Ports and protocols used by Office 365
Applies to: Office 365 Enterprise
Topic Last Modified: 2014-05-19
Summary: Lists the required ports and protocols that Office 365 uses, such as AD FS, mail routing, migration tools, and Lync Online.
Office 365 provides services to your organization over the Internet. These services may replace applications that previously ran within your organization’s intranet. The traffic that previously was only on your organization’s intranet now travels between your organization and the Internet.
Ensure that your organization’s Internet connection is configured correctly and that it can handle the increased network traffic. For more information about connectivity planning, see Plan for Internet bandwidth usage for Office 365.
The following compilation of ports is a resource for you to use when you configure firewall access during an Office 365 for enterprises deployment project. For notifications of changes to URLs and IP addresses, you can subscribe to this RSS feed.
Data center IP addresses are subject to change at any time. We make no commitment to notify customers of updated IP addresses or IP address ranges used by Office 365. We highly recommend that you allow access based on domain names and not by IP addresses.
Add a firewall entry for the Microsoft Online Services Sign-in Assistant, msoidsvc.exe.
The following table lists the protocol and port requirements for Office 365 for enterprises deployments.
AD FS (federation server role)
AD FS (proxy server role)
Office 365 portal
Office 365 My Company Portal
Outlook 2010 and Office Outlook 2007
Microsoft Entourage 2008 for Mac Exchange Web Services/Outlook for Mac 2011
Outlook Web App
Lync client (communication to Lync Online from on-premises Lync Server 2013)
Simple Mail Transfer Protocol (SMTP) relay
Simple IMAP4 migration tool
TCP 80 and 443*
Azure Active Directory Sync tool
Simple Exchange Migration Tool
Simple IMAP Migration Tool
Staged Exchange Migration Tool
Exchange Management Console
Exchange Management Shell
Lync Online (outbound data sharing sessions)
Lync Online (outbound audio, video, and application sharing sessions)
Lync Online (outbound audio and video sessions)
Lync mobile client push notifications
* SMTP Relay with Exchange Online requires TCP port 587 and requires TLS. See Using SMTP Relay with Exchange Online.
|You will need to provide the name of the SMTP server that relays email to the desired mailbox or mailboxes. See the TechNet article Set Up Outlook 2007 for IMAP or POP Access to Your E-Mail Account.|
** POP3 access with Exchange Online requires TCP port 995 and a Secure Sockets Layer (SSL). See Configure POP for Exchange Online.