Office 365 – TCP/IP communication ports for Office 365 communication

This is a translation/adaptation of a very good post from my friend, Arnaud Alcabez (original post [in French] http://bposnews.wordpress.com/2011/05/11/office-365-liste-des-ports-tcpip/)

This shows the TCP/IP communication ports which has to be allowed on proxy which doesn’t allow generic characters (such as *.outlook.com)

TCP/IP communication ports required depends on the service you want to use/provide to your users; if you want to allow POP or IMAP access to Exchange mailboxes, you have to allow POP and/or IMAP communication ports:

IMAP access

TCP/143 – Default unencrypted connection
TCP/465 – TLS encrypted connection
TCP/993 – SSL encrypted connection

POP access

TCP/110 – Default unencrypted connection
TCP/995 – SSL encrypted connection

Communication ports used by Office 365 table

Protocol / Port	Usage
TCP 443	Active Directory Federation Services – Server role and Proxy role Microsoft Online Services portal ‘My Company’ portal Microsoft Outlook (2007 & 2010) remote access (Outlook Anywhere) Entourage 2008 & Outlook 2011 for Mac Outlook Web Access SharePoint Online Lync 2010 client
TCP 25	Mail routing
TCP 587	SMTP relay
TCP 143/993	IMAP client and simple migration tool
TCP 995	POP 3
TCP 80 and TCP 443	Microsoft Directory Synchronization (DirSync) Simple Exchange migration Simple IMAP migration Exchange Management Console PowerShell
PSOM/TCP 443	Lync Online / Remote access to conference for anonymous and federated users
STUN/TCP 443	Lync Online / Outbound video/audio/application sharing
STUN/TCP 3478 RTC/UDP 50000-59999 STUN/UDP/RTP 49152-55000 STUN/UDP/RTP 55001-61000 STUN/UDP/RTP 61001-65535	Lync Online / Outbound audio/video

Notes:

SMTP relay with Exchange Online requires TCP 587 port open and TLS activated
POP with Exchange Online requires TCP 995 and SSL activated
Additional TCP ports information used by Lync available http://technet.microsoft.com/en-us/library/gg425882.aspx

You Internet Domain Name must be added in the Allow tab on your Edge server if you have one as well as sipfed.online.lync.com

The edge server must be reachable from Internet through TCP 5061 port with a valid certificate

Office 365 IP addresses

Office 365 Services	IP Addresses
Exchange Online and SharePoint Online	94.245.117.128/25 65.55.126.0/25 65.55.181.128/25 65.55.174.0/25 65.55.113.64/26 65.54.62.0/25 65.55.94.0/25 65.55.39.128/25 213.199.174.0/25 213.199.177.0/26 213.199.177.0/26 207.46.203.128/26 207.46.198.0/25 207.46.4.128/25 207.46.58.128/25
FOPE Services (ForeFront Online Protection for Exchange)	12.129.20.0/24 = 12.129.20.1 – 12.129.20.254 63.241.222.0/24 = 63.241.222.1 – 63.241.222.254 65.55.88.0/24 = 65.55.88.1 – 65.55.88.254 94.245.120.64/26 = 94.245.120.65 – 94.245.120.126 207.46.51.64/26 = 207.46.51.65 – 207.46.51.126 207.46.163.0/24 = 207.46.163.1 – 207.46.163.254 213.199.154.0/24 = 213.199.154.1 – 213.199.154.254 213.199.180.128/26 = 213.199.180.129 – 213.199.180.190 216.32.180.0/24 = 216.32.180.1 – 216.32.180.254 216.32.181.0/24 = 216.32.181.1 – 216.32.181.254
Lync Online	207.46.5.0/24 207.46.7.128/27 65.55.127.0/24 65.55.121.128/27
Federation Services – login.microsoftonline.com (Microsoft Federation Gateway)	207.46.150.128/25

Communication ports used by Office 365 table

Protocol / Port

Usage

Office 365 IP addresses

Office 365 Services

IP Addresses

Related Posts

Leave a Comment Cancel Reply