This is a translation/adaptation of a very good post from my friend, Arnaud Alcabez (original post [in French] http://bposnews.wordpress.com/2011/05/11/office-365-liste-des-ports-tcpip/)
This shows the TCP/IP communication ports which has to be allowed on proxy which doesn’t allow generic characters (such as *.outlook.com)
TCP/IP communication ports required depends on the service you want to use/provide to your users; if you want to allow POP or IMAP access to Exchange mailboxes, you have to allow POP and/or IMAP communication ports:
- IMAP access
- TCP/143 – Default unencrypted connection
- TCP/465 – TLS encrypted connection
- TCP/993 – SSL encrypted connection
- POP access
- TCP/110 – Default unencrypted connection
- TCP/995 – SSL encrypted connection
Communication ports used by Office 365 table
Protocol / Port |
Usage |
TCP 443 |
|
TCP 25 | Mail routing |
TCP 587 | SMTP relay |
TCP 143/993 | IMAP client and simple migration tool |
TCP 995 | POP 3 |
TCP 80 and TCP 443 |
|
PSOM/TCP 443 | Lync Online / Remote access to conference for anonymous and federated users |
STUN/TCP 443 | Lync Online / Outbound video/audio/application sharing |
STUN/TCP 3478 RTC/UDP 50000-59999 STUN/UDP/RTP 49152-55000 STUN/UDP/RTP 55001-61000 STUN/UDP/RTP 61001-65535 |
Lync Online / Outbound audio/video |
Notes:
- SMTP relay with Exchange Online requires TCP 587 port open and TLS activated
- POP with Exchange Online requires TCP 995 and SSL activated
- Additional TCP ports information used by Lync available http://technet.microsoft.com/en-us/library/gg425882.aspx
You Internet Domain Name must be added in the Allow tab on your Edge server if you have one as well as sipfed.online.lync.com
The edge server must be reachable from Internet through TCP 5061 port with a valid certificate
Office 365 IP addresses
Office 365 Services |
IP Addresses |
Exchange Online and SharePoint Online |
94.245.117.128/25 |
FOPE Services (ForeFront Online Protection for Exchange) |
12.129.20.0/24 = 12.129.20.1 – 12.129.20.254 |
Lync Online |
207.46.5.0/24 |
Federation Services – login.microsoftonline.com (Microsoft Federation Gateway) |
207.46.150.128/25 |