Exchange Online

ID Category ER Addresses Ports
1 Optimizetest
Required
No outlook.office.de
51.4.64.0/23, 51.5.64.0/23
TCP: 443, 80
2 Default
Required
No r1.res.office365.com TCP: 443, 80
3 Default
Required
No outlook.office.de TCP: 143, 25, 587, 993, 995
4 Default
Required
No autodiscover-outlook.office.de TCP: 443, 80
5 Allow
Required
No *.mail.protection.outlook.de, *.mail.protection.outlook.de, *.protection.outlook.de
51.4.72.0/24, 51.4.80.0/27, 51.5.72.0/24, 51.5.80.0/27, 2a01:4180:4050:400::/64, 2a01:4180:4050:800::/64, 2a01:4180:4051:400::/64, 2a01:4180:4051:800::/64
TCP: 25, 443

SharePoint Online and OneDrive for Business

ID Category ER Addresses Ports
8 Optimize
Required
No *.sharepoint.de
51.4.66.0/23, 51.5.66.0/23
TCP: 443, 80
9 Default
Required
No odc.osi.office.de TCP: 443, 80
10 Default
Required
No wns.windows.com TCP: 443, 80
11 Default
Required
No officeapps.live.com TCP: 443, 80
12 Default
Required
No shellprod.msocdn.de, spoprod-a.akamaihd.net, static.sharepointonline.com TCP: 443, 80
13 Default
Required
No *.search.production.de.azuretrafficmanager.de TCP: 443
14 Default
Required
No odc.officeapps.live.com, officeclient.microsoft.com TCP: 443, 80
15 Default
Required
No mobile.pipe.aria.microsoft.com, ssw.live.com, watson.telemetry.microsoft.com TCP: 443, 80
16 Default
Required
No oneclient.sfx.ms TCP: 443, 80
17 Default
Required
No *.svc.ms TCP: 443, 80

Skype for Business Online and Microsoft Teams

ID Category ER Addresses Ports
6 Optimize
Required
No *.germeetings.skype.de, *.infra.skype.de, *.online.skype.de, *.resources.skype.de
51.4.68.0/26, 51.4.68.128/25, 51.5.69.0/26, 51.5.69.128/25, 2a01:4180:4040:1::/64, 2a01:4180:4040:2::/64, 2a01:4180:4040:7::/64, 2a01:4180:4040:8::/64
TCP: 443, 80
UDP: 3478
7 Default
Required
No *.germeetings.skype.de, *.infra.skype.de, *.online.skype.de, *.resources.skype.de TCP: 5061, 50000-59999
UDP: 50000-59999

Microsoft 365 Common and Office Online

ID Category ER Addresses Ports
18 Allow
Required
No *.online.office.de, broadcast.online.office.de, excel.online.office.de, onenote.online.office.de, powerpoint.online.office.de, view.online.office.de, visio.online.office.de, word-edit.online.office.de, word-view.online.office.de
51.4.144.200/32, 51.5.149.3/32, 51.18.16.0/23
TCP: 443
19 Default
Required
No broadcast.cdn.office.de, excel.cdn.office.de, officeapps.cdn.office.de, onenote.cdn.office.de, powerpoint.cdn.office.de, view.cdn.office.de, visio.cdn.office.de, word-edit.cdn.office.de, word-view.cdn.office.de TCP: 443
20 Allow
Required
No accesscontrol.cloudapi.de, adminwebservice.microsoftonline.de, becws.microsoftonline.de, companymanager.microsoftonline.de, device.login.microsoftonline.de, directoryprovisioning.cloudapi.de, graph.cloudapi.de, login.cloudapi.de, login.microsoftonline.de, logincert.microsoftonline.de, pas.cloudapi.de, passwordreset.activedirectory.microsoftazure.de, provisioningapi.microsoftonline.de, sts.cloudapi.de, syncservice.microsoftonline.de
51.4.70.0/24, 51.4.136.0/24, 51.4.144.0/24, 51.5.70.0/24, 51.5.136.0/24, 51.5.144.0/24
TCP: 443, 80
21 Default
Required
No *.azurecloudapp.de, *.cloudapi.de, *.windows.de, decloudapi.de, decloudapi.net, decloudapp.net, microsoftonline.de, windowsazure.de TCP: 443, 80
22 Default
Required
No secure.aadcdn.microsoftonline-p.com TCP: 443, 80
23 Default
Required
No *.microsoftonline.de, *.windows.net TCP: 443, 80
24 Allow
Required
No cegsignup.microsoft.de, negsignup.microsoft.de TCP: 443, 80
25 Default
Required
No *.de.msods.nsatc.net, *.office.de.akadns.net, *.windows.de.nsatc.net, officehome.msocdn.de TCP: 443, 80
26 Default
Required
No *.d-trust.net TCP: 443, 80
27 Allow
Required
No *.onmicrosoft.de, *.osi.office.de, office.de, portal.office.de, webshell.suite.office.de, www.office.de
51.4.70.0/24, 51.4.71.0/24, 51.4.226.115/32, 51.4.227.178/32, 51.4.230.178/32, 51.5.70.0/24, 51.5.71.0/24, 51.5.147.48/32, 51.5.242.163/32, 51.5.245.67/32, 2a01:4180:2001::92/128, 2a01:4180:2001::234/128, 2a01:4180:2401::11f/128, 2a01:4180:2401::33b/128
TCP: 443, 80
28 Default
Required
No *.cloudfront.net, agent.office.de, clientlog.portal.office.de, commerceapi.office.de, prod.msocdn.de, r1.res.office365.com, shellprod.msocdn.de, videoplayer.osi.office.net TCP: 443, 80
29 Allow
Required
No arms.osi.office.de, excelcs.osi.office.de, excelps.osi.office.de, manage.osi.office.de, ols.office.osi.de, ols.osi.office.de, omexdatastore.osi.office.de, omexdiagnostics.osi.office.de, plattest.osi.office.de, pptcs.osi.office.de, pptps.osi.office.de, retailer.osi.office.de, scram.office.osi.de, wordcs.osi.office.de, wordps.osi.office.de
51.4.144.41/32, 51.4.144.174/32, 51.4.145.38/32, 51.4.147.81/32, 51.4.147.233/32, 51.4.148.12/32, 51.4.150.145/32, 51.5.147.242/32, 51.5.149.100/32, 51.5.149.119/32, 51.5.149.123/32, 51.5.149.180/32, 51.5.149.186/32, 51.18.0.0/21
TCP: 443, 80
30 Default
Required
No graph.microsoft.de, microsoftonline.de, ocws.osi.office.de, odc.osi.office.de, osi.office.de, roaming.osi.office.de, sharepoint.de, store.office.de, wordsgs.osi.office.de TCP: 443, 80
31 Default
Required
No o15.officeredir.microsoft.com, odc.officeapps.live.com, odcsm.officeapps.live.com, office.microsoft.com, office15client.microsoft.com, officeimg.vo.msecnd.net, roaming.officeapps.live.com TCP: 443, 80