Export (0) Print
Expand All

Office 365 URLs and IP address ranges

 

Topic Last Modified: 2014-09-03

Summary: Lists the URLs and IP address ranges used by Office 365 and provides links to RSS feeds that help you stay up-to-date on the latest changes.

Subscribe via RSS RSS Icon to receive notice when updates are made to this topic.

Office 365 is designed to provide high speed and highly reliable access to the end users of all customers around the world. To accomplish this basic requirement of cloud services, Office 365 leverages regional datacenters, dynamic IP address ranges, and Content Delivery Networks (CDNs). This design is similar to other scalable enterprise cloud services and contributes to the stringent security, speed, and availability that enterprise customers require. This design does not lend itself to filtering at the firewall, yet we understand that some customers prefer to use filtering to access Office 365.

For those customers, we try to maintain the information below to help you manage filtering for the non-browser based clients. We can’t provide filtering information for CDNs, and we don’t differentiate regional services. If you would like to understand more about CDNs and regional datacenters, please see our further explanation of Reference: Content delivery networks and Reference: Client connectivity.

To be notified of future changes to the list below, you should Subscribe to the RSS feed. If you want to see just the changes, we keep those with date stamps in the Change notification for Office 365 URLs and IP address ranges article.

To successfully manage filtering, clients need to connect to the URLs/IP Addresses listed for each service. In addition to the Office 365 URLs/IP Addresses, each service is listed separately. It is important that clients can connect to the Office 365 URLs/IP Addresses as well as the URLs/IP Addresses for each licensed service (Such as Exchange Online, SharePoint Online, Lync Online, and Office 365 ProPlus). It is also important to include the URLs in the client’s Internet Explorer Trusted Sites Zone.

ImportantImportant:
URL filtering is a better solution than IP filtering.

To use Office 365, you must be able to reach these URLs/IP Addresses. If you have licensed additional services or purchased a suite license, you will also need to allow access to the Exchange Online, SharePoint Online, Lync Online, and Office 365 ProPlus services. These services will require both port 80 & port 443. This list of URLs and IP Addresses include both Office 365 portal and Azure Active Directory resources.

 

Office 365 URLs Office 365 IPv4 Addresses Office 365 IPv6 Addresses


*.aadrm.com
*.activedirectory.windowsazure.com
*.glbdns.microsoft.com
*.live.com
*.lync.com
*.microsoft.com
*.microsoftonline.com
*.microsoftonline-p.com
*.microsoftonline-p.net
*.microsoftonlineimages.com
*.microsoftonlinesupport.net¹
*.msecnd.net
*.msocdn.com
*.msn.com
*.msn.co.jp
*.msn.co.uk
*.onmicrosoft.com
*.office.com
*.office.net
*.office365.com
*.officeapps.live.com
*.outlook.com
*.phonefactor.net
*.Sharepoint.com
*.Sharepointonline.com

23.96.208.238
23.97.64.252
23.97.68.113
23.97.70.147
23.97.72.158
23.97.72.161
23.97.72.165
23.97.98.128
23.97.99.4
23.97.99.164
23.97.100.76
23.97.100.92
23.97.100.105
23.97.100.152
23.97.102.90
23.97.148.36
23.97.148.228
23.98.66.168
23.98.69.116
23.98.70.90
23.99.129.26
23.99.129.173
23.99.194.77
23.99.196.232
23.99.226.167
23.99.227.124
23.102.64.16
23.102.64.255
23.102.65.171
23.102.65.203
23.102.65.221
65.52.64.61
65.52.64.230
65.52.136.224
65.52.144.125
65.52.148.27
65.52.184.75
65.52.196.64
65.52.228.75
65.52.228.100
65.52.236.160
65.52.244.66
65.54.54.32/27
65.54.55.201
65.54.74.0/23
65.54.80.0/20
65.54.165.0/25
65.55.86.0/23
65.55.233.0/27
65.55.239.168
70.37.56.152
70.37.97.234
70.37.128.0/23
70.37.142.0/23
70.37.159.0/24
70.37.160.72
70.37.160.202
94.245.68.0/22
94.245.82.0/23
94.245.84.0/24
94.245.86.0/24
94.245.88.223
94.245.88.194
94.245.117.53
94.245.108.85
111.221.16.0/21
111.221.24.0/21
111.221.70.0/25
111.221.71.0/25
111.221.111.196
111.221.127.112/28
132.245.0.0/16
134.170.0.0/16
137.135.47.6
137.135.47.4
137.135.47.28
137.116.32.43
137.116.32.61
137.116.48.66
137.116.48.69
137.116.64.162
137.116.129.62/32
137.117.99.175
137.117.103.21
137.135.41.12/32
137.135.42.195/32
137.135.43.100/32
137.135.44.5/32
137.135.44.73/32
137.135.48.128/32
138.91.17.43
138.91.17.108
138.91.18.52
138.91.2.208
138.91.2.210
138.91.2.212
157.55.59.128/25
157.55.80.175
157.55.80.182
157.55.84.13/32
157.55.84.19/32
157.55.84.80/32
157.55.84.237/32
157.55.130.0/25
157.55.145.0/25
157.55.155.0/25
157.55.168.18
157.55.176.63
157.55.185.100
157.55.194.46
157.55.208.198
157.55.227.192/26
157.55.252.101
157.56.0.0/16
168.61.33.178/32
168.61.35.252/32
168.61.36.121
168.61.37.63/32
168.61.38.105
168.61.39.14/32
168.61.82.81/32
168.61.83.48/32
168.61.85.180/32
168.61.85.193/32
168.61.144.76
168.61.208.197
168.62.4.28
168.62.11.24
168.62.11.117
168.62.16.112
168.62.16.140
168.62.16.149
168.62.24.104
168.62.24.114
168.62.24.150
168.62.41.25
168.62.42.89
168.62.52.198
168.62.52.203
168.62.60.71
168.62.60.80
168.62.104.146
168.62.176.34
168.62.179.4
168.62.180.151
168.63.16.66/32
168.63.16.112/32
168.63.16.114/32
168.63.16.141
168.63.17.221/32
168.63.25.227
168.63.27.2
168.63.166.200
168.63.165.67
168.63.164.177
168.63.208.73/32
168.63.213.203/32
168.63.214.35/32
168.63.216.117/32
168.63.250.173/32
168.63.252.39/32
168.63.252.71/32
191.233.32.111
191.233.32.201
191.234.6.0/24
191.235.135.139
191.235.135.222
191.236.192.179
191.237.128.159
191.238.80.160
191.238.81.69
191.238.83.220
207.46.57.128/25
207.46.70.0/24
207.46.73.250
207.46.198.0/25
207.46.206.0/23
207.46.216.54
213.199.128.58
213.199.128.91
213.199.148.0/23
213.199.182.128/25

2a01:111:f406:1000::/64
2a01:111:f406:1801::/64

¹ Only outbound ports for 80 and 443.

In addition to the list of URLs/IP Addresses for Office 365, the following must be accessible for Exchange Online to work.

Exchange Online uses several specific 3rd party CDN FQDNs that should be added if IP or URL filtering is in place. These include: r1.res.office365.com, r3.res.outlook.com, r4.res.outlook.com, and prod.msocdn.com.

The Microsoft Federation Gateway is used with Exchange Online under the following circumstances:

  • Federated delegation   For more information, see Configure Federated Delegation in the Cloud.

  • Hybrid deployments   For more information, see Exchange Hybrid Deployment and Migration with Office 365.

 

Exchange Online IP Addresses The Microsoft Federation Gateway IP Addresses

65.54.62.0/25
65.55.39.128/25
65.55.78.128/25
65.55.94.0/25
65.55.113.64/26
65.55.126.0/25
65.55.174.0/25
65.55.181.128/25
70.37.151.128/25
94.245.117.128/25
111.221.23.128/25
111.221.66.0/25
111.221.69.128/25
111.221.112.0/21
132.245.0.0/16
191.234.192.0/19
157.55.9.128/25
157.55.11.0/25
157.55.47.0/24
157.55.49.0/24
157.55.61.0/24
157.55.157.128/25
157.55.224.128/25
157.55.225.0/25
157.56.0.0/16
191.234.140.0/22
191.234.224.0/22
207.46.4.128/25
207.46.58.128/25
207.46.198.0/25
207.46.203.128/26
213.199.174.0/25
213.199.177.0/26

207.46.150.128/25
207.46.164.0/24

In addition to the list of URLs/IP Addresses for Office 365, the following must be accessible for Lync Online to work.

 

Lync Online URLs Lync Online IPv4 Addresses

ev-secure.verisign.com
evsecure-ocsp.verisign.com
evsecure-aia.verisign.com
evsecure-crl.verisign.com
sa.symcb.com


65.54.54.128/25
65.55.121.128/27
65.55.127.0/24
111.221.17.128/27
111.221.22.64/26
111.221.76.96/27
111.221.76.128/25
111.221.77.0/26
134.170.0.0/25
157.55.40.128/25
157.55.46.0/27
157.55.46.64/26
157.55.104.96/27
157.55.229.128/27
157.55.232.128/26
157.55.238.0/25
207.46.5.0/24
207.46.7.128/27
207.46.57.0/25

In addition to the list of URLs/IP Addresses for Office 365, the following must be accessible for SharePoint Online to work.

 

SharePoint Online

SharePoint Online URLs and IP Address Ranges

In addition to the list of URLs/IP Addresses for Office 365, the following must be accessible for EOP to work.

 

Exchange Online Protection

Exchange Online Protection URLs and IP Addresses

This list of IPv4 IP Addresses is the current list used by the Office 365 remote analyzer tools.

 

Office 365 remote analyzer tools IP Addresses

65.55.150.61
65.55.150.158
65.55.150.160
134.170.52.122 
134.170.52.123 
134.170.52.124 
157.56.138.141
157.56.138.142
157.56.138.143
207.46.14.52
207.46.14.62
207.46.14.63

This list of URLs/IPv4 IP Addresses is the current list required to connect to all Yammer services.

 

Yammer URLs Yammer IPv4 Addresses

*.amazonaws.com
*.cloudfront.net
*.cotssl.net
*.edgekey.net
*.yammer.com
*.yammerusercontent.com
*.assets-yammer.com

204.152.18.0/23

This list of URLs/IPv4 IP Addresses is the current list required for Office 365 ProPlus.

 

Office 365 ProPlus URLs Office 365 ProPlus IPv4 Addresses

https://activation.sls.microsoft.com
http://crl.microsoft.com/pki/crl/products/MicrosoftProductSecureServer.crl
http://crl.microsoft.com/pki/crl/products/MicrosoftRootAuthority.crl
http://crl.microsoft.com/pki/crl/products/MicrosoftProductSecureCommunicationsPCA.crl
http://www.microsoft.com/pki/crl/products/MicrosoftProductSecureCommunicationsPCA.crl
https://odc.officeapps.live.com
https://ols.officeapps.live.com/olsc
http://officecdn.microsoft.com
go.microsoft.com
office15client.microsoft.com
sls.microsoft.com

65.52.98.231:443
157.55.44.71:443
157.55.160.109:443


In addition to the list of URLs/IP Addresses for Office 365, the following must be accessible for Office Online to work.

 

Office Online IPv4 Addresses Office Online IPv6 Addresses

134.170.27.64/26
134.170.48.0/26
134.170.65.64/26
134.170.128.192/26
134.170.170.64/26
191.232.2.64/26

2a01:111:f406:8800::/64
2a01:111:f406:400::/64
2a01:111:f406:9400::/64
2a01:111:f406:2402::/64
2a01:111:f406:a804::/64 

 
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft