Export (0) Print
Expand All

Ports and protocols used by Office 365


Applies to: Office 365 Enterprise

Topic Last Modified: 2014-12-02

Summary: Lists the required ports and protocols that Office 365 uses, such as AD FS, mail routing, migration tools, and Lync Online.

Office 365 provides services to your organization over the Internet. These services may replace applications that previously ran within your organization’s intranet. The traffic that previously was only on your organization’s intranet now travels between your organization and the Internet.

Ensure that your organization’s Internet connection is configured correctly and that it can handle the increased network traffic. For more information about connectivity planning, see Plan for Internet bandwidth usage for Office 365.

The following compilation of ports is a resource for you to use when you configure firewall access during an Office 365 for enterprises deployment project. For notifications of changes to URLs and IP addresses, you can subscribe to this RSS feed.

Data center IP addresses are subject to change at any time. We make no commitment to notify customers of updated IP addresses or IP address ranges used by . We highly recommend that you allow access based on domain names and not by IP addresses.Office 365

Add a firewall entry for the Microsoft Online Services Sign-in Assistant, msoidsvc.exe.

The following table lists the protocol and port requirements for Office 365 for enterprises deployments.

Access to the most up-to-date Root Certificate Authorities is required for clients and on-premises services such as AD FS to securely connect to Office 365.
Port 80 is not mentioned specifically in the table; however, it is required to access


Protocol /port


TCP 443

AD FS (federation server role)

AD FS (proxy server role)

Office 365 portal

Office 365 My Company Portal

Outlook 2010 and Office Outlook 2007

Microsoft Entourage 2008 for Mac Exchange Web Services/Outlook for Mac 2011

Outlook Web App

SharePoint Online

Lync client (communication to Lync Online from on-premises Lync Server 2013)

TCP 25

Mail routing

TCP 587*

Simple Mail Transfer Protocol (SMTP) relay

TCP 143/993

Simple IMAP4 migration tool

TCP 995**


TCP 80 and 443*

Azure Active Directory Sync tool

Simple Exchange Migration Tool

Simple IMAP Migration Tool

Staged Exchange Migration Tool

Exchange Management Console

Exchange Management Shell

Office 365 ProPlus


Lync Online (outbound data sharing sessions)


Lync Online (outbound audio, video, and application sharing sessions)


Lync Online (outbound audio and video sessions)

TCP 5223

Lync mobile client push notifications

RTP/UDP 50000-50019 - Outbound

Lync (outbound audio sessions)

RTP/UDP 50020-50039 - Outbound

Lync (outbound video sessions)

TCP 50040-50059 - Outbound

Lync Application sharing and file transfer

* SMTP Relay with Exchange Online requires TCP port 587 and requires TLS. See Using SMTP Relay with Exchange Online.

You will need to provide the name of the SMTP server that relays email to the desired mailbox or mailboxes. See the TechNet article Set Up Outlook 2007 for IMAP or POP Access to Your E-Mail Account.

** POP3 access with Exchange Online requires TCP port 995 and a Secure Sockets Layer (SSL).

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
© 2014 Microsoft