Export (0) Print
Expand All

Ports and protocols used by Office 365


Applies to: Office 365 Enterprise

Topic Last Modified: 2015-04-06

Summary: Lists the required ports and protocols that Office 365 uses, such as AD FS, mail routing, migration tools, and Lync Online.

This article is moving, please update your bookmarks to Office 365 URLs and IP address ranges

Office 365 provides services to your organization over the Internet. These services may replace applications that previously ran within your organization’s intranet. The traffic that previously was only on your organization’s intranet now travels between your organization and the Internet.

Ensure that your organization’s Internet connection is configured correctly and that it can handle the increased network traffic. For more information about connectivity planning, see Plan for Internet bandwidth usage for Office 365.

The following compilation of ports is a resource for you to use when you configure firewall access during an Office 365 for enterprises deployment project. For notifications of changes to URLs and IP addresses, you can subscribe to this RSS feed.

Data center IP addresses are subject to change at any time. We make no commitment to notify customers of updated IP addresses or IP address ranges used by Office 365. We highly recommend that you allow access based on domain names and not by IP addresses.

Add a firewall entry for the Microsoft Online Services Sign-in Assistant, msoidsvc.exe.

The following table lists the protocol and port requirements for Office 365 for enterprises deployments.

Access to the most up-to-date Root Certificate Authorities is required for clients and on-premises services such as AD FS to securely connect to Office 365.
Port 80 is not mentioned specifically in the table; however, it is required to access


Protocol /port


TCP 80 & 443

AD FS (federation server role)

AD FS (proxy server role)

Office 365 portal

Office 365 My Company Portal

Outlook 2013, Outlook 2010, and Office Outlook 2007

Microsoft Entourage 2008 for Mac Exchange Web Services/Outlook for Mac 2011

Outlook Web App

SharePoint Online

TCP 25

Mail routing

TCP 587*

Simple Mail Transfer Protocol (SMTP) relay

TCP 143/993

Simple IMAP4 migration tool

TCP 995**


TCP 80 and 443*

Azure Active Directory Sync tool

Simple Exchange Migration Tool

Simple IMAP Migration Tool

Staged Exchange Migration Tool

Exchange Management Console

Exchange Management Shell

Office 365 ProPlus

* SMTP Relay with Exchange Online requires TCP port 587 and requires TLS. See Using SMTP Relay with Exchange Online.

You will need to provide the name of the SMTP server that relays email to the desired mailbox or mailboxes. See the TechNet article Set Up Outlook 2007 for IMAP or POP Access to Your E-Mail Account.

** POP3 access with Exchange Online requires TCP port 995 and a Secure Sockets Layer (SSL).

Need more information on configuring your Lync Online network settings?



Source IP

Destination IP

Source Port

Destination Port

SIP signaling


Office 365 for enterprises

Ephemeral TCP ports

TCP 443

Persistent Shared Object Model (PSOM) connections web conferencing


Office 365 for enterprises

Ephemeral TCP ports

TCP 443

HTTPS downloads


Office 365 for enterprises

Ephemeral TCP ports

TCP 443



Office 365 for enterprises

TCP/UDP 50,000-50019

TCP 443, UDP 3478, TCP/UDP 50,000-59,999



Office 365 for enterprises

TCP/UDP 50,020-50039

TCP 443, UDP 3478, TCP/UDP 50,000-59,999

Desktop sharing


Office 365 for enterprises

TCP/UDP 50,040-50059

TCP 443, TCP 50,000-59,999

Lync Mobile push notifications for Lync Mobile 2010 on iOS devices. You don't need this for Android, Nokia Symbian or Windows Phone mobile devices.


Office 365 for enterprises

Ephemeral TCP ports

TCP 5223

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
© 2015 Microsoft