Office 365 – TCP/IP communication ports for Office 365 communication

This is a translation/adaptation of a very good post from my friend, Arnaud Alcabez (original post [in French] http://bposnews.wordpress.com/2011/05/11/office-365-liste-des-ports-tcpip/)

This shows the TCP/IP communication ports which has to be allowed on proxy which doesn’t allow generic characters (such as *.outlook.com)

TCP/IP communication ports required depends on the service you want to use/provide to your users; if you want to allow POP or IMAP access to Exchange mailboxes, you have to allow POP and/or IMAP communication ports:

  • IMAP access
    • TCP/143 – Default unencrypted connection
    • TCP/465 – TLS encrypted connection
    • TCP/993 – SSL encrypted connection
  • POP access
    • TCP/110 – Default unencrypted connection
    • TCP/995 – SSL encrypted connection

 

Communication ports used by Office 365 table

Protocol / Port

Usage

TCP 443
  • Active Directory Federation Services – Server role and Proxy role
  • Microsoft Online Services portal
  • ‘My Company’ portal
  • Microsoft Outlook (2007 & 2010) remote access (Outlook Anywhere)
  • Entourage 2008 & Outlook 2011 for Mac
  • Outlook Web Access
  • SharePoint Online
  • Lync 2010 client
TCP 25 Mail routing
TCP 587 SMTP relay
TCP 143/993 IMAP client and simple migration tool
TCP 995 POP 3
TCP 80 and TCP 443
  • Microsoft Directory Synchronization (DirSync)
  • Simple Exchange migration
  • Simple IMAP migration
  • Exchange Management Console
  • PowerShell
PSOM/TCP 443 Lync Online / Remote access to conference for anonymous and federated users
STUN/TCP 443 Lync Online / Outbound video/audio/application sharing
STUN/TCP 3478
RTC/UDP 50000-59999
STUN/UDP/RTP 49152-55000
STUN/UDP/RTP 55001-61000
STUN/UDP/RTP 61001-65535
Lync Online / Outbound audio/video

 

Notes:

You Internet Domain Name must be added in the Allow tab on your Edge server if you have one as well as sipfed.online.lync.com

The edge server must be reachable from Internet through TCP 5061 port with a valid certificate

 

Office 365 IP addresses

Office 365 Services

IP Addresses

Exchange Online and SharePoint Online

94.245.117.128/25
65.55.126.0/25
65.55.181.128/25
65.55.174.0/25
65.55.113.64/26
65.54.62.0/25
65.55.94.0/25
65.55.39.128/25
213.199.174.0/25
213.199.177.0/26
213.199.177.0/26
207.46.203.128/26
207.46.198.0/25
207.46.4.128/25
207.46.58.128/25

FOPE Services (ForeFront Online Protection for Exchange)

12.129.20.0/24 = 12.129.20.1 – 12.129.20.254
63.241.222.0/24 = 63.241.222.1 – 63.241.222.254
65.55.88.0/24 = 65.55.88.1 – 65.55.88.254
94.245.120.64/26 = 94.245.120.65 – 94.245.120.126
207.46.51.64/26 = 207.46.51.65 – 207.46.51.126
207.46.163.0/24 = 207.46.163.1 – 207.46.163.254
213.199.154.0/24 = 213.199.154.1 – 213.199.154.254
213.199.180.128/26 = 213.199.180.129 – 213.199.180.190
216.32.180.0/24 = 216.32.180.1 – 216.32.180.254
216.32.181.0/24 = 216.32.181.1 – 216.32.181.254

Lync Online

207.46.5.0/24
207.46.7.128/27
65.55.127.0/24
65.55.121.128/27

Federation Services – login.microsoftonline.com (Microsoft Federation Gateway)

207.46.150.128/25

Leave a Comment

Your email address will not be published. Required fields are marked *


The reCAPTCHA verification period has expired. Please reload the page.