Exchange Online

ID Category ER Addresses Ports
1 Optimize
Required
Yes outlook.office.com, outlook.office365.com
13.107.6.152/31, 13.107.9.152/31, 13.107.18.10/31, 13.107.19.10/31, 13.107.128.0/22, 23.103.160.0/20, 23.103.224.0/19, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 111.221.112.0/21, 131.253.33.215/32, 132.245.0.0/16, 134.170.68.0/23, 150.171.32.0/22, 157.56.232.0/21, 157.56.240.0/20, 191.232.96.0/19, 191.234.6.152/32, 191.234.140.0/22, 204.79.197.215/32, 206.191.224.0/19, 2603:1006::/40, 2603:1016::/40, 2603:1020:800::/40, 2603:1026::/40, 2603:1026:200::/39, 2603:1026:400::/39, 2603:1026:600::/44, 2603:1026:620::/44, 2603:1026:800::/44, 2603:1026:820::/45, 2603:1036::/39, 2603:1036:200::/40, 2603:1036:400::/40, 2603:1036:600::/40, 2603:1036:800::/38, 2603:1036:c00::/40, 2603:1046::/37, 2603:1046:900::/40, 2603:1056::/40, 2603:1056:400::/40, 2603:1056:600::/40, 2603:1096::/38, 2603:1096:400::/40, 2603:1096:600::/40, 2603:1096:a00::/39, 2603:1096:c00::/40, 2603:10a6:200::/40, 2603:10a6:400::/40, 2603:10a6:600::/40, 2603:10a6:800::/40, 2603:10d6:200::/40, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128, 2a01:111:f400::/48
TCP: 443, 80
2 Allow
Required
Yes smtp.office365.com
13.107.6.152/31, 13.107.9.152/31, 13.107.18.10/31, 13.107.19.10/31, 13.107.128.0/22, 23.103.160.0/20, 23.103.224.0/19, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 111.221.112.0/21, 131.253.33.215/32, 132.245.0.0/16, 134.170.68.0/23, 150.171.32.0/22, 157.56.232.0/21, 157.56.240.0/20, 191.232.96.0/19, 191.234.6.152/32, 191.234.140.0/22, 204.79.197.215/32, 206.191.224.0/19, 2603:1006::/40, 2603:1016::/40, 2603:1020:800::/40, 2603:1026::/40, 2603:1026:200::/39, 2603:1026:400::/39, 2603:1026:600::/44, 2603:1026:620::/44, 2603:1026:800::/44, 2603:1026:820::/45, 2603:1036::/39, 2603:1036:200::/40, 2603:1036:400::/40, 2603:1036:600::/40, 2603:1036:800::/38, 2603:1036:c00::/40, 2603:1046::/37, 2603:1046:900::/40, 2603:1056::/40, 2603:1056:400::/40, 2603:1056:600::/40, 2603:1096::/38, 2603:1096:400::/40, 2603:1096:600::/40, 2603:1096:a00::/39, 2603:1096:c00::/40, 2603:10a6:200::/40, 2603:10a6:400::/40, 2603:10a6:600::/40, 2603:10a6:800::/40, 2603:10d6:200::/40, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128, 2a01:111:f400::/48
TCP: 587
3 Default
Required
No r1.res.office365.com, r3.res.office365.com, r4.res.office365.com, xsi.outlook.com TCP: 443, 80
4 Default
Optional
Notes: used to configure Exchange Hybrid, using the Exchange Hybrid Configuration Wizard.
No domains.live.com TCP: 443, 80
5 Default
Optional
Notes: Exchange Online IMAP4 migration
Yes *.outlook.office.com, outlook.office365.com
13.107.6.152/31, 13.107.9.152/31, 13.107.18.10/31, 13.107.19.10/31, 13.107.128.0/22, 23.103.160.0/20, 23.103.224.0/19, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 111.221.112.0/21, 131.253.33.215/32, 132.245.0.0/16, 134.170.68.0/23, 150.171.32.0/22, 157.56.232.0/21, 157.56.240.0/20, 191.232.96.0/19, 191.234.6.152/32, 191.234.140.0/22, 204.79.197.215/32, 206.191.224.0/19, 2603:1006::/40, 2603:1016::/40, 2603:1020:800::/40, 2603:1026::/40, 2603:1026:200::/39, 2603:1026:400::/39, 2603:1026:600::/44, 2603:1026:620::/44, 2603:1026:800::/44, 2603:1026:820::/45, 2603:1036::/39, 2603:1036:200::/40, 2603:1036:400::/40, 2603:1036:600::/40, 2603:1036:800::/38, 2603:1036:c00::/40, 2603:1046::/37, 2603:1046:900::/40, 2603:1056::/40, 2603:1056:400::/40, 2603:1056:600::/40, 2603:1096::/38, 2603:1096:400::/40, 2603:1096:600::/40, 2603:1096:a00::/39, 2603:1096:c00::/40, 2603:10a6:200::/40, 2603:10a6:400::/40, 2603:10a6:600::/40, 2603:10a6:800::/40, 2603:10d6:200::/40, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128, 2a01:111:f400::/48
TCP: 143, 993
6 Default
Optional
Notes: Exchange Online POP3 migration
Yes *.outlook.office.com, outlook.office365.com
13.107.6.152/31, 13.107.9.152/31, 13.107.18.10/31, 13.107.19.10/31, 13.107.128.0/22, 23.103.160.0/20, 23.103.224.0/19, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 111.221.112.0/21, 131.253.33.215/32, 132.245.0.0/16, 134.170.68.0/23, 150.171.32.0/22, 157.56.232.0/21, 157.56.240.0/20, 191.232.96.0/19, 191.234.6.152/32, 191.234.140.0/22, 204.79.197.215/32, 206.191.224.0/19, 2603:1006::/40, 2603:1016::/40, 2603:1020:800::/40, 2603:1026::/40, 2603:1026:200::/39, 2603:1026:400::/39, 2603:1026:600::/44, 2603:1026:620::/44, 2603:1026:800::/44, 2603:1026:820::/45, 2603:1036::/39, 2603:1036:200::/40, 2603:1036:400::/40, 2603:1036:600::/40, 2603:1036:800::/38, 2603:1036:c00::/40, 2603:1046::/37, 2603:1046:900::/40, 2603:1056::/40, 2603:1056:400::/40, 2603:1056:600::/40, 2603:1096::/38, 2603:1096:400::/40, 2603:1096:600::/40, 2603:1096:a00::/39, 2603:1096:c00::/40, 2603:10a6:200::/40, 2603:10a6:400::/40, 2603:10a6:600::/40, 2603:10a6:800::/40, 2603:10d6:200::/40, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128, 2a01:111:f400::/48
TCP: 995
7 Default
Optional
Notes: Used to configure Exchange Hybrid, using the Exchange Hybrid Configuration Wizard.
No *.store.core.windows.net, asl.configure.office.com, mshrcstorageprod.blob.core.windows.net, tds.configure.office.com TCP: 443, 80
8 Default
Required
Yes *.outlook.com, *.outlook.office.com, autodiscover-*.outlook.com
13.107.6.152/31, 13.107.9.152/31, 13.107.18.10/31, 13.107.19.10/31, 13.107.128.0/22, 23.103.160.0/20, 23.103.224.0/19, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 111.221.112.0/21, 131.253.33.215/32, 132.245.0.0/16, 134.170.68.0/23, 150.171.32.0/22, 157.56.232.0/21, 157.56.240.0/20, 191.232.96.0/19, 191.234.6.152/32, 191.234.140.0/22, 204.79.197.215/32, 206.191.224.0/19, 2603:1006::/40, 2603:1016::/40, 2603:1020:800::/40, 2603:1026::/40, 2603:1026:200::/39, 2603:1026:400::/39, 2603:1026:600::/44, 2603:1026:620::/44, 2603:1026:800::/44, 2603:1026:820::/45, 2603:1036::/39, 2603:1036:200::/40, 2603:1036:400::/40, 2603:1036:600::/40, 2603:1036:800::/38, 2603:1036:c00::/40, 2603:1046::/37, 2603:1046:900::/40, 2603:1056::/40, 2603:1056:400::/40, 2603:1056:600::/40, 2603:1096::/38, 2603:1096:400::/40, 2603:1096:600::/40, 2603:1096:a00::/39, 2603:1096:c00::/40, 2603:10a6:200::/40, 2603:10a6:400::/40, 2603:10a6:600::/40, 2603:10a6:800::/40, 2603:10d6:200::/40, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128, 2a01:111:f400::/48
TCP: 443, 80
9 Allow
Required
Yes *.protection.outlook.com
23.103.132.0/22, 23.103.136.0/21, 23.103.144.0/20, 23.103.198.0/23, 23.103.200.0/22, 40.92.0.0/14, 40.107.0.0/17, 52.100.0.0/14, 52.238.78.88/32, 65.55.88.0/24, 65.55.169.0/24, 94.245.120.64/26, 104.47.0.0/17, 157.55.234.0/24, 157.56.110.0/23, 157.56.112.0/24, 207.46.100.0/24, 207.46.163.0/24, 213.199.154.0/24, 213.199.180.128/26, 216.32.180.0/23, 2a01:111:f400:7c00::/54, 2a01:111:f400:fc00::/54, 2a01:111:f403::/48
TCP: 443
10 Allow
Required
Yes *.mail.protection.outlook.com
23.103.132.0/22, 23.103.136.0/21, 23.103.144.0/20, 23.103.198.0/23, 23.103.200.0/22, 40.92.0.0/14, 40.107.0.0/17, 52.100.0.0/14, 65.55.88.0/24, 65.55.169.0/24, 94.245.120.64/26, 104.47.0.0/17, 157.55.234.0/24, 157.56.110.0/23, 157.56.112.0/24, 207.46.100.0/24, 207.46.163.0/24, 213.199.154.0/24, 213.199.180.128/26, 216.32.180.0/23, 2a01:111:f400:7c00::/54, 2a01:111:f400:fc00::/54, 2a01:111:f403::/48
TCP: 25

SharePoint Online and OneDrive for Business

ID Category ER Addresses Ports
31 Optimize
Required
Yes *.sharepoint.com, *-my.sharepoint.com
13.107.6.150/31, 13.107.6.168/32, 13.107.9.150/31, 13.107.9.168/32, 13.107.136.0/22, 40.108.0.0/19, 40.108.128.0/17, 52.104.0.0/14, 104.146.0.0/19, 104.146.128.0/17, 134.170.200.0/21, 134.170.208.0/21, 150.171.40.0/22, 191.232.0.0/23, 191.235.0.0/20, 2603:1039:e01::/48, 2603:1039:1001::/48, 2620:1ec:8f8::/46, 2620:1ec:908::/46, 2620:1ec:a92::150/128, 2a01:111:f402::/48
TCP: 443, 80
32 Default
Optional
Notes: OneDrive for Business: supportability, telemetry, APIs, and embedded email links
No *.log.optimizely.com, click.email.microsoftonline.com, ssw.live.com, storage.live.com TCP: 443
33 Default
Optional
Notes: SharePoint Hybrid Search - Endpoint to SearchContentService where the hybrid crawler feeds documents
No *.search.production.apac.trafficmanager.net, *.search.production.emea.trafficmanager.net, *.search.production.us.trafficmanager.net TCP: 443
34 Default
Optional
Notes: SharePoint Hybrid Search - Endpoint to SearchContentService to successfully authenticate to remote farm with OAuth authentication and authorization.
No accounts.accesscontrol.windows.net TCP: 443
35 Default
Required
No admin.onedrive.com, officeclient.microsoft.com, skydrive.wns.windows.com TCP: 443, 80
36 Default
Required
No g.live.com, oneclient.sfx.ms TCP: 443, 80
37 Default
Required
No *.sharepointonline.com, cdn.sharepointonline.com, privatecdn.sharepointonline.com, publiccdn.sharepointonline.com, spoprod-a.akamaihd.net, static.sharepointonline.com TCP: 443, 80
38 Default
Optional
Notes: SharePoint Online: auxiliary URLs
No prod.msocdn.com, watson.telemetry.microsoft.com TCP: 443, 80
39 Default
Required
Yes *.svc.ms, *-files.sharepoint.com, *-myfiles.sharepoint.com
13.107.6.150/31, 13.107.6.168/32, 13.107.9.150/31, 13.107.9.168/32, 13.107.136.0/22, 40.108.0.0/19, 40.108.128.0/17, 52.104.0.0/14, 104.146.0.0/19, 104.146.128.0/17, 134.170.200.0/21, 134.170.208.0/21, 150.171.40.0/22, 191.232.0.0/23, 191.235.0.0/20, 2603:1039:e01::/48, 2603:1039:1001::/48, 2620:1ec:8f8::/46, 2620:1ec:908::/46, 2620:1ec:a92::150/128, 2a01:111:f402::/48
TCP: 443, 80

Skype for Business Online and Microsoft Teams

ID Category ER Addresses Ports
11 Optimize
Required
Yes 13.107.64.0/18, 52.112.0.0/14 TCP: 443
UDP: 3478, 3479, 3480, 3481
12 Allow
Required
Yes *.lync.com, *.skype.com, *.teams.microsoft.com, teams.microsoft.com
13.70.151.216/32, 13.71.127.197/32, 13.72.245.115/32, 13.73.1.120/32, 13.75.126.169/32, 13.89.240.113/32, 13.107.3.0/24, 13.107.64.0/18, 51.140.143.149/32, 51.140.155.234/32, 51.140.203.190/32, 51.141.51.76/32, 52.112.0.0/14, 52.163.126.215/32, 52.170.21.67/32, 52.172.185.18/32, 52.178.94.2/32, 52.178.161.139/32, 52.228.25.96/32, 52.231.36.175/32, 52.231.207.185/32, 52.238.119.141/32, 52.242.23.189/32, 52.244.160.207/32, 104.215.11.144/32, 104.215.62.195/32, 138.91.237.237/32, 2603:1027::/48, 2603:1029:100::/48, 2603:1037::/48, 2603:1039:100::/48, 2603:1047::/48, 2603:1049:100::/48, 2603:1057::/48, 2620:1ec:6::/48, 2620:1ec:40::/42, 2620:1ec:42::/48, 2a01:111:2a:7::/64, 2a01:111:2a:8::/64, 2a01:111:2007:3::/64, 2a01:111:2007:4::/64, 2a01:111:200f:6::/64, 2a01:111:200f:7::/64, 2a01:111:200f:8::/64, 2a01:111:200f:9::/64, 2a01:111:200f:10::/64, 2a01:111:200f:11::/64, 2a01:111:2012:2::/64, 2a01:111:2012:3::/64, 2a01:111:2012:4::/64, 2a01:111:2012:5::/64, 2a01:111:2012:6::/64, 2a01:111:2012:7::/64, 2a01:111:202a:2::/64, 2a01:111:202a:3::/64, 2a01:111:202b:3::/64, 2a01:111:202b:4::/64, 2a01:111:202b:9::/64, 2a01:111:202b:a::/64, 2a01:111:202f::/48, 2a01:111:2034:2::/64, 2a01:111:2034:3::/64, 2a01:111:2035:6::/64, 2a01:111:2035:7::/64, 2a01:111:2036:2::/64, 2a01:111:2036:3::/64, 2a01:111:203e:1::/64, 2a01:111:203e:2::/64, 2a01:111:2040:1::/64, 2a01:111:2040:2::/64, 2a01:111:2046:4::/64, 2a01:111:2046:5::/64, 2a01:111:2047:1::/64, 2a01:111:2047:2::/64, 2a01:111:2048:1::/64, 2a01:111:2048:2::/64, 2a01:111:f402:5802::/64, 2a01:111:f402:5803::/64, 2a01:111:f402:5805::/64, 2a01:111:f404:c06::/64, 2a01:111:f404:c07::/64, 2a01:111:f404:c09::/64, 2a01:111:f404:c0a::/64, 2a01:111:f404:c0b::/64, 2a01:111:f404:c0c::/64, 2a01:111:f404:3400::/64, 2a01:111:f404:3401::/64, 2a01:111:f404:8002::/64, 2a01:111:f404:8003::/64, 2a01:111:f404:9400::/64, 2a01:111:f404:9401::/64, 2a01:111:f404:a000::/64, 2a01:111:f404:a001::/64, 2a01:111:f404:a800::/64, 2a01:111:f404:a801::/64, 2a01:111:f406:402::/64, 2a01:111:f406:403::/64, 2a01:111:f406:2400::/64, 2a01:111:f406:2401::/64, 2a01:111:f406:3405::/64, 2a01:111:f406:3406::/64
TCP: 443, 80
13 Allow
Required
Yes *.broadcast.skype.com, broadcast.skype.com
13.70.151.216/32, 13.71.127.197/32, 13.72.245.115/32, 13.73.1.120/32, 13.75.126.169/32, 13.89.240.113/32, 13.107.3.0/24, 13.107.64.0/18, 51.140.143.149/32, 51.140.155.234/32, 51.140.203.190/32, 51.141.51.76/32, 52.112.0.0/14, 52.163.126.215/32, 52.170.21.67/32, 52.172.185.18/32, 52.178.94.2/32, 52.178.161.139/32, 52.228.25.96/32, 52.231.36.175/32, 52.231.207.185/32, 52.238.119.141/32, 52.242.23.189/32, 52.244.160.207/32, 104.215.11.144/32, 104.215.62.195/32, 138.91.237.237/32, 2603:1027::/48, 2603:1029:100::/48, 2603:1037::/48, 2603:1039:100::/48, 2603:1047::/48, 2603:1049:100::/48, 2603:1057::/48, 2620:1ec:6::/48, 2620:1ec:40::/42, 2620:1ec:42::/48, 2a01:111:2a:7::/64, 2a01:111:2a:8::/64, 2a01:111:2007:3::/64, 2a01:111:2007:4::/64, 2a01:111:200f:6::/64, 2a01:111:200f:7::/64, 2a01:111:200f:8::/64, 2a01:111:200f:9::/64, 2a01:111:200f:10::/64, 2a01:111:200f:11::/64, 2a01:111:2012:2::/64, 2a01:111:2012:3::/64, 2a01:111:2012:4::/64, 2a01:111:2012:5::/64, 2a01:111:2012:6::/64, 2a01:111:2012:7::/64, 2a01:111:202a:2::/64, 2a01:111:202a:3::/64, 2a01:111:202b:3::/64, 2a01:111:202b:4::/64, 2a01:111:202b:9::/64, 2a01:111:202b:a::/64, 2a01:111:202f::/48, 2a01:111:2034:2::/64, 2a01:111:2034:3::/64, 2a01:111:2035:6::/64, 2a01:111:2035:7::/64, 2a01:111:2036:2::/64, 2a01:111:2036:3::/64, 2a01:111:203e:1::/64, 2a01:111:203e:2::/64, 2a01:111:2040:1::/64, 2a01:111:2040:2::/64, 2a01:111:2046:4::/64, 2a01:111:2046:5::/64, 2a01:111:2047:1::/64, 2a01:111:2047:2::/64, 2a01:111:2048:1::/64, 2a01:111:2048:2::/64, 2a01:111:f402:5802::/64, 2a01:111:f402:5803::/64, 2a01:111:f402:5805::/64, 2a01:111:f404:c06::/64, 2a01:111:f404:c07::/64, 2a01:111:f404:c09::/64, 2a01:111:f404:c0a::/64, 2a01:111:f404:c0b::/64, 2a01:111:f404:c0c::/64, 2a01:111:f404:3400::/64, 2a01:111:f404:3401::/64, 2a01:111:f404:8002::/64, 2a01:111:f404:8003::/64, 2a01:111:f404:9400::/64, 2a01:111:f404:9401::/64, 2a01:111:f404:a000::/64, 2a01:111:f404:a001::/64, 2a01:111:f404:a800::/64, 2a01:111:f404:a801::/64, 2a01:111:f406:402::/64, 2a01:111:f406:403::/64, 2a01:111:f406:2400::/64, 2a01:111:f406:2401::/64, 2a01:111:f406:3405::/64, 2a01:111:f406:3406::/64
TCP: 443
14 Default
Required
No quicktips.skypeforbusiness.com TCP: 443
15 Default
Required
No *.sfbassets.com, *.urlp.sfbassets.com, skypemaprdsitus.trafficmanager.net TCP: 443, 80
16 Default
Required
No *.keydelivery.mediaservices.windows.net, *.msecnd.net, *.streaming.mediaservices.windows.net, ajax.aspnetcdn.com, mlccdn.blob.core.windows.net TCP: 443
17 Default
Required
No aka.ms, amp.azure.net TCP: 443
18 Default
Optional
Notes: Federation with Skype and public IM connectivity: Contact picture retrieval
No *.users.storage.live.com TCP: 443
19 Default
Optional
Notes: Applies only to those who deploy the Conference Room Systems
No *.adl.windows.com TCP: 443, 80
20 Default
Optional
Notes: Needed when there are users are hosted both in Skype for Business on premises and online (Hybrid)
Yes 13.107.64.0/18, 52.112.0.0/14 TCP: 50000-59999
UDP: 50000-59999
21 Optimize
Required
Yes 13.107.64.0/18, 52.112.0.0/14 TCP: 443
UDP: 3478, 3479, 3480, 3481
22 Allow
Optional
Notes: Teams: Messaging interop with Skype for Business
Yes *.lync.com, *.skypeforbusiness.com
13.70.151.216/32, 13.71.127.197/32, 13.72.245.115/32, 13.73.1.120/32, 13.75.126.169/32, 13.89.240.113/32, 13.107.3.0/24, 13.107.64.0/18, 51.140.143.149/32, 51.140.155.234/32, 51.140.203.190/32, 51.141.51.76/32, 52.112.0.0/14, 52.163.126.215/32, 52.170.21.67/32, 52.172.185.18/32, 52.178.94.2/32, 52.178.161.139/32, 52.228.25.96/32, 52.231.36.175/32, 52.231.207.185/32, 52.238.119.141/32, 52.242.23.189/32, 52.244.160.207/32, 104.215.11.144/32, 104.215.62.195/32, 138.91.237.237/32, 2603:1027::/48, 2603:1029:100::/48, 2603:1037::/48, 2603:1039:100::/48, 2603:1047::/48, 2603:1049:100::/48, 2603:1057::/48, 2620:1ec:6::/48, 2620:1ec:40::/42, 2620:1ec:42::/48, 2a01:111:2a:7::/64, 2a01:111:2a:8::/64, 2a01:111:2007:3::/64, 2a01:111:2007:4::/64, 2a01:111:200f:6::/64, 2a01:111:200f:7::/64, 2a01:111:200f:8::/64, 2a01:111:200f:9::/64, 2a01:111:200f:10::/64, 2a01:111:200f:11::/64, 2a01:111:2012:2::/64, 2a01:111:2012:3::/64, 2a01:111:2012:4::/64, 2a01:111:2012:5::/64, 2a01:111:2012:6::/64, 2a01:111:2012:7::/64, 2a01:111:202a:2::/64, 2a01:111:202a:3::/64, 2a01:111:202b:3::/64, 2a01:111:202b:4::/64, 2a01:111:202b:9::/64, 2a01:111:202b:a::/64, 2a01:111:202f::/48, 2a01:111:2034:2::/64, 2a01:111:2034:3::/64, 2a01:111:2035:6::/64, 2a01:111:2035:7::/64, 2a01:111:2036:2::/64, 2a01:111:2036:3::/64, 2a01:111:203e:1::/64, 2a01:111:203e:2::/64, 2a01:111:2040:1::/64, 2a01:111:2040:2::/64, 2a01:111:2046:4::/64, 2a01:111:2046:5::/64, 2a01:111:2047:1::/64, 2a01:111:2047:2::/64, 2a01:111:2048:1::/64, 2a01:111:2048:2::/64, 2a01:111:f402:5802::/64, 2a01:111:f402:5803::/64, 2a01:111:f402:5805::/64, 2a01:111:f404:c06::/64, 2a01:111:f404:c07::/64, 2a01:111:f404:c09::/64, 2a01:111:f404:c0a::/64, 2a01:111:f404:c0b::/64, 2a01:111:f404:c0c::/64, 2a01:111:f404:3400::/64, 2a01:111:f404:3401::/64, 2a01:111:f404:8002::/64, 2a01:111:f404:8003::/64, 2a01:111:f404:9400::/64, 2a01:111:f404:9401::/64, 2a01:111:f404:a000::/64, 2a01:111:f404:a001::/64, 2a01:111:f404:a800::/64, 2a01:111:f404:a801::/64, 2a01:111:f406:402::/64, 2a01:111:f406:403::/64, 2a01:111:f406:2400::/64, 2a01:111:f406:2401::/64, 2a01:111:f406:3405::/64, 2a01:111:f406:3406::/64
TCP: 443
23 Allow
Required
Yes *.dc.trouter.io
13.70.151.216/32, 13.71.127.197/32, 13.72.245.115/32, 13.73.1.120/32, 13.75.126.169/32, 13.89.240.113/32, 13.107.3.0/24, 13.107.64.0/18, 51.140.143.149/32, 51.140.155.234/32, 51.140.203.190/32, 51.141.51.76/32, 52.112.0.0/14, 52.163.126.215/32, 52.170.21.67/32, 52.172.185.18/32, 52.178.94.2/32, 52.178.161.139/32, 52.228.25.96/32, 52.231.36.175/32, 52.231.207.185/32, 52.238.119.141/32, 52.242.23.189/32, 52.244.160.207/32, 104.215.11.144/32, 104.215.62.195/32, 138.91.237.237/32, 2603:1027::/48, 2603:1029:100::/48, 2603:1037::/48, 2603:1039:100::/48, 2603:1047::/48, 2603:1049:100::/48, 2603:1057::/48, 2620:1ec:6::/48, 2620:1ec:40::/42, 2a01:111:202f::/48
TCP: 443
24 Allow
Required
Yes *.skype.com, *.teams.microsoft.com, teams.microsoft.com
13.70.151.216/32, 13.71.127.197/32, 13.72.245.115/32, 13.73.1.120/32, 13.75.126.169/32, 13.89.240.113/32, 13.107.3.0/24, 13.107.64.0/18, 51.140.143.149/32, 51.140.155.234/32, 51.140.203.190/32, 51.141.51.76/32, 52.112.0.0/14, 52.163.126.215/32, 52.170.21.67/32, 52.172.185.18/32, 52.178.94.2/32, 52.178.161.139/32, 52.228.25.96/32, 52.231.36.175/32, 52.231.207.185/32, 52.238.119.141/32, 52.242.23.189/32, 52.244.160.207/32, 104.215.11.144/32, 104.215.62.195/32, 138.91.237.237/32, 2603:1027::/48, 2603:1029:100::/48, 2603:1037::/48, 2603:1039:100::/48, 2603:1047::/48, 2603:1049:100::/48, 2603:1057::/48, 2620:1ec:6::/48, 2620:1ec:40::/42, 2a01:111:202f::/48
TCP: 443, 80
25 Allow
Required
Yes *.dc.trouter.io, scsinstrument-ss-us.trafficmanager.net, scsquery-ss-asia.trafficmanager.net, scsquery-ss-eu.trafficmanager.net, scsquery-ss-us.trafficmanager.net
13.70.151.216/32, 13.71.127.197/32, 13.72.245.115/32, 13.73.1.120/32, 13.75.126.169/32, 13.89.240.113/32, 13.107.3.0/24, 13.107.64.0/18, 51.140.143.149/32, 51.140.155.234/32, 51.140.203.190/32, 51.141.51.76/32, 52.112.0.0/14, 52.163.126.215/32, 52.170.21.67/32, 52.172.185.18/32, 52.178.94.2/32, 52.178.161.139/32, 52.228.25.96/32, 52.231.36.175/32, 52.231.207.185/32, 52.238.119.141/32, 52.242.23.189/32, 52.244.160.207/32, 104.215.11.144/32, 104.215.62.195/32, 138.91.237.237/32, 2603:1027::/48, 2603:1029:100::/48, 2603:1037::/48, 2603:1039:100::/48, 2603:1047::/48, 2603:1049:100::/48, 2603:1057::/48, 2620:1ec:6::/48, 2620:1ec:40::/42, 2a01:111:202f::/48
TCP: 443
26 Default
Required
No *.msedge.net, compass-ssl.microsoft.com TCP: 443
27 Default
Required
No *.mstea.ms, *.secure.skypeassets.com, mlccdnprod.azureedge.net, videoplayercdn.osi.office.net TCP: 443
28 Default
Optional
Notes: Teams: Messaging interop with Skype for Business (including CDNs)
No *.sfbassets.com, skypemaprdsitus.trafficmanager.net TCP: 443
29 Default
Optional
Notes: Yammer third-party integration
No *.tenor.com TCP: 443, 80
30 Default
Optional
Notes: Applies only to those who deploy the Conference Room Systems
No *.adl.windows.com TCP: 443, 80

Microsoft 365 Common and Office Online

ID Category ER Addresses Ports
40 Default
Optional
Notes: Office 365 Video CDNs
No ajax.aspnetcdn.com, r3.res.outlook.com, spoprod-a.akamaihd.net TCP: 443
41 Default
Optional
Notes: Microsoft Stream
No *.api.microsoftstream.com, *.cloudapp.net, *.notification.api.microsoftstream.com, amp.azure.net, api.microsoftstream.com, az416426.vo.msecnd.net, s0.assets-yammer.com, vortex.data.microsoft.com, web.microsoftstream.com TCP: 443
42 Default
Optional
Notes: Microsoft Stream CDN
No amsglob0cdnstream11.azureedge.net, amsglob0cdnstream12.azureedge.net TCP: 443
43 Default
Optional
Notes: Microsoft Stream 3rd party integration (including CDNs)
No nps.onyx.azure.net TCP: 443
44 Default
Optional
Notes: Microsoft Stream - unauthenticated
No *.azureedge.net, *.media.azure.net, *.streaming.mediaservices.windows.net TCP: 443
45 Default
Optional
Notes: Office 365 Video
No *.keydelivery.mediaservices.windows.net, *.streaming.mediaservices.windows.net TCP: 443
46 Allow
Required
Yes *broadcast.officeapps.live.com, *excel.officeapps.live.com, *onenote.officeapps.live.com, *powerpoint.officeapps.live.com, *view.officeapps.live.com, *visio.officeapps.live.com, *word-edit.officeapps.live.com, *word-view.officeapps.live.com, office.live.com
13.107.6.171/32, 13.107.140.6/32, 52.108.0.0/14, 52.238.106.116/32, 52.247.150.191/32, 2603:1010:2::cb/128, 2603:1010:200::c7/128, 2603:1020:200::682f:a0fd/128, 2603:1020:201:9::c6/128, 2603:1020:600::a1/128, 2603:1020:700::a2/128, 2603:1020:800:2::6/128, 2603:1020:900::8/128, 2603:1030:7::749/128, 2603:1030:800:5::bfee:ad3c/128, 2603:1030:f00::17/128, 2603:1030:1000::21a/128, 2603:1040:200::4f3/128, 2603:1040:401::762/128, 2603:1040:601::60f/128, 2603:1040:a01::1e/128, 2603:1040:c01::28/128, 2603:1040:e00:1::2f/128, 2603:1040:f00::1f/128, 2603:1050:1::cd/128, 2620:1ec:8fc::6/128, 2620:1ec:a92::171/128, 2a01:111:f100:2002::8975:2d79/128, 2a01:111:f100:2002::8975:2da8/128, 2a01:111:f100:7000::6fdd:6cd5/128, 2a01:111:f100:a004::bfeb:88cf/128
TCP: 443
47 Default
Required
No *.cdn.office.net, contentstorage.osi.office.net TCP: 443
48 Allow
Required
No www.onenote.com
13.107.6.171/32, 13.107.140.6/32, 52.108.0.0/14, 52.238.106.116/32, 52.247.150.191/32, 2603:1010:2::cb/128, 2603:1010:200::c7/128, 2603:1020:200::682f:a0fd/128, 2603:1020:201:9::c6/128, 2603:1020:600::a1/128, 2603:1020:700::a2/128, 2603:1020:800:2::6/128, 2603:1020:900::8/128, 2603:1030:7::749/128, 2603:1030:800:5::bfee:ad3c/128, 2603:1030:f00::17/128, 2603:1030:1000::21a/128, 2603:1040:200::4f3/128, 2603:1040:401::762/128, 2603:1040:601::60f/128, 2603:1040:a01::1e/128, 2603:1040:c01::28/128, 2603:1040:e00:1::2f/128, 2603:1040:f00::1f/128, 2603:1050:1::cd/128, 2620:1ec:8fc::6/128, 2620:1ec:a92::171/128, 2a01:111:f100:2002::8975:2d79/128, 2a01:111:f100:2002::8975:2da8/128, 2a01:111:f100:7000::6fdd:6cd5/128, 2a01:111:f100:a004::bfeb:88cf/128
TCP: 443
49 Default
Required
No *.onenote.com
13.107.6.171/32, 13.107.140.6/32, 52.108.0.0/14, 52.238.106.116/32, 52.247.150.191/32, 2603:1010:2::cb/128, 2603:1010:200::c7/128, 2603:1020:200::682f:a0fd/128, 2603:1020:201:9::c6/128, 2603:1020:600::a1/128, 2603:1020:700::a2/128, 2603:1020:800:2::6/128, 2603:1020:900::8/128, 2603:1030:7::749/128, 2603:1030:800:5::bfee:ad3c/128, 2603:1030:f00::17/128, 2603:1030:1000::21a/128, 2603:1040:200::4f3/128, 2603:1040:401::762/128, 2603:1040:601::60f/128, 2603:1040:a01::1e/128, 2603:1040:c01::28/128, 2603:1040:e00:1::2f/128, 2603:1040:f00::1f/128, 2603:1050:1::cd/128, 2620:1ec:8fc::6/128, 2620:1ec:a92::171/128, 2a01:111:f100:2002::8975:2d79/128, 2a01:111:f100:2002::8975:2da8/128, 2a01:111:f100:7000::6fdd:6cd5/128, 2a01:111:f100:a004::bfeb:88cf/128
TCP: 443
50 Default
Optional
Notes: OneNote notebooks (wildcards)
No *.microsoft.com, *.msecnd.net, *.office.net TCP: 443
51 Default
Required
No *cdn.onenote.net, cdn.onenote.net, site-cdn.onenote.net TCP: 443
52 Default
Optional
Notes: OneNote 3rd party supporting services and CDNs
No ad.atdmt.com, s.ytimg.com, www.youtube.com TCP: 443
53 Default
Required
No ajax.aspnetcdn.com, apis.live.net, cdn.optimizely.com, officeapps.live.com, www.onedrive.com TCP: 443
54 Allow
Required
Yes ccs.login.microsoftonline.com, ccs-sdf.login.microsoftonline.com
13.107.6.152/31, 13.107.9.152/31, 13.107.18.10/31, 13.107.19.10/31, 13.107.128.0/22, 23.103.160.0/20, 23.103.224.0/19, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 111.221.112.0/21, 131.253.33.215/32, 132.245.0.0/16, 134.170.68.0/23, 150.171.32.0/22, 157.56.232.0/21, 157.56.240.0/20, 191.232.96.0/19, 191.234.6.152/32, 191.234.140.0/22, 204.79.197.215/32, 206.191.224.0/19, 2603:1006::/40, 2603:1016::/40, 2603:1020:800::/40, 2603:1026::/40, 2603:1026:200::/39, 2603:1026:400::/39, 2603:1026:600::/44, 2603:1026:620::/44, 2603:1026:800::/44, 2603:1026:820::/45, 2603:1036::/39, 2603:1036:200::/40, 2603:1036:400::/40, 2603:1036:600::/40, 2603:1036:800::/38, 2603:1036:c00::/40, 2603:1046::/37, 2603:1046:900::/40, 2603:1056::/40, 2603:1056:400::/40, 2603:1056:600::/40, 2603:1096::/38, 2603:1096:400::/40, 2603:1096:600::/40, 2603:1096:a00::/39, 2603:1096:c00::/40, 2603:10a6:200::/40, 2603:10a6:400::/40, 2603:10a6:600::/40, 2603:10a6:800::/40, 2603:10d6:200::/40, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128, 2a01:111:f400::/48
TCP: 443, 80
55 Allow
Optional
Notes: Azure AD Connect Health
Yes login.microsoftonline.com, login.windows.net
13.67.50.224/29, 13.71.201.64/26, 13.75.48.16/29, 13.75.80.16/29, 13.106.4.128/25, 13.106.56.0/25, 20.190.128.0/18, 23.100.16.168/29, 23.100.32.136/29, 23.100.64.24/29, 23.100.72.32/29, 23.100.80.64/29, 23.100.88.32/29, 23.100.101.112/28, 23.100.104.16/28, 23.100.112.64/29, 23.100.120.64/29, 23.101.5.104/29, 23.101.144.136/29, 23.101.165.168/29, 23.101.181.128/29, 23.101.210.24/29, 23.101.222.240/28, 23.101.224.16/29, 23.101.226.16/28, 40.112.64.16/28, 40.113.192.16/29, 40.114.120.16/29, 40.115.152.16/28, 40.126.0.0/18, 40.127.67.24/29, 52.172.144.16/28, 65.52.1.16/29, 65.52.193.136/29, 65.54.170.128/25, 70.37.154.128/25, 104.40.240.48/28, 104.41.13.120/29, 104.41.216.16/28, 104.42.72.16/29, 104.43.208.16/29, 104.43.240.16/29, 104.44.218.128/25, 104.44.254.128/25, 104.44.255.0/25, 104.45.0.16/28, 104.45.208.104/29, 104.46.112.8/29, 104.46.224.64/28, 104.209.144.16/29, 104.210.48.8/29, 104.210.83.160/29, 104.210.208.16/29, 104.211.16.16/29, 104.211.48.16/29, 104.211.88.16/28, 104.211.216.32/27, 104.215.96.24/29, 104.215.144.64/29, 104.215.184.16/29, 132.245.165.0/25, 134.170.67.0/25, 134.170.116.0/25, 134.170.165.0/25, 134.170.172.128/25, 157.55.45.128/25, 157.55.59.128/25, 157.55.130.0/25, 157.55.145.0/25, 157.55.155.0/25, 157.55.227.192/26, 157.56.53.128/25, 157.56.55.0/25, 157.56.58.0/25, 157.56.151.0/25, 191.232.2.128/25, 191.237.248.32/29, 191.237.252.192/28, 2001:df0:d9:200::/64, 2603:1020:201::4a0/128, 2603:1020:201::4a1/128, 2603:1020:201::4a2/128, 2603:1020:201::4a3/128, 2603:1020:201::4a4/128, 2603:1020:201::4a5/128, 2603:1020:201::4a6/128, 2603:1020:201::4a7/128, 2603:1020:201::4aa/128, 2603:1020:201::581/128, 2603:1020:201::583/128, 2603:1020:201::584/128, 2603:1020:201::586/128, 2603:1020:201::588/128, 2603:1020:201::589/128, 2603:1020:201::58a/128, 2603:1020:201::58b/128, 2603:1020:201::58c/128, 2603:1020:201:2::/64, 2603:1020:201:3::/64, 2603:1030:7::2c/128, 2603:1030:7::2d/128, 2603:1030:7::2f/128, 2603:1030:7::30/128, 2603:1030:7::34/128, 2603:1030:7::3f/128, 2603:1030:7::40/128, 2603:1030:7::41/128, 2603:1047:100::/64, 2a01:111:2005:6::/64, 2a01:111:200a:a::/64, 2a01:111:2035:8::/64, 2a01:111:f100:1002::4134:d89f/128, 2a01:111:f100:1002::4134:d944/128, 2a01:111:f100:1002::4134:d95f/128, 2a01:111:f100:1002::4134:da55/128, 2a01:111:f100:1002::4134:da5c/128, 2a01:111:f100:1002::4134:da81/128, 2a01:111:f100:1002::4134:dab5/128, 2a01:111:f100:1002::4134:daee/128, 2a01:111:f100:1002::4134:db2a/128, 2a01:111:f100:1002::4134:db60/128, 2a01:111:f100:1002::4134:db89/128, 2a01:111:f100:1002::4134:dbe7/128, 2a01:111:f100:1002::4134:dc2d/128, 2a01:111:f100:1002::4134:dc2e/128, 2a01:111:f100:1002::4134:dc43/128, 2a01:111:f100:1002::4134:dc6e/128, 2a01:111:f100:1002::4134:dd7a/128, 2a01:111:f100:1002::4134:ddcb/128, 2a01:111:f100:2002::8975:2c3b/128, 2a01:111:f100:2002::8975:2c3f/128, 2a01:111:f100:2002::8975:2c6d/128, 2a01:111:f100:2002::8975:2cdd/128, 2a01:111:f100:2002::8975:2cea/128, 2a01:111:f100:2002::8975:2ced/128, 2a01:111:f100:2002::8975:2d08/128, 2a01:111:f100:2002::8975:2d19/128, 2a01:111:f100:2002::8975:2d25/128, 2a01:111:f100:2002::8975:2d4d/128, 2a01:111:f100:2002::8975:2d6a/128, 2a01:111:f100:2002::8975:2d97/128, 2a01:111:f100:2002::8975:2daa/128, 2a01:111:f100:2002::8975:2dc7/128, 2a01:111:f100:3002::8987:30a0/128, 2a01:111:f100:3002::8987:3103/128, 2a01:111:f100:3002::8987:3278/128, 2a01:111:f100:3002::8987:328f/128, 2a01:111:f100:3002::8987:3299/128, 2a01:111:f100:3002::8987:3344/128, 2a01:111:f100:3002::8987:3396/128, 2a01:111:f100:3002::8987:3398/128, 2a01:111:f100:3002::8987:33b3/128, 2a01:111:f100:3002::8987:33ec/128, 2a01:111:f100:3002::8987:34eb/128, 2a01:111:f100:3002::8987:34f8/128, 2a01:111:f100:3002::8987:353b/128, 2a01:111:f100:3002::8987:35b5/128, 2a01:111:f100:4001::4625:a3ee/128, 2a01:111:f100:4001::4625:a4b6/128, 2a01:111:f100:4001::4625:a4ba/128, 2a01:111:f100:4001::4625:a4c7/128, 2a01:111:f100:4001::4625:a4cf/128, 2a01:111:f100:4001::4625:a4ee/128, 2a01:111:f100:4001::4625:a56f/128, 2a01:111:f100:4001::4625:a589/128, 2a01:111:f100:7000::6fdd:6a44/128, 2a01:111:f100:7000::6fdd:6b96/128, 2a01:111:f100:7000::6fdd:6bb6/128, 2a01:111:f100:7000::6fdd:6c82/128, 2a01:111:f100:7000::6fdd:6d1c/128, 2a01:111:f100:7000::6fdd:6d23/128, 2a01:111:f100:7000::6fdd:6d50/128, 2a01:111:f100:7000::6fdd:6d88/128, 2a01:111:f100:a004::bfeb:8a92/128, 2a01:111:f100:a004::bfeb:8ab0/128, 2a01:111:f100:a004::bfeb:8b12/128, 2a01:111:f100:a004::bfeb:8b15/128, 2a01:111:f100:a004::bfeb:8b3c/128, 2a01:111:f100:a004::bfeb:8b47/128, 2a01:111:f100:a004::bfeb:8b6c/128, 2a01:111:f100:a004::bfeb:8beb/128, 2a01:111:f100:a004::bfeb:8c55/128, 2a01:111:f100:a004::bfeb:8c6d/128, 2a01:111:f100:a004::bfeb:8c6f/128, 2a01:111:f100:a004::bfeb:8c88/128, 2a01:111:f100:a004::bfeb:8cc0/128, 2a01:111:f100:a004::bfeb:8cdc/128, 2a01:111:f100:a004::bfeb:8d83/128, 2a01:111:f100:a004::bfeb:8d96/128, 2a01:111:f100:a004::bfeb:8daa/128, 2a01:111:f102:8001::1761:4929/128, 2a01:111:f102:8001::1761:4948/128, 2a01:111:f102:8001::1761:4b83/128, 2a01:111:f102:8001::1761:4f0d/128, 2a01:111:f102:8001::1761:4f32/128, 2a01:111:f102:8001::1761:4f64/128, 2a01:111:f102:8001::1761:4f8d/128, 2a01:111:f102:8001::1761:4fc0/128, 2a01:111:f400::/48, 2a01:111:f406:1::/64, 2a01:111:f406:2::/64, 2a01:111:f406:c00::/64, 2a01:111:f406:1004::/64, 2a01:111:f406:1805::/64, 2a01:111:f406:3404::/64, 2a01:111:f406:8000::/64, 2a01:111:f406:8801::/64, 2a01:111:f406:a003::/64
TCP: 443
56 Allow
Required
Yes *.msappproxy.net, api.login.microsoftonline.com, api.passwordreset.microsoftonline.com, autologon.microsoftazuread-sso.com, becws.microsoftonline.com, clientconfig.microsoftonline-p.net, companymanager.microsoftonline.com, device.login.microsoftonline.com, hip.microsoftonline-p.net, hipservice.microsoftonline.com, login.microsoft.com, login.microsoftonline.com, login.microsoftonline-p.com, login.windows.net, logincert.microsoftonline.com, loginex.microsoftonline.com, login-us.microsoftonline.com, nexus.microsoftonline-p.com, passwordreset.microsoftonline.com, provisioningapi.microsoftonline.com, stamp2.login.microsoftonline.com
13.67.50.224/29, 13.71.201.64/26, 13.75.48.16/29, 13.75.80.16/29, 13.106.4.128/25, 13.106.56.0/25, 20.190.128.0/18, 23.100.16.168/29, 23.100.32.136/29, 23.100.64.24/29, 23.100.72.32/29, 23.100.80.64/29, 23.100.88.32/29, 23.100.101.112/28, 23.100.104.16/28, 23.100.112.64/29, 23.100.120.64/29, 23.101.5.104/29, 23.101.144.136/29, 23.101.165.168/29, 23.101.181.128/29, 23.101.210.24/29, 23.101.222.240/28, 23.101.224.16/29, 23.101.226.16/28, 40.112.64.16/28, 40.113.192.16/29, 40.114.120.16/29, 40.115.152.16/28, 40.126.0.0/18, 40.127.67.24/29, 52.172.144.16/28, 65.52.1.16/29, 65.52.193.136/29, 65.54.170.128/25, 70.37.154.128/25, 104.40.240.48/28, 104.41.13.120/29, 104.41.216.16/28, 104.42.72.16/29, 104.43.208.16/29, 104.43.240.16/29, 104.44.218.128/25, 104.44.254.128/25, 104.44.255.0/25, 104.45.0.16/28, 104.45.208.104/29, 104.46.112.8/29, 104.46.224.64/28, 104.209.144.16/29, 104.210.48.8/29, 104.210.83.160/29, 104.210.208.16/29, 104.211.16.16/29, 104.211.48.16/29, 104.211.88.16/28, 104.211.216.32/27, 104.215.96.24/29, 104.215.144.64/29, 104.215.184.16/29, 132.245.165.0/25, 134.170.67.0/25, 134.170.116.0/25, 134.170.165.0/25, 134.170.172.128/25, 157.55.45.128/25, 157.55.59.128/25, 157.55.130.0/25, 157.55.145.0/25, 157.55.155.0/25, 157.55.227.192/26, 157.56.53.128/25, 157.56.55.0/25, 157.56.58.0/25, 157.56.151.0/25, 191.232.2.128/25, 191.237.248.32/29, 191.237.252.192/28, 2001:df0:d9:200::/64, 2603:1020:201::4a0/128, 2603:1020:201::4a1/128, 2603:1020:201::4a2/128, 2603:1020:201::4a3/128, 2603:1020:201::4a4/128, 2603:1020:201::4a5/128, 2603:1020:201::4a6/128, 2603:1020:201::4a7/128, 2603:1020:201::4aa/128, 2603:1020:201::581/128, 2603:1020:201::583/128, 2603:1020:201::584/128, 2603:1020:201::586/128, 2603:1020:201::588/128, 2603:1020:201::589/128, 2603:1020:201::58a/128, 2603:1020:201::58b/128, 2603:1020:201::58c/128, 2603:1020:201:2::/64, 2603:1020:201:3::/64, 2603:1030:7::2c/128, 2603:1030:7::2d/128, 2603:1030:7::2f/128, 2603:1030:7::30/128, 2603:1030:7::34/128, 2603:1030:7::3f/128, 2603:1030:7::40/128, 2603:1030:7::41/128, 2603:1047:100::/64, 2a01:111:2005:6::/64, 2a01:111:200a:a::/64, 2a01:111:2035:8::/64, 2a01:111:f100:1002::4134:d89f/128, 2a01:111:f100:1002::4134:d944/128, 2a01:111:f100:1002::4134:d95f/128, 2a01:111:f100:1002::4134:da55/128, 2a01:111:f100:1002::4134:da5c/128, 2a01:111:f100:1002::4134:da81/128, 2a01:111:f100:1002::4134:dab5/128, 2a01:111:f100:1002::4134:daee/128, 2a01:111:f100:1002::4134:db2a/128, 2a01:111:f100:1002::4134:db60/128, 2a01:111:f100:1002::4134:db89/128, 2a01:111:f100:1002::4134:dbe7/128, 2a01:111:f100:1002::4134:dc2d/128, 2a01:111:f100:1002::4134:dc2e/128, 2a01:111:f100:1002::4134:dc43/128, 2a01:111:f100:1002::4134:dc6e/128, 2a01:111:f100:1002::4134:dd7a/128, 2a01:111:f100:1002::4134:ddcb/128, 2a01:111:f100:2002::8975:2c3b/128, 2a01:111:f100:2002::8975:2c3f/128, 2a01:111:f100:2002::8975:2c6d/128, 2a01:111:f100:2002::8975:2cdd/128, 2a01:111:f100:2002::8975:2cea/128, 2a01:111:f100:2002::8975:2ced/128, 2a01:111:f100:2002::8975:2d08/128, 2a01:111:f100:2002::8975:2d19/128, 2a01:111:f100:2002::8975:2d25/128, 2a01:111:f100:2002::8975:2d4d/128, 2a01:111:f100:2002::8975:2d6a/128, 2a01:111:f100:2002::8975:2d97/128, 2a01:111:f100:2002::8975:2daa/128, 2a01:111:f100:2002::8975:2dc7/128, 2a01:111:f100:3002::8987:30a0/128, 2a01:111:f100:3002::8987:3103/128, 2a01:111:f100:3002::8987:3278/128, 2a01:111:f100:3002::8987:328f/128, 2a01:111:f100:3002::8987:3299/128, 2a01:111:f100:3002::8987:3344/128, 2a01:111:f100:3002::8987:3396/128, 2a01:111:f100:3002::8987:3398/128, 2a01:111:f100:3002::8987:33b3/128, 2a01:111:f100:3002::8987:33ec/128, 2a01:111:f100:3002::8987:34eb/128, 2a01:111:f100:3002::8987:34f8/128, 2a01:111:f100:3002::8987:353b/128, 2a01:111:f100:3002::8987:35b5/128, 2a01:111:f100:4001::4625:a3ee/128, 2a01:111:f100:4001::4625:a4b6/128, 2a01:111:f100:4001::4625:a4ba/128, 2a01:111:f100:4001::4625:a4c7/128, 2a01:111:f100:4001::4625:a4cf/128, 2a01:111:f100:4001::4625:a4ee/128, 2a01:111:f100:4001::4625:a56f/128, 2a01:111:f100:4001::4625:a589/128, 2a01:111:f100:7000::6fdd:6a44/128, 2a01:111:f100:7000::6fdd:6b96/128, 2a01:111:f100:7000::6fdd:6bb6/128, 2a01:111:f100:7000::6fdd:6c82/128, 2a01:111:f100:7000::6fdd:6d1c/128, 2a01:111:f100:7000::6fdd:6d23/128, 2a01:111:f100:7000::6fdd:6d50/128, 2a01:111:f100:7000::6fdd:6d88/128, 2a01:111:f100:a004::bfeb:8a92/128, 2a01:111:f100:a004::bfeb:8ab0/128, 2a01:111:f100:a004::bfeb:8b12/128, 2a01:111:f100:a004::bfeb:8b15/128, 2a01:111:f100:a004::bfeb:8b3c/128, 2a01:111:f100:a004::bfeb:8b47/128, 2a01:111:f100:a004::bfeb:8b6c/128, 2a01:111:f100:a004::bfeb:8beb/128, 2a01:111:f100:a004::bfeb:8c55/128, 2a01:111:f100:a004::bfeb:8c6d/128, 2a01:111:f100:a004::bfeb:8c6f/128, 2a01:111:f100:a004::bfeb:8c88/128, 2a01:111:f100:a004::bfeb:8cc0/128, 2a01:111:f100:a004::bfeb:8cdc/128, 2a01:111:f100:a004::bfeb:8d83/128, 2a01:111:f100:a004::bfeb:8d96/128, 2a01:111:f100:a004::bfeb:8daa/128, 2a01:111:f102:8001::1761:4929/128, 2a01:111:f102:8001::1761:4948/128, 2a01:111:f102:8001::1761:4b83/128, 2a01:111:f102:8001::1761:4f0d/128, 2a01:111:f102:8001::1761:4f32/128, 2a01:111:f102:8001::1761:4f64/128, 2a01:111:f102:8001::1761:4f8d/128, 2a01:111:f102:8001::1761:4fc0/128, 2a01:111:f400::/48, 2a01:111:f406:1::/64, 2a01:111:f406:2::/64, 2a01:111:f406:c00::/64, 2a01:111:f406:1004::/64, 2a01:111:f406:1805::/64, 2a01:111:f406:3404::/64, 2a01:111:f406:8000::/64, 2a01:111:f406:8801::/64, 2a01:111:f406:a003::/64
TCP: 443, 80
57 Allow
Optional
Notes: Azure AD Connect and DirSync
Yes adminwebservice.microsoftonline.com, login.windows.net, provisioningapi.microsoftonline.com
13.67.50.224/29, 13.71.201.64/26, 13.75.48.16/29, 13.75.80.16/29, 13.106.4.128/25, 13.106.56.0/25, 20.190.128.0/18, 23.100.16.168/29, 23.100.32.136/29, 23.100.64.24/29, 23.100.72.32/29, 23.100.80.64/29, 23.100.88.32/29, 23.100.101.112/28, 23.100.104.16/28, 23.100.112.64/29, 23.100.120.64/29, 23.101.5.104/29, 23.101.144.136/29, 23.101.165.168/29, 23.101.181.128/29, 23.101.210.24/29, 23.101.222.240/28, 23.101.224.16/29, 23.101.226.16/28, 40.112.64.16/28, 40.113.192.16/29, 40.114.120.16/29, 40.115.152.16/28, 40.126.0.0/18, 40.127.67.24/29, 52.172.144.16/28, 65.52.1.16/29, 65.52.193.136/29, 65.54.170.128/25, 70.37.154.128/25, 104.40.240.48/28, 104.41.13.120/29, 104.41.216.16/28, 104.42.72.16/29, 104.43.208.16/29, 104.43.240.16/29, 104.44.218.128/25, 104.44.254.128/25, 104.44.255.0/25, 104.45.0.16/28, 104.45.208.104/29, 104.46.112.8/29, 104.46.224.64/28, 104.209.144.16/29, 104.210.48.8/29, 104.210.83.160/29, 104.210.208.16/29, 104.211.16.16/29, 104.211.48.16/29, 104.211.88.16/28, 104.211.216.32/27, 104.215.96.24/29, 104.215.144.64/29, 104.215.184.16/29, 132.245.165.0/25, 134.170.67.0/25, 134.170.116.0/25, 134.170.165.0/25, 134.170.172.128/25, 157.55.45.128/25, 157.55.59.128/25, 157.55.130.0/25, 157.55.145.0/25, 157.55.155.0/25, 157.55.227.192/26, 157.56.53.128/25, 157.56.55.0/25, 157.56.58.0/25, 157.56.151.0/25, 191.232.2.128/25, 191.237.248.32/29, 191.237.252.192/28, 2001:df0:d9:200::/64, 2603:1020:201::4a0/128, 2603:1020:201::4a1/128, 2603:1020:201::4a2/128, 2603:1020:201::4a3/128, 2603:1020:201::4a4/128, 2603:1020:201::4a5/128, 2603:1020:201::4a6/128, 2603:1020:201::4a7/128, 2603:1020:201::4aa/128, 2603:1020:201::581/128, 2603:1020:201::583/128, 2603:1020:201::584/128, 2603:1020:201::586/128, 2603:1020:201::588/128, 2603:1020:201::589/128, 2603:1020:201::58a/128, 2603:1020:201::58b/128, 2603:1020:201::58c/128, 2603:1020:201:2::/64, 2603:1020:201:3::/64, 2603:1030:7::2c/128, 2603:1030:7::2d/128, 2603:1030:7::2f/128, 2603:1030:7::30/128, 2603:1030:7::34/128, 2603:1030:7::3f/128, 2603:1030:7::40/128, 2603:1030:7::41/128, 2603:1047:100::/64, 2a01:111:2005:6::/64, 2a01:111:200a:a::/64, 2a01:111:2035:8::/64, 2a01:111:f100:1002::4134:d89f/128, 2a01:111:f100:1002::4134:d944/128, 2a01:111:f100:1002::4134:d95f/128, 2a01:111:f100:1002::4134:da55/128, 2a01:111:f100:1002::4134:da5c/128, 2a01:111:f100:1002::4134:da81/128, 2a01:111:f100:1002::4134:dab5/128, 2a01:111:f100:1002::4134:daee/128, 2a01:111:f100:1002::4134:db2a/128, 2a01:111:f100:1002::4134:db60/128, 2a01:111:f100:1002::4134:db89/128, 2a01:111:f100:1002::4134:dbe7/128, 2a01:111:f100:1002::4134:dc2d/128, 2a01:111:f100:1002::4134:dc2e/128, 2a01:111:f100:1002::4134:dc43/128, 2a01:111:f100:1002::4134:dc6e/128, 2a01:111:f100:1002::4134:dd7a/128, 2a01:111:f100:1002::4134:ddcb/128, 2a01:111:f100:2002::8975:2c3b/128, 2a01:111:f100:2002::8975:2c3f/128, 2a01:111:f100:2002::8975:2c6d/128, 2a01:111:f100:2002::8975:2cdd/128, 2a01:111:f100:2002::8975:2cea/128, 2a01:111:f100:2002::8975:2ced/128, 2a01:111:f100:2002::8975:2d08/128, 2a01:111:f100:2002::8975:2d19/128, 2a01:111:f100:2002::8975:2d25/128, 2a01:111:f100:2002::8975:2d4d/128, 2a01:111:f100:2002::8975:2d6a/128, 2a01:111:f100:2002::8975:2d97/128, 2a01:111:f100:2002::8975:2daa/128, 2a01:111:f100:2002::8975:2dc7/128, 2a01:111:f100:3002::8987:30a0/128, 2a01:111:f100:3002::8987:3103/128, 2a01:111:f100:3002::8987:3278/128, 2a01:111:f100:3002::8987:328f/128, 2a01:111:f100:3002::8987:3299/128, 2a01:111:f100:3002::8987:3344/128, 2a01:111:f100:3002::8987:3396/128, 2a01:111:f100:3002::8987:3398/128, 2a01:111:f100:3002::8987:33b3/128, 2a01:111:f100:3002::8987:33ec/128, 2a01:111:f100:3002::8987:34eb/128, 2a01:111:f100:3002::8987:34f8/128, 2a01:111:f100:3002::8987:353b/128, 2a01:111:f100:3002::8987:35b5/128, 2a01:111:f100:4001::4625:a3ee/128, 2a01:111:f100:4001::4625:a4b6/128, 2a01:111:f100:4001::4625:a4ba/128, 2a01:111:f100:4001::4625:a4c7/128, 2a01:111:f100:4001::4625:a4cf/128, 2a01:111:f100:4001::4625:a4ee/128, 2a01:111:f100:4001::4625:a56f/128, 2a01:111:f100:4001::4625:a589/128, 2a01:111:f100:7000::6fdd:6a44/128, 2a01:111:f100:7000::6fdd:6b96/128, 2a01:111:f100:7000::6fdd:6bb6/128, 2a01:111:f100:7000::6fdd:6c82/128, 2a01:111:f100:7000::6fdd:6d1c/128, 2a01:111:f100:7000::6fdd:6d23/128, 2a01:111:f100:7000::6fdd:6d50/128, 2a01:111:f100:7000::6fdd:6d88/128, 2a01:111:f100:a004::bfeb:8a92/128, 2a01:111:f100:a004::bfeb:8ab0/128, 2a01:111:f100:a004::bfeb:8b12/128, 2a01:111:f100:a004::bfeb:8b15/128, 2a01:111:f100:a004::bfeb:8b3c/128, 2a01:111:f100:a004::bfeb:8b47/128, 2a01:111:f100:a004::bfeb:8b6c/128, 2a01:111:f100:a004::bfeb:8beb/128, 2a01:111:f100:a004::bfeb:8c55/128, 2a01:111:f100:a004::bfeb:8c6d/128, 2a01:111:f100:a004::bfeb:8c6f/128, 2a01:111:f100:a004::bfeb:8c88/128, 2a01:111:f100:a004::bfeb:8cc0/128, 2a01:111:f100:a004::bfeb:8cdc/128, 2a01:111:f100:a004::bfeb:8d83/128, 2a01:111:f100:a004::bfeb:8d96/128, 2a01:111:f100:a004::bfeb:8daa/128, 2a01:111:f102:8001::1761:4929/128, 2a01:111:f102:8001::1761:4948/128, 2a01:111:f102:8001::1761:4b83/128, 2a01:111:f102:8001::1761:4f0d/128, 2a01:111:f102:8001::1761:4f32/128, 2a01:111:f102:8001::1761:4f64/128, 2a01:111:f102:8001::1761:4f8d/128, 2a01:111:f102:8001::1761:4fc0/128, 2a01:111:f400::/48, 2a01:111:f406:1::/64, 2a01:111:f406:2::/64, 2a01:111:f406:c00::/64, 2a01:111:f406:1004::/64, 2a01:111:f406:1805::/64, 2a01:111:f406:3404::/64, 2a01:111:f406:8000::/64, 2a01:111:f406:8801::/64, 2a01:111:f406:a003::/64
TCP: 443
58 Default
Required
No accounts.accesscontrol.windows.net, secure.aadcdn.microsoftonline-p.com TCP: 443
59 Default
Optional
Notes: Authentication and identity: Legacy/temporary FQDNs (including CDNs)
No *.microsoftonline.com, *.microsoftonline-p.com, *.microsoftonline-p.net, *.msecnd.net, *.windows.net TCP: 443
60 Default
Optional
Notes: Azure AD Connect Health (including CDNs)
No *.adhybridhealth.azure.com, *.blob.core.windows.net, *.queue.core.windows.net, *.servicebus.windows.net, *.table.core.windows.net, management.azure.com, policykeyservice.dc.ad.msft.net, secure.aadcdn.microsoftonline-p.com TCP: 443
61 Default
Optional
Notes: Azure AD Connect and DirSync
No *.microsoftonline.com, mscrl.microsoft.com, secure.aadcdn.microsoftonline-p.com TCP: 443, 80
62 Default
Optional
Notes: Authentication and identity: Multi-factor authentication (MFA)
No *.phonefactor.net, account.activedirectory.windowsazure.com, secure.aadcdn.microsoftonline-p.com
70.37.154.128/25
TCP: 443
63 Default
Required
No graph.microsoft.com TCP: 443, 80
64 Allow
Required
Yes *.manage.office.com, *.protection.office.com, manage.office.com, protection.office.com
13.71.151.88/32, 13.76.138.63/32, 13.78.120.69/32, 13.78.120.70/32, 13.78.120.99/32, 13.78.120.159/32, 13.80.22.71/32, 13.80.125.22/32, 13.84.178.101/32, 13.84.218.185/32, 13.84.219.100/32, 13.84.222.249/32, 13.87.36.128/32, 13.88.17.54/32, 13.91.91.243/32, 13.92.181.66/32, 13.92.236.241/32, 13.93.164.45/32, 13.95.29.177/32, 13.95.30.46/32, 13.107.6.156/31, 13.107.7.190/31, 13.107.9.156/31, 23.96.241.70/32, 23.96.251.50/32, 23.96.253.65/32, 23.97.78.94/32, 23.102.232.134/32, 40.69.185.117/32, 40.76.54.117/32, 40.81.156.153/32, 40.81.156.154/32, 40.81.156.155/32, 40.81.156.156/32, 40.83.120.174/32, 40.83.127.89/32, 40.83.185.155/32, 40.84.2.83/32, 40.84.4.93/32, 40.84.4.119/32, 40.84.145.72/32, 40.90.218.196/32, 40.90.218.197/32, 40.90.218.198/32, 40.90.218.203/32, 40.112.144.173/32, 40.112.145.113/32, 40.113.91.234/32, 40.117.229.133/32, 40.117.229.194/32, 40.124.8.53/32, 51.142.213.184/32, 52.163.93.38/32, 52.164.121.65/32, 52.164.124.124/32, 52.164.127.6/32, 52.168.128.89/32, 52.168.177.42/32, 52.174.56.180/32, 52.178.144.25/32, 52.178.146.67/32, 52.178.147.210/32, 52.183.75.62/32, 52.184.165.82/32, 52.187.78.144/32, 52.225.223.43/32, 52.233.242.192/32, 65.52.220.46/32, 65.55.239.168/32, 94.245.117.53/32, 104.40.178.127/32, 104.40.179.160/32, 104.40.211.46/32, 104.42.225.143/32, 104.42.230.91/32, 104.43.21.58/32, 104.214.107.57/32, 104.214.144.62/32, 104.214.146.199/32, 104.215.28.42/32, 157.55.145.0/25, 157.55.155.0/25, 157.55.227.192/26, 168.61.149.234/32, 168.62.104.83/32, 168.62.106.224/32, 168.63.92.133/32, 207.46.73.250/32, 207.46.140.244/32, 207.46.141.38/32, 207.46.216.54/32, 2a01:111:200a:a::/64, 2a01:111:2035:8::/64, 2a01:111:f406:1::/64, 2a01:111:f406:c00::/64, 2a01:111:f406:1004::/64, 2a01:111:f406:1805::/64, 2a01:111:f406:3404::/64, 2a01:111:f406:8000::/64, 2a01:111:f406:8801::/64, 2a01:111:f406:a003::/64
TCP: 443
65 Allow
Required
Yes *.eu.portal.cloudappsecurity.com, *.eu2.portal.cloudappsecurity.com, *.portal.cloudappsecurity.com, *.us.portal.cloudappsecurity.com, *.us2.portal.cloudappsecurity.com, *.us3.portal.cloudappsecurity.com, account.office.net, admin.microsoft.com, home.office.com, portal.office.com, www.office.com
13.71.151.88/32, 13.76.138.63/32, 13.78.120.69/32, 13.78.120.70/32, 13.78.120.99/32, 13.78.120.159/32, 13.80.22.71/32, 13.80.125.22/32, 13.84.178.101/32, 13.84.218.185/32, 13.84.219.100/32, 13.84.222.249/32, 13.87.36.128/32, 13.88.17.54/32, 13.91.91.243/32, 13.92.181.66/32, 13.92.236.241/32, 13.93.164.45/32, 13.95.29.177/32, 13.95.30.46/32, 13.107.6.156/31, 13.107.7.190/31, 13.107.9.156/31, 23.96.241.70/32, 23.96.251.50/32, 23.96.253.65/32, 23.97.78.94/32, 23.102.232.134/32, 40.69.185.117/32, 40.76.54.117/32, 40.81.156.153/32, 40.81.156.154/32, 40.81.156.155/32, 40.81.156.156/32, 40.83.120.174/32, 40.83.127.89/32, 40.83.185.155/32, 40.84.2.83/32, 40.84.4.93/32, 40.84.4.119/32, 40.84.145.72/32, 40.90.218.196/32, 40.90.218.197/32, 40.90.218.198/32, 40.90.218.203/32, 40.112.144.173/32, 40.112.145.113/32, 40.113.91.234/32, 40.117.229.133/32, 40.117.229.194/32, 40.124.8.53/32, 51.142.213.184/32, 52.163.93.38/32, 52.164.121.65/32, 52.164.124.124/32, 52.164.127.6/32, 52.168.128.89/32, 52.168.177.42/32, 52.174.56.180/32, 52.178.144.25/32, 52.178.146.67/32, 52.178.147.210/32, 52.183.75.62/32, 52.184.165.82/32, 52.187.78.144/32, 52.225.223.43/32, 52.233.242.192/32, 65.52.220.46/32, 65.55.239.168/32, 94.245.117.53/32, 104.40.178.127/32, 104.40.179.160/32, 104.40.211.46/32, 104.42.225.143/32, 104.42.230.91/32, 104.43.21.58/32, 104.214.107.57/32, 104.214.144.62/32, 104.214.146.199/32, 104.215.28.42/32, 157.55.145.0/25, 157.55.155.0/25, 157.55.227.192/26, 168.61.149.234/32, 168.62.104.83/32, 168.62.106.224/32, 168.63.92.133/32, 207.46.73.250/32, 207.46.140.244/32, 207.46.141.38/32, 207.46.216.54/32, 2a01:111:200a:a::/64, 2a01:111:2035:8::/64, 2a01:111:f406:1::/64, 2a01:111:f406:c00::/64, 2a01:111:f406:1004::/64, 2a01:111:f406:1805::/64, 2a01:111:f406:3404::/64, 2a01:111:f406:8000::/64, 2a01:111:f406:8801::/64, 2a01:111:f406:a003::/64
TCP: 443
66 Allow
Required
Yes agent.office.net, apc.delve.office.com, aus.delve.office.com, can.delve.office.com, delve.office.com, eur.delve.office.com, gbr.delve.office.com, ind.delve.office.com, jpn.delve.office.com, kor.delve.office.com, lam.delve.office.com, nam.delve.office.com, suite.office.net, webshell.suite.office.com
13.107.6.171/32, 13.107.140.6/32, 52.108.0.0/14, 52.238.106.116/32, 52.247.150.191/32, 2603:1010:2::cb/128, 2603:1010:200::c7/128, 2603:1020:200::682f:a0fd/128, 2603:1020:201:9::c6/128, 2603:1020:600::a1/128, 2603:1020:700::a2/128, 2603:1020:800:2::6/128, 2603:1020:900::8/128, 2603:1030:7::749/128, 2603:1030:800:5::bfee:ad3c/128, 2603:1030:f00::17/128, 2603:1030:1000::21a/128, 2603:1040:200::4f3/128, 2603:1040:401::762/128, 2603:1040:601::60f/128, 2603:1040:a01::1e/128, 2603:1040:c01::28/128, 2603:1040:e00:1::2f/128, 2603:1040:f00::1f/128, 2603:1050:1::cd/128, 2620:1ec:8fc::6/128, 2620:1ec:a92::171/128, 2a01:111:f100:2002::8975:2d79/128, 2a01:111:f100:2002::8975:2da8/128, 2a01:111:f100:7000::6fdd:6cd5/128, 2a01:111:f100:a004::bfeb:88cf/128
TCP: 443
67 Default
Optional
Notes: Security and Compliance Center eDiscovery export
No *.blob.core.windows.net TCP: 443
68 Default
Optional
Notes: Portal and shared: 3rd party office integration. (including CDNs)
No *.helpshift.com, *.localytics.com, analytics.localytics.com, api.localytics.com, connect.facebook.net, firstpartyapps.oaspapps.com, outlook.uservoice.com, prod.firstpartyapps.oaspapps.com.akadns.net, rink.hockeyapp.net, sdk.hockeyapp.net, telemetryservice.firstpartyapps.oaspapps.com, web.localytics.com, webanalytics.localytics.com, wus-firstpartyapps.oaspapps.com TCP: 443
69 Default
Required
Yes *.aria.microsoft.com, browser.pipe.aria.microsoft.com, mobile.pipe.aria.microsoft.com
13.70.151.216/32, 13.71.127.197/32, 13.72.245.115/32, 13.73.1.120/32, 13.75.126.169/32, 13.89.240.113/32, 13.107.3.0/24, 13.107.64.0/18, 51.140.143.149/32, 51.140.155.234/32, 51.140.203.190/32, 51.141.51.76/32, 52.112.0.0/14, 52.163.126.215/32, 52.170.21.67/32, 52.172.185.18/32, 52.178.94.2/32, 52.178.161.139/32, 52.228.25.96/32, 52.231.36.175/32, 52.231.207.185/32, 52.238.119.141/32, 52.242.23.189/32, 52.244.160.207/32, 104.215.11.144/32, 104.215.62.195/32, 138.91.237.237/32, 2603:1027::/48, 2603:1029:100::/48, 2603:1037::/48, 2603:1039:100::/48, 2603:1047::/48, 2603:1049:100::/48, 2603:1057::/48, 2620:1ec:6::/48, 2620:1ec:40::/42, 2620:1ec:42::/48, 2a01:111:2a:7::/64, 2a01:111:2a:8::/64, 2a01:111:2007:3::/64, 2a01:111:2007:4::/64, 2a01:111:200f:6::/64, 2a01:111:200f:7::/64, 2a01:111:200f:8::/64, 2a01:111:200f:9::/64, 2a01:111:200f:10::/64, 2a01:111:200f:11::/64, 2a01:111:2012:2::/64, 2a01:111:2012:3::/64, 2a01:111:2012:4::/64, 2a01:111:2012:5::/64, 2a01:111:2012:6::/64, 2a01:111:2012:7::/64, 2a01:111:202a:2::/64, 2a01:111:202a:3::/64, 2a01:111:202b:3::/64, 2a01:111:202b:4::/64, 2a01:111:202b:9::/64, 2a01:111:202b:a::/64, 2a01:111:202f::/48, 2a01:111:2034:2::/64, 2a01:111:2034:3::/64, 2a01:111:2035:6::/64, 2a01:111:2035:7::/64, 2a01:111:2036:2::/64, 2a01:111:2036:3::/64, 2a01:111:203e:1::/64, 2a01:111:203e:2::/64, 2a01:111:2040:1::/64, 2a01:111:2040:2::/64, 2a01:111:2046:4::/64, 2a01:111:2046:5::/64, 2a01:111:2047:1::/64, 2a01:111:2047:2::/64, 2a01:111:2048:1::/64, 2a01:111:2048:2::/64, 2a01:111:f402:5802::/64, 2a01:111:f402:5803::/64, 2a01:111:f402:5805::/64, 2a01:111:f404:c06::/64, 2a01:111:f404:c07::/64, 2a01:111:f404:c09::/64, 2a01:111:f404:c0a::/64, 2a01:111:f404:c0b::/64, 2a01:111:f404:c0c::/64, 2a01:111:f404:3400::/64, 2a01:111:f404:3401::/64, 2a01:111:f404:8002::/64, 2a01:111:f404:8003::/64, 2a01:111:f404:9400::/64, 2a01:111:f404:9401::/64, 2a01:111:f404:a000::/64, 2a01:111:f404:a001::/64, 2a01:111:f404:a800::/64, 2a01:111:f404:a801::/64, 2a01:111:f406:402::/64, 2a01:111:f406:403::/64, 2a01:111:f406:2400::/64, 2a01:111:f406:2401::/64, 2a01:111:f406:3405::/64, 2a01:111:f406:3406::/64
TCP: 443
70 Default
Required
No *.o365weve.com, amp.azure.net, appsforoffice.microsoft.com, assets.onestore.ms, auth.gfx.ms, az826701.vo.msecnd.net, c.microsoft.com, c1.microsoft.com, client.hip.live.com, contentstorage.osi.office.net, dgps.support.microsoft.com, docs.microsoft.com, groupsapi2-prod.outlookgroups.ms, groupsapi3-prod.outlookgroups.ms, groupsapi4-prod.outlookgroups.ms, groupsapi-prod.outlookgroups.ms, msdn.microsoft.com, platform.linkedin.com, prod.msocdn.com, products.office.com, r1.res.office365.com, r4.res.office365.com, res.delve.office.com, shellprod.msocdn.com, support.content.office.net, support.microsoft.com, support.office.com, technet.microsoft.com, templates.office.com, video.osi.office.net, videocontent.osi.office.net, videoplayercdn.osi.office.net TCP: 443
71 Default
Required
No *.office365.com
13.64.196.27/32, 13.64.198.19/32, 13.64.198.97/32, 13.64.199.41/32, 13.76.218.117/32, 13.76.219.191/32, 13.76.219.210/32, 13.91.61.249/32, 13.91.98.185/32, 13.93.216.68/32, 13.93.233.42/32, 23.97.61.137/32, 23.97.150.21/32, 23.97.209.97/32, 23.99.109.44/32, 23.99.109.64/32, 23.99.116.116/32, 23.99.121.207/32, 23.100.86.91/32, 23.101.14.229/32, 23.101.30.126/32, 23.102.4.253/32, 40.69.185.117/32, 40.76.1.176/32, 40.76.8.142/32, 40.76.12.4/32, 40.76.12.162/32, 40.113.8.255/32, 40.113.10.78/32, 40.113.11.93/32, 40.113.14.159/32, 40.117.144.240/32, 40.117.151.29/32, 40.118.211.172/32, 40.121.144.182/32, 40.122.168.103/32, 65.52.148.27/32, 65.52.160.218/32, 65.52.184.75/32, 65.52.196.64/32, 70.37.97.234/32, 94.245.108.85/32, 104.41.207.73/32, 104.42.231.28/32, 104.43.140.223/32, 104.45.11.195/32, 104.46.38.64/32, 104.46.50.125/32, 104.209.35.177/32, 104.215.146.200/32, 104.215.198.144/32, 111.221.111.196/32, 157.55.177.39/32, 157.55.184.223/32, 168.61.146.25/32, 168.61.149.17/32, 168.61.170.80/32, 168.61.172.71/32, 168.62.43.8/32, 168.63.18.79/32, 168.63.29.74/32, 168.63.100.61/32, 191.237.218.239/32, 207.46.134.255/32, 207.46.153.155/32, 2603:1020:0:7::4e1/128, 2603:1020:200::682f:a1d8/128, 2603:1020:201::3c4/128, 2603:1020:201::5f2/128, 2603:1020:201:a::2b1/128, 2603:1020:300::33/128, 2603:1020:400::26/128, 2603:1020:600::1d3/128, 2603:1020:700::1cb/128, 2603:1030:603::6a/128, 2603:1030:603::72/128, 2603:1030:603::3c9/128, 2603:1030:a02::118/128, 2603:1030:a02::367/128, 2603:1040:200::111/128, 2603:1040:200::325/128, 2603:1040:400::5d/128, 2603:1040:400::5e/128, 2603:1040:400::7b/128, 2603:1040:400::2f4/128, 2603:1040:401::c/128, 2603:1040:401::57/128, 2603:1040:601::2f/128, 2603:1040:601::4e/128, 2603:1040:601::1e7/128, 2603:1040:601::36c/128, 2801:80:1d0:1c00::/64, 2a01:111:2003::/48, 2a01:111:202c::/48, 2a01:111:202d::/48, 2a01:111:202e::/48, 2a01:111:202e::156/128, 2a01:111:202e::190/128, 2a01:111:202e::191/128, 2a01:111:f100:1002::4134:c0cb/128, 2a01:111:f100:1002::4134:c440/128, 2a01:111:f100:1002::4134:d93c/128, 2a01:111:f100:1002::4134:d9ee/128, 2a01:111:f100:1003::4134:36d5/128, 2a01:111:f100:1004::4134:f0c8/128, 2a01:111:f100:2002::8975:2c33/128, 2a01:111:f100:2002::8975:2cbc/128, 2a01:111:f100:2002::8975:2d11/128, 2a01:111:f100:2002::8975:2d43/128, 2a01:111:f100:2002::8975:2d92/128, 2a01:111:f100:2002::8975:2d98/128, 2a01:111:f100:3002::8987:320c/128, 2a01:111:f100:3002::8987:342a/128, 2a01:111:f100:3002::8987:3552/128, 2a01:111:f100:3002::8987:358e/128, 2a01:111:f100:4001::4625:609b/128, 2a01:111:f100:4001::4625:61ea/128, 2a01:111:f100:4001::4625:a065/128, 2a01:111:f100:4001::4625:a1e3/128, 2a01:111:f100:4001::4625:a248/128, 2a01:111:f100:4001::4625:a4b4/128, 2a01:111:f100:4002::9d37:c021/128, 2a01:111:f100:4002::9d37:c08f/128, 2a01:111:f100:6000::4134:a2af/128, 2a01:111:f100:6000::4134:b0ba/128, 2a01:111:f100:6000::4134:b84b/128, 2a01:111:f100:7000::6fdd:50bb/128, 2a01:111:f100:7000::6fdd:6095/128, 2a01:111:f100:7000::6fdd:682b/128, 2a01:111:f100:7000::6fdd:699d/128, 2a01:111:f100:7000::6fdd:6b20/128, 2a01:111:f100:7000::6fdd:6b76/128, 2a01:111:f100:7000::6fdd:6cac/128, 2a01:111:f100:7000::6fdd:6fc4/128, 2a01:111:f100:8000::4134:902e/128, 2a01:111:f100:8000::4134:941b/128, 2a01:111:f100:8001::d5c7:8077/128, 2a01:111:f100:9001::1761:91cb/128, 2a01:111:f100:a000::5ef5:581c/128, 2a01:111:f100:a000::5ef5:6c55/128, 2a01:111:f100:a001::a83f:5c85/128, 2a01:111:f100:a004::bfeb:8aa2/128, 2a01:111:f100:a004::bfeb:8c89/128, 2a01:111:f100:a004::bfeb:8cb8/128, 2a01:111:f100:a004::bfeb:8deb/128, 2a01:111:f102:8001::1761:4237/128, 2a01:111:f102:8001::1761:4daf/128, 2a01:111:f102:8001::1761:4f8a/128, 2a01:111:f406:1000::/64, 2a01:111:f406:1801::/64
TCP: 443
72 Default
Optional
Notes: Azure Rights Management (RMS)
No *.cloudapp.net TCP: 443
73 Default
Required
No *.aadrm.com, *.azurerms.com, ecn.dev.virtualearth.net TCP: 443
74 Default
Optional
Notes: Remote Connectivity Analyzer - Initiate connectivity tests.
No testconnectivity.microsoft.com
13.67.59.89/32, 40.69.150.142/32, 40.85.91.8/32, 104.211.54.99/32, 104.211.54.134/32
TCP: 443, 80
75 Default
Optional
Notes: Graph.windows.net, Office 365 Management Pack for Operations Manager, SecureScore, Azure AD Device Registration, Forms, StaffHub, Application Insights, captcha services
No *.blob.core.windows.net, *.hockeyapp.net, *.sharepointonline.com, *.staffhub.office.com, api.office.com, dc.applicationinsights.microsoft.com, dc.services.visualstudio.com, ea-000.forms.osi.office.net, enterpriseregistration.windows.net, eus2-000.forms.osi.office.net, forms.microsoft.com, forms.office.com, graph.windows.net, mem.gfx.ms, neu-000.forms.osi.office.net, office365servicehealthcommunications.cloudapp.net, securescore.office.com, signup.microsoft.com, staffhub.ms, staffhub.office.com, staffhub.uservoice.com, staffhubweb.azureedge.net, watson.telemetry.microsoft.com, weu-000.forms.osi.office.net, wu.client.hip.live.com, wus-000.forms.osi.office.net TCP: 443
76 Default
Optional
Notes: Microsoft Azure RemoteApp
No liverdcxstorage.blob.core.windowsazure.com, telemetry.remoteapp.windowsazure.com, vortex.data.microsoft.com, www.remoteapp.windowsazure.com TCP: 443
77 Allow
Required
Yes nexus.officeapps.live.com, nexusrules.officeapps.live.com, portal.microsoftonline.com
13.107.6.171/32, 13.107.140.6/32, 52.108.0.0/14, 52.238.106.116/32, 52.247.150.191/32, 2603:1010:2::cb/128, 2603:1010:200::c7/128, 2603:1020:200::682f:a0fd/128, 2603:1020:201:9::c6/128, 2603:1020:600::a1/128, 2603:1020:700::a2/128, 2603:1020:800:2::6/128, 2603:1020:900::8/128, 2603:1030:7::749/128, 2603:1030:800:5::bfee:ad3c/128, 2603:1030:f00::17/128, 2603:1030:1000::21a/128, 2603:1040:200::4f3/128, 2603:1040:401::762/128, 2603:1040:601::60f/128, 2603:1040:a01::1e/128, 2603:1040:c01::28/128, 2603:1040:e00:1::2f/128, 2603:1040:f00::1f/128, 2603:1050:1::cd/128, 2620:1ec:8fc::6/128, 2620:1ec:a92::171/128, 2a01:111:f100:2002::8975:2d79/128, 2a01:111:f100:2002::8975:2da8/128, 2a01:111:f100:7000::6fdd:6cd5/128, 2a01:111:f100:a004::bfeb:88cf/128
TCP: 443
78 Default
Optional
Notes: Some Office 365 features require endpoints within these domains (including CDNs). Many specific FQDNs within these wildcards have been published recently as we work to either remove or better explain our guidance relating to these wildcards.
No *.microsoft.com, *.msocdn.com, *.office.com, *.office.net, *.onmicrosoft.com TCP: 443, 80
79 Allow
Required
No o15.officeredir.microsoft.com, ocsredir.officeapps.live.com, officepreviewredir.microsoft.com, officeredir.microsoft.com, r.office.microsoft.com TCP: 443, 80
80 Allow
Required
No ea-000.ocws.officeapps.live.com, eus2-000.ocws.officeapps.live.com, ncus-000.ocws.officeapps.live.com, neu-000.ocws.officeapps.live.com, ocws.officeapps.live.com, scus-000.ocws.officeapps.live.com, weu-000.ocws.officeapps.live.com, wus-000.ocws.officeapps.live.com TCP: 443
81 Allow
Required
No cus-odc.officeapps.live.com, eus-odc.officeapps.live.com, ncus-odc.officeapps.live.com, neu-odc.officeapps.live.com, odc.officeapps.live.com, scus-odc.officeapps.live.com, sea-odc.officeapps.live.com, weu-odc.officeapps.live.com, wus-odc.officeapps.live.com TCP: 443, 80
82 Allow
Required
No cus-roaming.officeapps.live.com, ea-roaming.officeapps.live.com, eus2-roaming.officeapps.live.com, ncus-roaming.officeapps.live.com, neu-roaming.officeapps.live.com, scus-roaming.officeapps.live.com, sea-roaming.officeapps.live.com, weu-roaming.officeapps.live.com, wus-roaming.officeapps.live.com TCP: 443, 80
83 Default
Required
No activation.sls.microsoft.com TCP: 443
84 Default
Required
No crl.microsoft.com TCP: 443, 80
85 Default
Required
No ols.officeapps.live.com TCP: 443
86 Default
Required
No office15client.microsoft.com, officeclient.microsoft.com TCP: 443
87 Default
Required
No ocsa.officeapps.live.com TCP: 443, 80
88 Default
Required
No insertmedia.bing.office.net TCP: 443, 80
89 Default
Required
No go.microsoft.com, support.office.com TCP: 443, 80
90 Default
Required
No mrodevicemgr.officeapps.live.com TCP: 443
91 Default
Required
No ajax.aspnetcdn.com, cdn.odc.officeapps.live.com TCP: 443, 80
92 Default
Required
No officecdn.microsoft.com, officecdn.microsoft.com.edgekey.net, officecdn.microsoft.com.edgesuite.net TCP: 443, 80
93 Default
Optional
Notes: ProPlus: auxiliary URLs
No ajax.microsoft.com, c.bing.net, excelbingmap.firstpartyapps.oaspapps.com, excelcs.officeapps.live.com, ocos-office365-s2s.msedge.net, omextemplates.content.office.net, peoplegraph.firstpartyapps.oaspapps.com, pptcs.officeapps.live.com, sas.officeapps.live.com, store.office.com, templateservice.office.com, tse1.mm.bing.net, uci.officeapps.live.com, watson.microsoft.com, wikipedia.firstpartyapps.oaspapps.com, wordcs.officeapps.live.com, www.bing.com TCP: 443, 80
94 Default
Required
No 13.107.12.51/32, 104.40.234.17/32, 104.210.220.25/32, 191.236.108.93/32, 191.236.157.212/32 TCP: 443
95 Default
Optional
Notes: Outlook for Android and iOS
No *.acompli.net TCP: 443
96 Default
Optional
Notes: Outlook for Android and iOS: Authentication
No api.office.com, com.microsoft.office.outlook.dev, go.microsoft.com, graph.windows.net, login.windows-ppe.net, mam.manage.microsoft.com, sdfpilot.outlook.com, secure.aadcdn.microsoftonline-p.com, vortex.data.microsoft.com TCP: 443
97 Default
Optional
Notes: Outlook for Android and iOS: Consumer Outlook.com and OneDrive integration
No account.live.com, apis.live.net, auth.gfx.ms, login.live.com TCP: 443
98 Default
Optional
Notes: Outlook for Android and iOS: Google integration
No accounts.google.com, mail.google.com, www.googleapis.com TCP: 443
99 Default
Optional
Notes: Outlook for Android and iOS: Yahoo integration
No api.login.yahoo.com, social.yahooapis.com TCP: 443
100 Default
Optional
Notes: Outlook for Android and iOS: DropBox integration
No api.dropboxapi.com, www.dropbox.com TCP: 443
101 Default
Optional
Notes: Outlook for Android and iOS: Box integration
No app.box.com TCP: 443
102 Default
Optional
Notes: Outlook for Android and iOS: Facebook integration
No graph.facebook.com, m.facebook.com TCP: 443
103 Default
Optional
Notes: Outlook for Android and iOS: Evernote integration
No www.evernote.com TCP: 443
104 Default
Optional
Notes: Outlook for Android and iOS: WunderList integration
No a.wunderlist.com, www.wunderlist.com TCP: 443
105 Default
Optional
Notes: Outlook for Android and iOS: Outlook Privacy
No bit.ly, www.acompli.com TCP: 443
106 Default
Optional
Notes: Outlook for Android and iOS: User voice integration
No by.uservoice.com, outlook.uservoice.com TCP: 443
107 Default
Optional
Notes: Outlook for Android and iOS: Log upload integration
No api.diagnostics.office.com TCP: 443
108 Default
Optional
Notes: Outlook for Android and iOS: Support log upload integration
No acompli-android-logs.s3.amazonaws.com, s3-us-west-2.amazonaws.com TCP: 443
109 Default
Optional
Notes: Outlook for Android and iOS: Flurry log integration
No data.flurry.com TCP: 443
110 Default
Optional
Notes: Outlook for Android and iOS: Adjust integration
No app.adjust.com TCP: 443
111 Default
Optional
Notes: Outlook for Android and iOS: Hockey log integration
No rink.hockeyapp.net, sdk.hockeyapp.net TCP: 443
112 Default
Optional
Notes: Outlook for Android and iOS: Helpshift integration
No acompli.helpshift.com TCP: 443
113 Default
Optional
Notes: Outlook for Android and iOS: Play Store integration (Android only)
No play.google.com TCP: 443
114 Default
Optional
Notes: Office Mobile URLs
No *.appex.bing.com, *.appex-rf.msn.com, *.itunes.apple.com, appexsin.stb.s-msn.com, c.bing.com, c.live.com, cl2.apple.com, client.hip.live.com, d.docs.live.net, dc2.client.hip.live.com, directory.services.live.com, docs.live.net, en-us.appex-rf.msn.com, foodanddrink.services.appex.bing.com, m.webtrends.com, ms.tific.com, odcsm.officeapps.live.com, office.microsoft.com, officeimg.vo.msecnd.net, partnerservices.getmicrosoftkey.com, roaming.officeapps.live.com, sas.office.microsoft.com, signup.live.com, sqm.microsoft.com, view.atdmt.com, watson.telemetry.microsoft.com, weather.tile.appex.bing.com, wer.microsoft.com TCP: 443, 80
115 Default
Optional
Notes: Outlook for Android and iOS: Meetup integration
No api.meetup.com, secure.meetup.com TCP: 443
116 Default
Optional
Notes: Office for iPad URLs
No account.live.com, auth.gfx.ms, c.bing.com, c.live.com, cl2.apple.com, client.hip.live.com, dc2.client.hip.live.com, directory.services.live.com, docs.live.net, en-us.appex-rf.msn.com, foodanddrink.services.appex.bing.com, go.microsoft.com, login.live.com, m.webtrends.com, ms.tific.com, office.microsoft.com, officeimg.vo.msecnd.net, p100-sandbox.itunes.apple.com, partnerservices.getmicrosoftkey.com, roaming.officeapps.live.com, sas.office.microsoft.com, signup.live.com, sqm.microsoft.com, view.atdmt.com, watson.telemetry.microsoft.com, weather.tile.appex.bing.com, wer.microsoft.com TCP: 443, 80
117 Default
Optional
Notes: Yammer
No *.yammer.com, *.yammerusercontent.com
13.107.6.158/31, 13.107.9.158/31, 40.78.62.210/32, 134.170.148.0/22
TCP: 443
118 Default
Optional
Notes: Yammer CDN
No *.assets-yammer.com TCP: 443
119 Default
Optional
Notes: Planner
No cus-000.tasks.osi.office.net, ea-000.tasks.osi.office.net, eus-zzz.tasks.osi.office.net, neu-000.tasks.osi.office.net, sea-000.tasks.osi.office.net, tasks.office.com, weu-000.tasks.osi.office.net, wus-000.tasks.osi.office.net
13.107.6.160/32, 13.107.9.160/32
TCP: 443
120 Default
Optional
Notes: Planner CDNs
No ajax.aspnetcdn.com TCP: 443
121 Default
Optional
Notes: Planner: auxiliary URLs
No www.outlook.com TCP: 443, 80
122 Default
Optional
Notes: Sway CDNs
No eus-www.sway-cdn.com, eus-www.sway-extensions.com, wus-www.sway-cdn.com, wus-www.sway-extensions.com TCP: 443
123 Default
Optional
Notes: Sway website analytics
No www.google-analytics.com TCP: 443
124 Default
Optional
Notes: Sway
No eus-000.www.sway.com, eus-001.www.sway.com, eus-002.www.sway.com, eus-003.www.sway.com, eus-004.www.sway.com, eus-005.www.sway.com, eus-006.www.sway.com, eus-007.www.sway.com, eus-008.www.sway.com, eus-009.www.sway.com, eus-00a.www.sway.com, eus-00b.www.sway.com, eus-00c.www.sway.com, eus-00d.www.sway.com, eus-00e.www.sway.com, eus-www.sway.com, sway.com, wus-000.www.sway.com, wus-001.www.sway.com, wus-002.www.sway.com, wus-003.www.sway.com, wus-004.www.sway.com, wus-005.www.sway.com, wus-006.www.sway.com, wus-007.www.sway.com, wus-008.www.sway.com, wus-009.www.sway.com, wus-00a.www.sway.com, wus-00b.www.sway.com, wus-00c.www.sway.com, wus-00d.www.sway.com, wus-00e.www.sway.com, wus-www.sway.com, www.sway.com TCP: 443
125 Default
Optional
Notes: Office 365 Certificate Revocation List (Root URLs)
No *.entrust.net, *.geotrust.com, *.omniroot.com, *.public-trust.com, *.symcb.com, *.symcd.com, *.verisign.com, *.verisign.net, aia.entrust.net, apps.identrust.com, cacert.a.omniroot.com, cacert.omniroot.com, cacerts.digicert.com, cdp1.public-trust.com, cert.int-x3.letsencrypt.org, crl.entrust.net, crl.globalsign.com, crl.globalsign.net, crl.identrust.com, crl.microsoft.com, crl3.digicert.com, crl4.digicert.com, evintl-aia.verisign.com, evintl-crl.verisign.com, evintl-ocsp.verisign.com, evsecure-aia.verisign.com, evsecure-crl.verisign.com, evsecure-ocsp.verisign.com, isrg.trustid.ocsp.identrust.com, mscrl.microsoft.com, ocsp.digicert.com, ocsp.entrust.net, ocsp.globalsign.com, ocsp.int-x3.letsencrypt.org, ocsp.msocsp.com, ocsp.omniroot.com, ocsp2.globalsign.com, ocspx.digicert.com, s1.symcb.com, s2.symcb.com, sa.symcb.com, sd.symcb.com, secure.globalsign.com, sr.symcb.com, sr.symcd.com, su.symcb.com, su.symcd.com, vassg142.crl.omniroot.com, vassg142.ocsp.omniroot.com, www.digicert.com, www.microsoft.com TCP: 443, 80