.png)
Appendix A Key Deployment URLS, Ports, and IP Addresses
Applies to: Office 365 Deployment Guide for Enterprises
Topic Last Modified: 2013-02-04
This compilation of URLs, ports and IP addresses provides a resource for customers when configuring firewall access during an Office for 365 for enterprises deployment project. Contact the Office 365 support team for IP address ranges requirements, or refer to the Help topic IP addresses and URLs used by Office 365. You can also subscribe to this RSS feed to receive notice when updates are made to IP addresses and URLs.
 Note: |
|---|
| Datacenter IP addresses are subject to change at any time, and Microsoft makes no commitment for updating or notifying the IP address ranges used by Office 365. Therefore it is highly recommended that if needed, customers configure filtering based on domain names and not by IP address. |
General Service URLs
-
Office 365 Portal
https://portal.microsoftonline.com
-
PowerShell Connection URI for Office 365 PowerShell
https://ps.microsoftonline.com
-
Community Portal for Office 365 Customers
https://community.office365.com
-
Active Directory Federation Services End Point
https://nexus.microsoftonline-p.com
-
Directory Synchronization End Point
https://adminwebservice.microsoftonline.com
Exchange Online URLS
-
Exchange Online PowerShell Connection URI
https://ps.outlook.com
-
Outlook Web App address for a specific customer
https://outlook.com/<domain>.onmicrosoft.com
-
Outlook Web App address for a customer specific domain
https://www.outlook.com/<companyname>.com
SharePoint Online URLs
-
*.sharepoint.com
-
*.sharepointonline.com
-
Default Root SharePoint site for customer
<domain>.SharePoint.com
-
Site Settings for the Root Site Collection
<domain>.sharepoint.com/_layouts/settings.aspx
-
My Sites
<domain>-my.sharepoint.com
-
SharePoint Online Administration Center for customer
<domain>-Admin.SharePoint.com
Lync Online URLs
-
*.online.lync.com
-
*.infra.lync.com
-
*.lync.com
Additional URLs that require firewall access include:
-
*.microsoftonline.com
-
*.onmicrosoft.com
-
*.microsoftonlinesupport.net
-
*.microsoftonline-p.com
-
*.microsoftonline-p.net
-
*.microsoftonlineimages.com
-
*.microsoftonlineimages.net
-
*.live.com
-
admin.messaging.microsoft.com
-
* r3.res.outlook.com
Add a firewall entry for the Microsoft Online Services Sign-in Assistant, msoidsvc.exe.
To help ensure that network traffic from the Microsoft data centers is accepted, you may need to open ports in your on-premises firewall so network traffic originating from the Microsoft data center IP addresses is allowed to enter your on-premises organization.
Contact the Office 365 support team for IP address ranges requirements, or refer to the Help topic IP addresses and URLs used by Office 365.
Table 23 lists the protocol and port requirements for Office 365 for enterprises deployments.
Table 23. Protocol and Port Requirements
| Protocol /Port | Applications |
| TCP 443 | Active Directory Federation Services (federation server role) Active Directory Federation Services (proxy server role) Office 365 Portal My Company Portal Outlook 2010 and Outlook 2007 Microsoft Entourage 2008 EWS/Outlook 2011 for Mac Outlook Web App SharePoint Online Lync 2010 client (communication to Lync Online from on-premises Lync Server) |
| TCP 25 | Mail routing |
| TCP 587* | SMTP relay |
| TCP 143/993 | Simple IMAP4 migration tool |
| TCP 995** | POP3 |
| TCP 80 and 443* | Windows Azure Active Directory Sync tool Simple Exchange Migration Tool Simple IMAP Migration Tool Staged Exchange Migration Tool Exchange Management Console Exchange Management Shell |
| PSOM/TLS 443 | Lync Online (outbound data sharing sessions) |
| STUN/TCP 443 | Lync Online (outbound audio, video, application sharing sessions) |
| STUN/UDP 3478 | Lync Online (outbound audio and video sessions) |
| TCP 5223 | Lync mobile client push notifications |
| UDP 20000–45000 | Lync-to-phone outbound (Jahjah Voice) |
| RTC/UDP 50000-59999 | Lync Online (outbound audio and video sessions) |
*SMTP Relay with Exchange Online requires TCP port 587 and requires TLS. See Using SMTP Relay with Exchange Online.Note: you will need to provide the SMTP server which is specific to the mailbox used for relay. See the TechNet article Set Up Outlook 2007 for IMAP or POP Access to Your E-Mail Account.
** POP3 access with Exchange Online requires TCP port 995 ) and requires SSL. See Configure POP for Exchange Online
