.201.64/26, 13.75.48.16/29, 13.75.80.16/29, 13.106.4.128/25, 13.106.56.0/25, 20.190.128.0/18, 23.100.16.168/29, 23.100.32.136/29, 23.100.64.24/29, 23.100.72.32/29, 23.100.80.64/29, 23.100.88.32/29, 23.100.101.112/28, 23.100.104.16/28, 23.100.112.64/29, 23.100.120.64/29, 23.101.5.104/29, 23.101.144.136/29, 23.101.165.168/29, 23.101.181.128/29, 23.101.210.24/29, 23.101.222.240/28, 23.101.224.16/29, 23.101.226.16/28, 40.112.64.16/28, 40.113.192.16/29, 40.114.120.16/29, 40.115.152.16/28, 40.126.0.0/18, 40.127.67.24/29, 52.172.144.16/28, 65.52.1.16/29, 65.52.193.136/29, 65.54.170.128/25, 70.37.154.128/25, 104.40.240.48/28, 104.41.13.120/29, 104.41.216.16/28, 104.42.72.16/29, 104.43.208.16/29, 104.43.240.16/29, 104.44.218.128/25, 104.44.254.128/25, 104.44.255.0/25, 104.45.0.16/28, 104.45.208.104/29, 104.46.112.8/29, 104.46.224.64/28, 104.209.144.16/29, 104.210.48.8/29, 104.210.83.160/29, 104.210.208.16/29, 104.211.16.16/29, 104.211.48.16/29, 104.211.88.16/28, 104.211.216.32/27, 104.215.96.24/29, 104.215.144.64/29, 104.215.184.16/29, 132.245.165.0/25, 134.170.67.0/25, 134.170.116.0/25, 134.170.165.0/25, 134.170.172.128/25, 157.55.45.128/25, 157.55.59.128/25, 157.55.130.0/25, 157.55.145.0/25, 157.55.155.0/25, 157.55.227.192/26, 157.56.53.128/25, 157.56.55.0/25, 157.56.58.0/25, 157.56.151.0/25, 191.232.2.128/25, 191.237.248.32/29, 191.237.252.192/28, 2001:df0:d9:200::/64, 2603:1020:201::4a0/128, 2603:1020:201::4a1/128, 2603:1020:201::4a2/128, 2603:1020:201::4a3/128, 2603:1020:201::4a4/128, 2603:1020:201::4a5/128, 2603:1020:201::4a6/128, 2603:1020:201::4a7/128, 2603:1020:201::4aa/128, 2603:1020:201::581/128, 2603:1020:201::583/128, 2603:1020:201::584/128, 2603:1020:201::586/128, 2603:1020:201::588/128, 2603:1020:201::589/128, 2603:1020:201::58a/128, 2603:1020:201::58b/128, 2603:1020:201::58c/128, 2603:1020:201:2::/64, 2603:1020:201:3::/64, 2603:1030:7::2c/128, 2603:1030:7::2d/128, 2603:1030:7::2f/128, 2603:1030:7::30/128, 2603:1030:7::34/128, 2603:1030:7::3f/128, 2603:1030:7::40/128, 2603:1030:7::41/128, 2603:1047:100::/64, 2a01:111:2005:6::/64, 2a01:111:200a:a::/64, 2a01:111:2035:8::/64, 2a01:111:f100:1002::4134:d89f/128, 2a01:111:f100:1002::4134:d944/128, 2a01:111:f100:1002::4134:d95f/128, 2a01:111:f100:1002::4134:da55/128, 2a01:111:f100:1002::4134:da5c/128, 2a01:111:f100:1002::4134:da81/128, 2a01:111:f100:1002::4134:dab5/128, 2a01:111:f100:1002::4134:daee/128, 2a01:111:f100:1002::4134:db2a/128, 2a01:111:f100:1002::4134:db60/128, 2a01:111:f100:1002::4134:db89/128, 2a01:111:f100:1002::4134:dbe7/128, 2a01:111:f100:1002::4134:dc2d/128, 2a01:111:f100:1002::4134:dc2e/128, 2a01:111:f100:1002::4134:dc43/128, 2a01:111:f100:1002::4134:dc6e/128, 2a01:111:f100:1002::4134:dd7a/128, 2a01:111:f100:1002::4134:ddcb/128, 2a01:111:f100:2002::8975:2c3b/128, 2a01:111:f100:2002::8975:2c3f/128, 2a01:111:f100:2002::8975:2c6d/128, 2a01:111:f100:2002::8975:2cdd/128, 2a01:111:f100:2002::8975:2cea/128, 2a01:111:f100:2002::8975:2ced/128, 2a01:111:f100:2002::8975:2d08/128, 2a01:111:f100:2002::8975:2d19/128, 2a01:111:f100:2002::8975:2d25/128, 2a01:111:f100:2002::8975:2d4d/128, 2a01:111:f100:2002::8975:2d6a/128, 2a01:111:f100:2002::8975:2d97/128, 2a01:111:f100:2002::8975:2daa/128, 2a01:111:f100:2002::8975:2dc7/128, 2a01:111:f100:3002::8987:30a0/128, 2a01:111:f100:3002::8987:3103/128, 2a01:111:f100:3002::8987:3278/128, 2a01:111:f100:3002::8987:328f/128, 2a01:111:f100:3002::8987:3299/128, 2a01:111:f100:3002::8987:3344/128, 2a01:111:f100:3002::8987:3396/128, 2a01:111:f100:3002::8987:3398/128, 2a01:111:f100:3002::8987:33b3/128, 2a01:111:f100:3002::8987:33ec/128, 2a01:111:f100:3002::8987:34eb/128, 2a01:111:f100:3002::8987:34f8/128, 2a01:111:f100:3002::8987:353b/128, 2a01:111:f100:3002::8987:35b5/128, 2a01:111:f100:4001::4625:a3ee/128, 2a01:111:f100:4001::4625:a4b6/128, 2a01:111:f100:4001::4625:a4ba/128, 2a01:111:f100:4001::4625:a4c7/128, 2a01:111:f100:4001::4625:a4cf/128, 2a01:111:f100:4001::4625:a4ee/128, 2a01:111:f100:4001::4625:a56f/128, 2a01:111:f100:4001::4625:a589/128, 2a01:111:f100:7000::6fdd:6a44/128, 2a01:111:f100:7000::6fdd:6b96/128, 2a01:111:f100:7000::6fdd:6bb6/128, 2a01:111:f100:7000::6fdd:6c82/128, 2a01:111:f100:7000::6fdd:6d1c/128, 2a01:111:f100:7000::6fdd:6d23/128, 2a01:111:f100:7000::6fdd:6d50/128, 2a01:111:f100:7000::6fdd:6d88/128, 2a01:111:f100:a004::bfeb:8a92/128, 2a01:111:f100:a004::bfeb:8ab0/128, 2a01:111:f100:a004::bfeb:8b12/128, 2a01:111:f100:a004::bfeb:8b15/128, 2a01:111:f100:a004::bfeb:8b3c/128, 2a01:111:f100:a004::bfeb:8b47/128, 2a01:111:f100:a004::bfeb:8b6c/128, 2a01:111:f100:a004::bfeb:8beb/128, 2a01:111:f100:a004::bfeb:8c55/128, 2a01:111:f100:a004::bfeb:8c6d/128, 2a01:111:f100:a004::bfeb:8c6f/128, 2a01:111:f100:a004::bfeb:8c88/128, 2a01:111:f100:a004::bfeb:8cc0/128, 2a01:111:f100:a004::bfeb:8cdc/128, 2a01:111:f100:a004::bfeb:8d83/128, 2a01:111:f100:a004::bfeb:8d96/128, 2a01:111:f100:a004::bfeb:8daa/128, 2a01:111:f102:8001::1761:4929/128, 2a01:111:f102:8001::1761:4948/128, 2a01:111:f102:8001::1761:4b83/128, 2a01:111:f102:8001::1761:4f0d/128, 2a01:111:f102:8001::1761:4f32/128, 2a01:111:f102:8001::1761:4f64/128, 2a01:111:f102:8001::1761:4f8d/128, 2a01:111:f102:8001::1761:4fc0/128, 2a01:111:f406:1::/64, 2a01:111:f406:2::/64, 2a01:111:f406:c00::/64, 2a01:111:f406:1004::/64, 2a01:111:f406:1805::/64, 2a01:111:f406:3404::/64, 2a01:111:f406:8000::/64, 2a01:111:f406:8801::/64, 2a01:111:f406:a003::/64
TCP: 443
58 Default
Required
No accounts.accesscontrol.windows.net, secure.aadcdn.microsoftonline-p.com TCP: 443
59 Default
Optional
Notes: Authentication and identity: Legacy/temporary FQDNs (including CDNs)
No *.microsoftonline.com, *.microsoftonline-p.com, *.microsoftonline-p.net, *.msecnd.net, *.windows.net TCP: 443
60 Default
Optional
Notes: Azure AD Connect Health (including CDNs)
No *.adhybridhealth.azure.com, *.blob.core.windows.net, *.queue.core.windows.net, *.servicebus.windows.net, *.table.core.windows.net, management.azure.com, policykeyservice.dc.ad.msft.net, secure.aadcdn.microsoftonline-p.com TCP: 443
61 Default
Optional
Notes: Azure AD Connect and DirSync
No *.microsoftonline.com, mscrl.microsoft.com, secure.aadcdn.microsoftonline-p.com TCP: 443, 80
62 Default
Optional
Notes: Authentication and identity: Multi-factor authentication (MFA)
No *.phonefactor.net, account.activedirectory.windowsazure.com, secure.aadcdn.microsoftonline-p.com TCP: 443
63 Default
Required
No graph.microsoft.com TCP: 443, 80
64 Allow
Required
Yes *.manage.office.com, *.protection.office.com, manage.office.com, protection.office.com
13.71.151.88/32, 13.76.138.63/32, 13.78.120.69/32, 13.78.120.70/32, 13.78.120.159/32, 13.80.22.71/32, 13.80.125.22/32, 13.84.178.101/32, 13.84.218.185/32, 13.84.219.100/32, 13.87.36.128/32, 13.88.17.54/32, 13.91.91.243/32, 13.92.236.241/32, 13.93.164.45/32, 13.95.29.177/32, 13.95.30.46/32, 13.107.6.156/31, 13.107.7.190/31, 13.107.9.156/31, 23.96.241.70/32, 23.96.251.50/32, 23.96.253.65/32, 23.97.78.94/32, 23.102.232.134/32, 40.69.185.117/32, 40.76.54.117/32, 40.81.156.153/32, 40.81.156.154/32, 40.81.156.155/32, 40.81.156.156/32, 40.83.120.174/32, 40.83.127.89/32, 40.83.185.155/32, 40.84.2.83/32, 40.84.4.93/32, 40.84.4.119/32, 40.84.145.72/32, 40.90.218.196/32, 40.90.218.197/32, 40.90.218.198/32, 40.90.218.203/32, 40.112.144.173/32, 40.112.145.113/32, 40.113.91.234/32, 40.117.229.133/32, 40.117.229.194/32, 40.124.8.53/32, 51.142.213.184/32, 52.163.93.38/32, 52.164.121.65/32, 52.164.124.124/32, 52.164.127.6/32, 52.168.128.89/32, 52.168.177.42/32, 52.174.56.180/32, 52.178.144.25/32, 52.178.147.210/32, 52.183.75.62/32, 52.184.165.82/32, 52.225.223.43/32, 52.233.242.192/32, 65.52.220.46/32, 65.55.239.168/32, 94.245.117.53/32, 104.40.179.160/32, 104.40.211.46/32, 104.42.230.91/32, 104.43.21.58/32, 104.214.107.57/32, 104.214.146.199/32, 104.215.28.42/32, 157.55.145.0/25, 157.55.155.0/25, 157.55.227.192/26, 168.61.149.234/32, 168.62.106.224/32, 168.63.92.133/32, 207.46.73.250/32, 207.46.140.244/32, 207.46.141.38/32, 207.46.216.54/32, 2a01:111:200a:a::/64, 2a01:111:2035:8::/64, 2a01:111:f406:1::/64, 2a01:111:f406:c00::/64, 2a01:111:f406:1004::/64, 2a01:111:f406:1805::/64, 2a01:111:f406:3404::/64, 2a01:111:f406:8000::/64, 2a01:111:f406:8801::/64, 2a01:111:f406:a003::/64
TCP: 443
65 Allow
Required
Yes *.eu.portal.cloudappsecurity.com, *.eu2.portal.cloudappsecurity.com, *.portal.cloudappsecurity.com, *.us.portal.cloudappsecurity.com, *.us2.portal.cloudappsecurity.com, *.us3.portal.cloudappsecurity.com, account.office.net, admin.microsoft.com, home.office.com, portal.office.com, www.office.com
13.71.151.88/32, 13.76.138.63/32, 13.78.120.69/32, 13.78.120.70/32, 13.78.120.159/32, 13.80.22.71/32, 13.80.125.22/32, 13.84.178.101/32, 13.84.218.185/32, 13.84.219.100/32, 13.87.36.128/32, 13.88.17.54/32, 13.91.91.243/32, 13.92.236.241/32, 13.93.164.45/32, 13.95.29.177/32, 13.95.30.46/32, 13.107.6.156/31, 13.107.7.190/31, 13.107.9.156/31, 23.96.241.70/32, 23.96.251.50/32, 23.96.253.65/32, 23.97.78.94/32, 23.102.232.134/32, 40.69.185.117/32, 40.76.54.117/32, 40.81.156.153/32, 40.81.156.154/32, 40.81.156.155/32, 40.81.156.156/32, 40.83.120.174/32, 40.83.127.89/32, 40.83.185.155/32, 40.84.2.83/32, 40.84.4.93/32, 40.84.4.119/32, 40.84.145.72/32, 40.90.218.196/32, 40.90.218.197/32, 40.90.218.198/32, 40.90.218.203/32, 40.112.144.173/32, 40.112.145.113/32, 40.113.91.234/32, 40.117.229.133/32, 40.117.229.194/32, 40.124.8.53/32, 51.142.213.184/32, 52.163.93.38/32, 52.164.121.65/32, 52.164.124.124/32, 52.164.127.6/32, 52.168.128.89/32, 52.168.177.42/32, 52.174.56.180/32, 52.178.144.25/32, 52.178.147.210/32, 52.183.75.62/32, 52.184.165.82/32, 52.225.223.43/32, 52.233.242.192/32, 65.52.220.46/32, 65.55.239.168/32, 94.245.117.53/32, 104.40.179.160/32, 104.40.211.46/32, 104.42.230.91/32, 104.43.21.58/32, 104.214.107.57/32, 104.214.146.199/32, 104.215.28.42/32, 157.55.145.0/25, 157.55.155.0/25, 157.55.227.192/26, 168.61.149.234/32, 168.62.106.224/32, 168.63.92.133/32, 207.46.73.250/32, 207.46.140.244/32, 207.46.141.38/32, 207.46.216.54/32, 2a01:111:200a:a::/64, 2a01:111:2035:8::/64, 2a01:111:f406:1::/64, 2a01:111:f406:c00::/64, 2a01:111:f406:1004::/64, 2a01:111:f406:1805::/64, 2a01:111:f406:3404::/64, 2a01:111:f406:8000::/64, 2a01:111:f406:8801::/64, 2a01:111:f406:a003::/64
TCP: 443
66 Allow
Required
Yes agent.office.net, apc.delve.office.com, aus.delve.office.com, can.delve.office.com, delve.office.com, eur.delve.office.com, gbr.delve.office.com, ind.delve.office.com, jpn.delve.office.com, kor.delve.office.com, lam.delve.office.com, nam.delve.office.com, suite.office.net, webshell.suite.office.com
13.107.6.171/32, 13.107.140.6/32, 52.108.0.0/14, 52.238.106.116/32, 52.247.150.191/32, 2603:1010:2::cb/128, 2603:1010:200::c7/128, 2603:1020:200::682f:a0fd/128, 2603:1020:201:9::c6/128, 2603:1020:600::a1/128, 2603:1020:700::a2/128, 2603:1020:800:2::6/128, 2603:1020:900::8/128, 2603:1030:7::749/128, 2603:1030:800:5::bfee:ad3c/128, 2603:1030:f00::17/128, 2603:1030:1000::21a/128, 2603:1040:200::4f3/128, 2603:1040:401::762/128, 2603:1040:601::60f/128, 2603:1040:a01::1e/128, 2603:1040:c01::28/128, 2603:1040:e00:1::2f/128, 2603:1040:f00::1f/128, 2603:1050:1::cd/128, 2620:1ec:8fc::6/128, 2620:1ec:a92::171/128, 2a01:111:f100:2002::8975:2d79/128, 2a01:111:f100:2002::8975:2da8/128, 2a01:111:f100:7000::6fdd:6cd5/128, 2a01:111:f100:a004::bfeb:88cf/128
TCP: 443
67 Default
Optional
Notes: Security and Compliance Center eDiscovery export
No *.blob.core.windows.net TCP: 443
68 Default
Optional
Notes: Portal and shared: 3rd party office integration. (including CDNs)
No *.helpshift.com, *.localytics.com, analytics.localytics.com, api.localytics.com, connect.facebook.net, firstpartyapps.oaspapps.com, outlook.uservoice.com, prod.firstpartyapps.oaspapps.com.akadns.net, rink.hockeyapp.net, sdk.hockeyapp.net, telemetryservice.firstpartyapps.oaspapps.com, web.localytics.com, webanalytics.localytics.com, wus-firstpartyapps.oaspapps.com TCP: 443
69 Default
Required
No *.aria.microsoft.com, browser.pipe.aria.microsoft.com, mobile.pipe.aria.microsoft.com TCP: 443
70 Default
Required
No *.o365weve.com, amp.azure.net, appsforoffice.microsoft.com, assets.onestore.ms, auth.gfx.ms, az826701.vo.msecnd.net, c1.microsoft.com, client.hip.live.com, contentstorage.osi.office.net, dgps.support.microsoft.com, docs.microsoft.com, msdn.microsoft.com, platform.linkedin.com, prod.msocdn.com, products.office.com, r1.res.office365.com, r4.res.office365.com, res.delve.office.com, shellprod.msocdn.com, support.content.office.net, support.microsoft.com, support.office.com, technet.microsoft.com, templates.office.com, video.osi.office.net, videocontent.osi.office.net, videoplayercdn.osi.office.net TCP: 443
71 Default
Required
No *.office365.com
13.64.196.27/32, 13.64.198.19/32, 13.64.198.97/32, 13.64.199.41/32, 13.76.218.117/32, 13.76.219.191/32, 13.76.219.210/32, 13.91.61.249/32, 13.91.98.185/32, 13.93.216.68/32, 13.93.233.42/32, 23.97.61.137/32, 23.97.150.21/32, 23.97.209.97/32, 23.99.109.44/32, 23.99.109.64/32, 23.99.116.116/32, 23.99.121.207/32, 23.100.86.91/32, 23.101.14.229/32, 23.101.30.126/32, 23.102.4.253/32, 40.76.1.176/32, 40.76.8.142/32, 40.76.12.4/32, 40.76.12.162/32, 40.113.8.255/32, 40.113.10.78/32, 40.113.11.93/32, 40.113.14.159/32, 40.117.144.240/32, 40.117.151.29/32, 40.118.211.172/32, 40.121.144.182/32, 40.122.168.103/32, 65.52.148.27/32, 65.52.160.218/32, 65.52.184.75/32, 65.52.196.64/32, 70.37.97.234/32, 94.245.108.85/32, 104.41.207.73/32, 104.42.231.28/32, 104.43.140.223/32, 104.45.11.195/32, 104.46.38.64/32, 104.46.50.125/32, 104.209.35.177/32, 104.215.146.200/32, 104.215.198.144/32, 111.221.111.196/32, 157.55.177.39/32, 157.55.184.223/32, 168.61.146.25/32, 168.61.149.17/32, 168.61.170.80/32, 168.61.172.71/32, 168.62.43.8/32, 168.63.18.79/32, 168.63.29.74/32, 168.63.100.61/32, 191.237.218.239/32, 207.46.134.255/32, 207.46.153.155/32, 2603:1020:0:7::19c/128, 2603:1020:0:7::4e1/128, 2603:1020:200::682f:a1d8/128, 2603:1020:201::3c4/128, 2603:1020:201::5f2/128, 2603:1020:201:a::2b1/128, 2603:1020:300::33/128, 2603:1020:400::26/128, 2603:1020:600::1d3/128, 2603:1020:600::21f/128, 2603:1020:700::1cb/128, 2603:1020:700::215/128, 2603:1030:603::6a/128, 2603:1030:603::72/128, 2603:1030:603::3c9/128, 2603:1030:a02::118/128, 2603:1030:a02::367/128, 2603:1040:200::111/128, 2603:1040:200::325/128, 2603:1040:400::5d/128, 2603:1040:400::5e/128, 2603:1040:400::7b/128, 2603:1040:400::2f4/128, 2603:1040:401::c/128, 2603:1040:401::57/128, 2603:1040:401::597/128, 2603:1040:601::2f/128, 2603:1040:601::4e/128, 2603:1040:601::1e7/128, 2603:1040:601::26f/128, 2603:1040:601::36c/128, 2801:80:1d0:1c00::/64, 2a01:111:2003::/48, 2a01:111:202c::/48, 2a01:111:202d::/48, 2a01:111:202e::/48, 2a01:111:202e::156/128, 2a01:111:202e::190/128, 2a01:111:202e::191/128, 2a01:111:f100:1002::4134:c0cb/128, 2a01:111:f100:1002::4134:c440/128, 2a01:111:f100:1002::4134:d93c/128, 2a01:111:f100:1002::4134:d9ee/128, 2a01:111:f100:1003::4134:3644/128, 2a01:111:f100:1003::4134:36d5/128, 2a01:111:f100:1004::4134:f0c8/128, 2a01:111:f100:2000::a83e:3349/128, 2a01:111:f100:2002::8975:2c33/128, 2a01:111:f100:2002::8975:2cbc/128, 2a01:111:f100:2002::8975:2d11/128, 2a01:111:f100:2002::8975:2d43/128, 2a01:111:f100:2002::8975:2d92/128, 2a01:111:f100:2002::8975:2d98/128, 2a01:111:f100:3000::a83e:1a8c/128, 2a01:111:f100:3002::8987:320c/128, 2a01:111:f100:3002::8987:342a/128, 2a01:111:f100:3002::8987:3552/128, 2a01:111:f100:3002::8987:358e/128, 2a01:111:f100:4001::4625:609b/128, 2a01:111:f100:4001::4625:61ea/128, 2a01:111:f100:4001::4625:a065/128, 2a01:111:f100:4001::4625:a1e3/128, 2a01:111:f100:4001::4625:a248/128, 2a01:111:f100:4001::4625:a4b4/128, 2a01:111:f100:4002::9d37:c021/128, 2a01:111:f100:4002::9d37:c08f/128, 2a01:111:f100:4002::9d37:c11a/128, 2a01:111:f100:6000::4134:a2af/128, 2a01:111:f100:6000::4134:a591/128, 2a01:111:f100:6000::4134:b0ba/128, 2a01:111:f100:6000::4134:b84b/128, 2a01:111:f100:7000::6fdd:50bb/128, 2a01:111:f100:7000::6fdd:568a/128, 2a01:111:f100:7000::6fdd:6095/128, 2a01:111:f100:7000::6fdd:682b/128, 2a01:111:f100:7000::6fdd:699d/128, 2a01:111:f100:7000::6fdd:6b20/128, 2a01:111:f100:7000::6fdd:6b76/128, 2a01:111:f100:7000::6fdd:6cac/128, 2a01:111:f100:7000::6fdd:6fc4/128, 2a01:111:f100:8000::4134:902e/128, 2a01:111:f100:8000::4134:941b/128, 2a01:111:f100:8001::d5c7:8077/128, 2a01:111:f100:9001::1761:91cb/128, 2a01:111:f100:9001::1761:9642/128, 2a01:111:f100:a000::5ef5:581c/128, 2a01:111:f100:a000::5ef5:6c55/128, 2a01:111:f100:a001::a83f:5c85/128, 2a01:111:f100:a004::bfeb:8aa2/128, 2a01:111:f100:a004::bfeb:8c89/128, 2a01:111:f100:a004::bfeb:8cb8/128, 2a01:111:f100:a004::bfeb:8deb/128, 2a01:111:f102:8001::1761:4237/128, 2a01:111:f102:8001::1761:4daf/128, 2a01:111:f102:8001::1761:4f8a/128, 2a01:111:f406:1000::/64, 2a01:111:f406:1801::/64
TCP: 443
72 Default
Optional
Notes: Azure Rights Management (RMS) with Office 2010 clients
No *.cloudapp.net TCP: 443
73 Default
Required
No *.aadrm.com, *.azurerms.com, api.informationprotection.azure.com, ecn.dev.virtualearth.net TCP: 443
74 Default
Optional
Notes: Remote Connectivity Analyzer - Initiate connectivity tests.
No testconnectivity.microsoft.com
13.67.59.89/32, 40.69.150.142/32, 40.85.91.8/32, 104.211.54.99/32, 104.211.54.134/32
TCP: 443, 80
75 Default
Optional
Notes: Graph.windows.net, Office 365 Management Pack for Operations Manager, SecureScore, Azure AD Device Registration, Forms, StaffHub, Application Insights, captcha services
No *.blob.core.windows.net, *.hockeyapp.net, *.sharepointonline.com, *.staffhub.office.com, api.office.com, dc.applicationinsights.microsoft.com, dc.services.visualstudio.com, ea-000.forms.osi.office.net, enterpriseregistration.windows.net, eus2-000.forms.osi.office.net, forms.microsoft.com, forms.office.com, graph.windows.net, mem.gfx.ms, neu-000.forms.osi.office.net, office365servicehealthcommunications.cloudapp.net, securescore.office.com, signup.microsoft.com, staffhub.ms, staffhub.office.com, staffhub.uservoice.com, staffhubweb.azureedge.net, watson.telemetry.microsoft.com, weu-000.forms.osi.office.net, wu.client.hip.live.com, wus-000.forms.osi.office.net TCP: 443
76 Default
Optional
Notes: Microsoft Azure RemoteApp
No telemetry.remoteapp.windowsazure.com, vortex.data.microsoft.com TCP: 443
77 Allow
Required
Yes nexus.officeapps.live.com, nexusrules.officeapps.live.com, portal.microsoftonline.com
13.107.6.171/32, 13.107.140.6/32, 52.108.0.0/14, 52.238.106.116/32, 52.247.150.191/32, 2603:1010:2::cb/128, 2603:1010:200::c7/128, 2603:1020:200::682f:a0fd/128, 2603:1020:201:9::c6/128, 2603:1020:600::a1/128, 2603:1020:700::a2/128, 2603:1020:800:2::6/128, 2603:1020:900::8/128, 2603:1030:7::749/128, 2603:1030:800:5::bfee:ad3c/128, 2603:1030:f00::17/128, 2603:1030:1000::21a/128, 2603:1040:200::4f3/128, 2603:1040:401::762/128, 2603:1040:601::60f/128, 2603:1040:a01::1e/128, 2603:1040:c01::28/128, 2603:1040:e00:1::2f/128, 2603:1040:f00::1f/128, 2603:1050:1::cd/128, 2620:1ec:8fc::6/128, 2620:1ec:a92::171/128, 2a01:111:f100:2002::8975:2d79/128, 2a01:111:f100:2002::8975:2da8/128, 2a01:111:f100:7000::6fdd:6cd5/128, 2a01:111:f100:a004::bfeb:88cf/128
TCP: 443
78 Default
Optional
Notes: Some Office 365 features require endpoints within these domains (including CDNs). Many specific FQDNs within these wildcards have been published recently as we work to either remove or better explain our guidance relating to these wildcards.
No *.microsoft.com, *.msocdn.com, *.office.com, *.office.net, *.onmicrosoft.com TCP: 443, 80
79 Allow
Required
No o15.officeredir.microsoft.com, ocsredir.officeapps.live.com, officepreviewredir.microsoft.com, officeredir.microsoft.com, r.office.microsoft.com TCP: 443, 80
80 Allow
Required
No ea-000.ocws.officeapps.live.com, eus2-000.ocws.officeapps.live.com, ncus-000.ocws.officeapps.live.com, neu-000.ocws.officeapps.live.com, ocws.officeapps.live.com, scus-000.ocws.officeapps.live.com, weu-000.ocws.officeapps.live.com, wus-000.ocws.officeapps.live.com TCP: 443
81 Allow
Required
No cus-odc.officeapps.live.com, eus-odc.officeapps.live.com, ncus-odc.officeapps.live.com, neu-odc.officeapps.live.com, odc.officeapps.live.com, scus-odc.officeapps.live.com, sea-odc.officeapps.live.com, weu-odc.officeapps.live.com, wus-odc.officeapps.live.com TCP: 443, 80
82 Allow
Required
No cus-roaming.officeapps.live.com, ea-roaming.officeapps.live.com, eus2-roaming.officeapps.live.com, ncus-roaming.officeapps.live.com, neu-roaming.officeapps.live.com, scus-roaming.officeapps.live.com, sea-roaming.officeapps.live.com, weu-roaming.officeapps.live.com, wus-roaming.officeapps.live.com TCP: 443, 80
83 Default
Required
No activation.sls.microsoft.com TCP: 443
84 Default
Required
No crl.microsoft.com TCP: 443, 80
85 Default
Required
No ols.officeapps.live.com TCP: 443
86 Default
Required
No office15client.microsoft.com, officeclient.microsoft.com TCP: 443
87 Default
Required
No ocsa.officeapps.live.com TCP: 443, 80
88 Default
Required
No insertmedia.bing.office.net TCP: 443, 80
89 Default
Required
No go.microsoft.com, support.office.com TCP: 443, 80
90 Default
Required
No mrodevicemgr.officeapps.live.com TCP: 443
91 Default
Required
No ajax.aspnetcdn.com, cdn.odc.officeapps.live.com TCP: 443, 80
92 Default
Required
No officecdn.microsoft.com, officecdn.microsoft.com.edgesuite.net TCP: 443, 80
93 Default
Optional
Notes: ProPlus: auxiliary URLs
No ajax.microsoft.com, c.bing.net, excelbingmap.firstpartyapps.oaspapps.com, excelcs.officeapps.live.com, ocos-office365-s2s.msedge.net, omextemplates.content.office.net, peoplegraph.firstpartyapps.oaspapps.com, pptcs.officeapps.live.com, sas.officeapps.live.com, store.office.com, templateservice.office.com, tse1.mm.bing.net, uci.officeapps.live.com, watson.microsoft.com, wikipedia.firstpartyapps.oaspapps.com, wordcs.officeapps.live.com, www.bing.com TCP: 443, 80
94 Default
Required
No 13.107.12.51/32, 104.40.234.17/32, 104.210.220.25/32, 191.236.108.93/32, 191.236.157.212/32 TCP: 443
95 Default
Optional
Notes: Outlook for Android and iOS
No *.acompli.net TCP: 443
96 Default
Optional
Notes: Outlook for Android and iOS: Authentication
No api.office.com, com.microsoft.office.outlook.dev, go.microsoft.com, graph.windows.net, login.windows-ppe.net, mam.manage.microsoft.com, sdfpilot.outlook.com, secure.aadcdn.microsoftonline-p.com, vortex.data.microsoft.com TCP: 443
97 Default
Optional
Notes: Outlook for Android and iOS: Consumer Outlook.com and OneDrive integration
No account.live.com, apis.live.net, auth.gfx.ms, login.live.com TCP: 443
98 Default
Optional
Notes: Outlook for Android and iOS: Google integration
No accounts.google.com, mail.google.com, www.googleapis.com TCP: 443
99 Default
Optional
Notes: Outlook for Android and iOS: Yahoo integration
No api.login.yahoo.com, social.yahooapis.com TCP: 443
100 Default
Optional
Notes: Outlook for Android and iOS: DropBox integration
No api.dropboxapi.com, www.dropbox.com TCP: 443
101 Default
Optional
Notes: Outlook for Android and iOS: Box integration
No app.box.com TCP: 443
102 Default
Optional
Notes: Outlook for Android and iOS: Facebook integration
No graph.facebook.com, m.facebook.com TCP: 443
103 Default
Optional
Notes: Outlook for Android and iOS: Evernote integration
No www.evernote.com TCP: 443
104 Default
Optional
Notes: Outlook for Android and iOS: WunderList integration
No a.wunderlist.com, www.wunderlist.com TCP: 443
105 Default
Optional
Notes: Outlook for Android and iOS: Outlook Privacy
No bit.ly, www.acompli.com TCP: 443
106 Default
Optional
Notes: Outlook for Android and iOS: User voice integration
No by.uservoice.com, outlook.uservoice.com TCP: 443
107 Default
Optional
Notes: Outlook for Android and iOS: Log upload integration
No api.diagnostics.office.com TCP: 443
108 Default
Optional
Notes: Outlook for Android and iOS: Support log upload integration
No acompli-android-logs.s3.amazonaws.com, s3-us-west-2.amazonaws.com TCP: 443
109 Default
Optional
Notes: Outlook for Android and iOS: Flurry log integration
No data.flurry.com TCP: 443
110 Default
Optional
Notes: Outlook for Android and iOS: Adjust integration
No app.adjust.com TCP: 443
111 Default
Optional
Notes: Outlook for Android and iOS: Hockey log integration
No rink.hockeyapp.net, sdk.hockeyapp.net TCP: 443
112 Default
Optional
Notes: Outlook for Android and iOS: Helpshift integration
No acompli.helpshift.com TCP: 443
113 Default
Optional
Notes: Outlook for Android and iOS: Play Store integration (Android only)
No play.google.com TCP: 443
114 Default
Optional
Notes: Office Mobile URLs
No *.appex.bing.com, *.appex-rf.msn.com, *.itunes.apple.com, appexsin.stb.s-msn.com, c.bing.com, c.live.com, cl2.apple.com, client.hip.live.com, d.docs.live.net, dc2.client.hip.live.com, directory.services.live.com, docs.live.net, en-us.appex-rf.msn.com, foodanddrink.services.appex.bing.com, m.webtrends.com, ms.tific.com, odcsm.officeapps.live.com, office.microsoft.com, officeimg.vo.msecnd.net, partnerservices.getmicrosoftkey.com, roaming.officeapps.live.com, sas.office.microsoft.com, signup.live.com, sqm.microsoft.com, view.atdmt.com, watson.telemetry.microsoft.com, weather.tile.appex.bing.com, wer.microsoft.com TCP: 443, 80
115 Default
Optional
Notes: Outlook for Android and iOS: Meetup integration
No api.meetup.com, secure.meetup.com TCP: 443
116 Default
Optional
Notes: Office for iPad URLs
No account.live.com, auth.gfx.ms, c.bing.com, c.live.com, cl2.apple.com, client.hip.live.com, dc2.client.hip.live.com, directory.services.live.com, docs.live.net, en-us.appex-rf.msn.com, foodanddrink.services.appex.bing.com, go.microsoft.com, login.live.com, m.webtrends.com, ms.tific.com, office.microsoft.com, officeimg.vo.msecnd.net, p100-sandbox.itunes.apple.com, partnerservices.getmicrosoftkey.com, roaming.officeapps.live.com, sas.office.microsoft.com, signup.live.com, sqm.microsoft.com, view.atdmt.com, watson.telemetry.microsoft.com, weather.tile.appex.bing.com, wer.microsoft.com TCP: 443, 80
117 Default
Optional
Notes: Yammer
No *.yammer.com, *.yammerusercontent.com
13.107.6.158/31, 13.107.9.158/31, 40.78.62.210/32, 134.170.148.0/22
TCP: 443
118 Default
Optional
Notes: Yammer CDN
No *.assets-yammer.com TCP: 443
119 Default
Optional
Notes: Planner
No cus-000.tasks.osi.office.net, ea-000.tasks.osi.office.net, eus-zzz.tasks.osi.office.net, neu-000.tasks.osi.office.net, sea-000.tasks.osi.office.net, tasks.office.com, weu-000.tasks.osi.office.net, wus-000.tasks.osi.office.net
13.107.6.160/32, 13.107.9.160/32
TCP: 443
120 Default
Optional
Notes: Planner CDNs
No ajax.aspnetcdn.com TCP: 443
121 Default
Optional
Notes: Planner: auxiliary URLs
No www.outlook.com TCP: 443, 80
122 Default
Optional
Notes: Sway CDNs
No eus-www.sway-cdn.com, eus-www.sway-extensions.com, wus-www.sway-cdn.com, wus-www.sway-extensions.com TCP: 443
123 Default
Optional
Notes: Sway website analytics
No www.google-analytics.com TCP: 443
124 Default
Optional
Notes: Sway
No sway.com, sway.office.com, www.sway.com TCP: 443
125 Default
Optional
Notes: Office 365 Certificate Revocation List (Root URLs)
No *.entrust.net, *.geotrust.com, *.omniroot.com, *.public-trust.com, *.symcb.com, *.symcd.com, *.verisign.com, *.verisign.net, aia.entrust.net, apps.identrust.com, cacert.a.omniroot.com, cacert.omniroot.com, cacerts.digicert.com, cdp1.public-trust.com, cert.int-x3.letsencrypt.org, crl.entrust.net, crl.globalsign.com, crl.globalsign.net, crl.identrust.com, crl.microsoft.com, crl3.digicert.com, crl4.digicert.com, evintl-aia.verisign.com, evintl-crl.verisign.com, evintl-ocsp.verisign.com, evsecure-aia.verisign.com, evsecure-crl.verisign.com, evsecure-ocsp.verisign.com, isrg.trustid.ocsp.identrust.com, mscrl.microsoft.com, ocsp.digicert.com, ocsp.entrust.net, ocsp.globalsign.com, ocsp.int-x3.letsencrypt.org, ocsp.msocsp.com, ocsp.omniroot.com, ocsp2.globalsign.com, ocspx.digicert.com, s1.symcb.com, s2.symcb.com, sa.symcb.com, sd.symcb.com, secure.globalsign.com, sr.symcb.com, sr.symcd.com, su.symcb.com, su.symcd.com, vassg142.crl.omniroot.com, vassg142.ocsp.omniroot.com, www.digicert.com, www.microsoft.com TCP: 443, 80
126 Default
Optional
Notes: Connection to the speech service is required for Office Dictation features. If connectivity is not allowed, Dictation will be disabled.
No officespeech.platform.bing.com TCP: 443

Managing Office 365 endpoints

Troubleshooting Office 365 connectivity

Client connectivity

Content delivery networks

Microsoft Azure Datacenter IP Ranges

Microsoft Public IP Space