Exchange Online

ID Category ER Addresses Ports
1 Optimize
Required
Yes outlook.office365.us
40.66.16.0/21, 131.253.83.0/26, 131.253.84.64/26, 131.253.84.192/26, 131.253.86.0/24, 131.253.87.144/28, 131.253.87.208/28, 131.253.87.240/28, 131.253.88.0/28, 131.253.88.32/28, 131.253.88.48/28, 131.253.88.96/28, 131.253.88.128/28, 131.253.88.144/28, 131.253.88.160/28, 131.253.88.192/28, 131.253.88.240/28, 2001:489a:2200:28::/62, 2001:489a:2200:3c::/62, 2001:489a:2200:44::/62, 2001:489a:2200:400::/56
TCP: 443, 80
2 Default
Required
Yes domains.live.com
40.118.209.192/32, 168.62.190.41/32
TCP: 443, 80
3 Default
Required
No r4.office365.us TCP: 443, 80
4 Default
Required
Yes autodiscover.*.mail.onmicrosoft.com, autodiscover.*.onmicrosoft.com TCP: 443, 80
5 Default
Required
Yes outlook.office365.us TCP: 143, 25, 587, 993, 995
6 Allow
Required
Yes *.manage.office365.us, *.protection.office365.us, *.scc.office365.us, manage.office365.us, scc.office365.us
13.72.179.197/32, 13.72.183.70/32, 23.103.191.0/24, 23.103.199.128/25, 23.103.208.0/22, 52.227.170.14/32, 52.227.170.120/32, 52.227.178.94/32, 52.227.180.138/32, 52.227.182.149/32, 52.238.74.212/32, 2001:489a:2202:4::/62, 2001:489a:2202:c::/62, 2001:489a:2202:2000::/63
TCP: 25, 443

SharePoint Online and OneDrive for Business

ID Category ER Addresses Ports
9 Optimize
Required
Yes *.sharepoint.us
104.212.50.0/23, 2001:489a:2204:2::/63
TCP: 443, 80
10 Default
Required
No odc.officeapps.live.com, officeclient.microsoft.com, oneclient.sfx.ms, wns.windows.com TCP: 443, 80

Skype for Business Online and Microsoft Teams

ID Category ER Addresses Ports
7 Optimize
Required
Yes *.gov.teams.microsoft.us, *.infra.gov.skypeforbusiness.us, *.online.gov.skypeforbusiness.us, gov.teams.microsoft.us
52.127.88.0/21, 104.212.44.0/22, 195.134.228.0/22
TCP: 443, 80
UDP: 3478
8 Default
Required
Yes *.gov.teams.microsoft.us, *.infra.gov.skypeforbusiness.us, *.online.gov.skypeforbusiness.us, gov.teams.microsoft.us TCP: 5061, 50000-59999
UDP: 50000-59999

Microsoft 365 Common and Office Online

ID Category ER Addresses Ports
11 Allow
Required
Yes *.gov.online.office365.us
13.72.20.247/32, 13.72.185.126/32, 52.127.82.0/23
TCP: 443
12 Default
Required
Yes *.cdn.office365.us
13.72.20.247/32, 13.72.185.126/32, 52.127.82.0/23
TCP: 443
13 Allow
Required
Yes *.gov.us.microsoftonline.com, adminwebservice.gov.us.microsoftonline.com, adminwebservice-s1-bn1a.microsoftonline.com, adminwebservice-s1-dm2a.microsoftonline.com, api.login.microsoftonline.com, becws.gov.us.microsoftonline.com, bws-s1-bn1a-relay.microsoftonline.com, bws-s1-bn1r-relay.microsoftonline.com, bws-s1-dm2a-relay.microsoftonline.com, bws-s1-dm2r-relay.microsoftonline.com, clientconfig.microsoftonline-p.net, hip.microsoftonline-p.net, hipservice.microsoftonline.com, login.microsoftonline.com, login.microsoftonline.us, login.microsoftonline-p.com, login.windows.net, loginex.microsoftonline.com, login-us.microsoftonline.com, monitoring.microsoftonline-p.com, nexus.microsoftonline-p.com, provisioningapi.gov.us.microsoftonline.com, provisioningapi-s1-dm2a.microsoftonline.com, provisioningapi-s1-dm2r.microsoftonline.com
13.71.201.64/26, 13.72.17.49/32, 13.72.18.116/32, 13.72.18.212/32, 13.72.18.216/32, 13.72.18.221/32, 13.72.19.9/32, 13.72.19.36/32, 13.72.20.4/32, 13.72.23.54/32, 13.72.49.238/32, 13.72.50.182/32, 13.72.50.206/32, 13.72.50.212/32, 13.72.50.218/32, 13.72.51.69/32, 13.72.55.111/32, 13.72.55.162/32, 13.72.55.177/32, 13.72.184.118/32, 13.72.184.199/32, 13.72.184.206/32, 13.72.185.5/32, 13.72.185.34/32, 13.72.186.4/32, 13.72.186.27/32, 13.72.186.138/32, 13.72.186.230/32, 13.72.187.8/32, 13.72.188.36/32, 13.72.188.114/32, 13.72.188.142/32, 13.72.189.27/32, 13.72.189.143/32, 13.72.190.80/32, 13.72.190.167/32, 13.72.191.10/32, 13.73.64.64/26, 13.73.208.128/25, 23.100.16.168/29, 23.100.32.136/29, 23.100.64.24/29, 23.100.72.32/29, 23.100.80.64/29, 23.100.120.64/29, 23.101.144.136/29, 23.101.165.168/29, 23.101.181.128/29, 40.113.192.16/29, 40.114.120.16/29, 52.126.194.0/23, 52.244.120.128/25, 65.52.1.16/29, 65.52.193.136/29, 104.42.72.16/29, 104.43.208.16/29, 104.43.240.16/29, 104.45.208.104/29, 104.46.112.8/29, 104.209.144.16/29, 104.210.48.8/29, 104.210.208.16/29, 104.211.16.16/29, 104.211.48.16/29, 104.215.96.24/29, 131.253.120.0/24, 157.55.59.128/25, 157.56.53.128/25, 157.56.58.0/25, 157.56.151.0/25
TCP: 443
14 Default
Required
No mscrl.microsoft.com, secure.aadcdn.microsoftonline-p.com TCP: 443
15 Default
Required
No officehome.msocdn.us, prod.msocdn.us TCP: 443, 80
16 Allow
Required
Yes portal.office365.us, webshell.suite.office365.us, www.office365.us
13.72.179.48/32, 13.72.188.8/32, 52.227.167.206/32, 52.227.170.242/32, 52.244.165.19/32, 52.247.174.184/32
TCP: 443, 80
17 Allow
Required
Yes *.osi.office365.us
52.127.240.0/20
TCP: 443
18 Default
Required
No activation.sls.microsoft.com, crl.microsoft.com, go.microsoft.com, insertmedia.bing.office.net, ocsa.officeapps.live.com, ocsredir.officeapps.live.com, ocws.officeapps.live.com, office15client.microsoft.com, office15redir.microsoft.com, officecdn.microsoft.com, officecdn.microsoft.com.edgekey.net, officecdn.microsoft.com.edgesuite.net, officepreviewredir.microsoft.com, officeredir.microsoft.com, ols.officeapps.live.com, r.office.microsoft.com TCP: 443, 80
19 Default
Required
No cdn.odc.officeapps.live.com, odc.officeapps.live.com, officeclient.microsoft.com TCP: 443, 80