Exchange Online

ID Category ER Addresses Ports
1 Optimize
Required
Yes outlook-dod.office365.us, webmail.apps.mil
40.66.24.0/21, 131.253.80.0/24, 131.253.83.64/26, 131.253.84.0/26, 131.253.84.128/26, 131.253.87.0/25, 131.253.87.128/28, 131.253.87.160/27, 131.253.87.192/28, 131.253.87.224/28, 131.253.88.16/28, 131.253.88.64/28, 131.253.88.80/28, 131.253.88.112/28, 131.253.88.176/28, 131.253.88.208/28, 131.253.88.224/28, 2001:489a:2200:500::/56
TCP: 443, 80
2 Default
Required
Yes domains.live.com
40.118.209.192/32, 168.62.190.41/32
TCP: 443, 80
3 Default
Required
No r4.office365.us TCP: 443, 80
4 Default
Required
Yes outlook-dod.office365.us, webmail.apps.mil TCP: 143, 25, 587, 993, 995
5 Default
Required
Yes autodiscover.*.mail.onmicrosoft.com, autodiscover.*.onmicrosoft.com TCP: 443, 80
6 Allow
Required
Yes *.protection.office365.us, *.scc.protection.apps.mil, scc.protection.apps.mil
23.103.191.0/24, 23.103.199.0/25, 23.103.204.0/22, 52.181.167.91/32, 52.182.95.219/32, 2001:489a:2202::/62, 2001:489a:2202:8::/62, 2001:489a:2202:2000::/63
TCP: 25, 443

SharePoint Online and OneDrive for Business

ID Category ER Addresses Ports
9 Optimize
Required
Yes *.dps.mil, *.sharepoint-mil.us
104.212.48.0/23, 2001:489a:2204::/63
TCP: 443, 80
10 Default
Required
No odc.officeapps.live.com, officeclient.microsoft.com, oneclient.sfx.ms, wns.windows.com TCP: 443, 80

Skype for Business Online and Microsoft Teams

ID Category ER Addresses Ports
7 Optimize
Required
Yes *.dod.teams.microsoft.us, *.online.dod.skypeforbusiness.us, dod.teams.microsoft.us
52.127.64.0/21, 52.180.249.148/32, 52.180.252.118/32, 52.180.252.187/32, 52.180.253.137/32, 52.180.253.154/32, 52.180.255.180/32, 52.181.165.243/32, 52.181.166.119/32, 52.181.167.43/32, 52.181.167.64/32, 52.181.180.13/32, 52.181.200.104/32, 104.212.32.0/22, 104.212.60.0/23, 195.134.240.0/22
TCP: 443
UDP: 3478, 3479, 3480, 3481
8 Default
Required
Yes *.dod.teams.microsoft.us, *.online.dod.skypeforbusiness.us, dod.teams.microsoft.us TCP: 5061, 50000-59999
UDP: 50000-59999

Microsoft 365 Common and Office Online

ID Category ER Addresses Ports
11 Allow
Required
Yes *.dod.online.office365.us
52.127.80.0/23, 52.181.164.39/32, 52.182.95.191/32
TCP: 443
12 Default
Required
Yes *.dod.cdn.office365.us
52.181.164.39/32, 52.182.95.191/32
TCP: 443
13 Allow
Required
Yes *.gov.us.microsoftonline.com, adminwebservice.gov.us.microsoftonline.com, adminwebservice-s1-bn1a.microsoftonline.com, adminwebservice-s1-dm2a.microsoftonline.com, api.login.microsoftonline.com, becws.gov.us.microsoftonline.com, bws-s1-bn1a-relay.microsoftonline.com, bws-s1-bn1r-relay.microsoftonline.com, bws-s1-dm2a-relay.microsoftonline.com, bws-s1-dm2r-relay.microsoftonline.com, clientconfig.microsoftonline-p.net, hip.microsoftonline-p.net, hipservice.microsoftonline.com, login.microsoftonline.com, login.microsoftonline.us, login.microsoftonline-p.com, login.windows.net, loginex.microsoftonline.com, login-us.microsoftonline.com, monitoring.microsoftonline-p.com, nexus.microsoftonline-p.com, provisioningapi.gov.us.microsoftonline.com, provisioningapi-s1-dm2a.microsoftonline.com, provisioningapi-s1-dm2r.microsoftonline.com
13.71.201.64/26, 13.72.17.49/32, 13.72.18.116/32, 13.72.18.212/32, 13.72.18.216/32, 13.72.18.221/32, 13.72.19.9/32, 13.72.19.36/32, 13.72.20.4/32, 13.72.23.54/32, 13.72.49.238/32, 13.72.50.182/32, 13.72.50.206/32, 13.72.50.212/32, 13.72.50.218/32, 13.72.51.69/32, 13.72.55.111/32, 13.72.55.162/32, 13.72.55.177/32, 13.72.184.118/32, 13.72.184.199/32, 13.72.184.206/32, 13.72.185.5/32, 13.72.185.34/32, 13.72.186.4/32, 13.72.186.27/32, 13.72.186.138/32, 13.72.186.230/32, 13.72.187.8/32, 13.72.188.36/32, 13.72.188.114/32, 13.72.188.142/32, 13.72.189.27/32, 13.72.189.143/32, 13.72.190.80/32, 13.72.190.167/32, 13.72.191.10/32, 13.73.64.64/26, 13.73.208.128/25, 23.100.16.168/29, 23.100.32.136/29, 23.100.64.24/29, 23.100.72.32/29, 23.100.80.64/29, 23.100.120.64/29, 23.101.144.136/29, 23.101.165.168/29, 23.101.181.128/29, 40.113.192.16/29, 40.114.120.16/29, 52.126.194.0/23, 52.244.120.128/25, 65.52.1.16/29, 65.52.193.136/29, 104.42.72.16/29, 104.43.208.16/29, 104.43.240.16/29, 104.45.208.104/29, 104.46.112.8/29, 104.209.144.16/29, 104.210.48.8/29, 104.210.208.16/29, 104.211.16.16/29, 104.211.48.16/29, 104.215.96.24/29, 131.253.120.0/24, 157.55.59.128/25, 157.56.53.128/25, 157.56.58.0/25, 157.56.151.0/25
TCP: 443
14 Default
Required
No mscrl.microsoft.com, secure.aadcdn.microsoftonline-p.com TCP: 443
15 Allow
Required
Yes portal.apps.mil, webshell.dodsuite.office365.us, www.ohome.apps.mil
52.180.251.166/32, 52.180.255.73/32, 52.181.160.19/32, 52.181.160.113/32, 52.181.163.64/32, 52.182.92.132/32
TCP: 443
16 Allow
Required
Yes *.osi.apps.mil
52.127.72.0/21
TCP: 443
17 Default
Required
No activation.sls.microsoft.com, crl.microsoft.com, go.microsoft.com, insertmedia.bing.office.net, ocsa.officeapps.live.com, ocsredir.officeapps.live.com, ocws.officeapps.live.com, office15client.microsoft.com, office15redir.microsoft.com, officecdn.microsoft.com, officecdn.microsoft.com.edgekey.net, officecdn.microsoft.com.edgesuite.net, officepreviewredir.microsoft.com, officeredir.microsoft.com, ols.officeapps.live.com, r.office.microsoft.com TCP: 443, 80
18 Default
Required
No cdn.odc.officeapps.live.com, odc.officeapps.live.com, officeclient.microsoft.com TCP: 443, 80