Estimated reading time: 17 minutes
If you are using Office 365 in your corporate environment, then it’s a pretty safe bet that you are also using some sort of web security. We have come across a quite a few IT professionals that have migrated to Office 365 but have then run into problems with various connections to the web based platform.
We recently helped someone who was using Cisco web security in creating the white lists to enable all the functionality that they required.
Whilst researching into Office 365 proxy settings, we gathered a massive amount of information but then we found the Microsoft official list, just a few weeks too late! so we thought we would share this with our visitors, below is that list.
Exchange Online
| ID | Category | ER | Addresses | Ports |
|---|---|---|---|---|
| 1 | Optimize Required | Yes | outlook.office.com, outlook.office365.com13.107.6.152/31, 13.107.9.152/31, 13.107.18.10/31, 13.107.19.10/31, 13.107.128.0/22, 23.103.160.0/20, 23.103.224.0/19, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 111.221.112.0/21, 131.253.33.215/32, 132.245.0.0/16, 134.170.68.0/23, 150.171.32.0/22, 157.56.232.0/21, 157.56.240.0/20, 191.232.96.0/19, 191.234.140.0/22, 204.79.197.215/32, 206.191.224.0/19, 2603:1006::/40, 2603:1016::/40, 2603:1026::/40, 2603:1026:200::/39, 2603:1026:400::/39, 2603:1026:600::/44, 2603:1026:620::/44, 2603:1026:800::/44, 2603:1026:820::/45, 2603:1036::/39, 2603:1036:200::/40, 2603:1036:400::/40, 2603:1036:600::/40, 2603:1036:800::/38, 2603:1036:c00::/40, 2603:1046::/37, 2603:1046:900::/40, 2603:1056::/40, 2603:1056:400::/40, 2603:1056:600::/40, 2603:1096::/38, 2603:1096:400::/40, 2603:1096:600::/40, 2603:1096:a00::/39, 2603:1096:c00::/40, 2603:10a6:200::/40, 2603:10a6:400::/40, 2603:10a6:600::/40, 2603:10a6:800::/40, 2603:10d6:200::/40, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128, 2a01:111:f400::/48 | TCP:443, 80 |
| 2 | Allow Required | Yes | smtp.office365.com13.107.6.152/31, 13.107.9.152/31, 13.107.18.10/31, 13.107.19.10/31, 13.107.128.0/22, 23.103.160.0/20, 23.103.224.0/19, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 111.221.112.0/21, 131.253.33.215/32, 132.245.0.0/16, 134.170.68.0/23, 150.171.32.0/22, 157.56.232.0/21, 157.56.240.0/20, 191.232.96.0/19, 191.234.140.0/22, 204.79.197.215/32, 206.191.224.0/19, 2603:1006::/40, 2603:1016::/40, 2603:1026::/40, 2603:1026:200::/39, 2603:1026:400::/39, 2603:1026:600::/44, 2603:1026:620::/44, 2603:1026:800::/44, 2603:1026:820::/45, 2603:1036::/39, 2603:1036:200::/40, 2603:1036:400::/40, 2603:1036:600::/40, 2603:1036:800::/38, 2603:1036:c00::/40, 2603:1046::/37, 2603:1046:900::/40, 2603:1056::/40, 2603:1056:400::/40, 2603:1056:600::/40, 2603:1096::/38, 2603:1096:400::/40, 2603:1096:600::/40, 2603:1096:a00::/39, 2603:1096:c00::/40, 2603:10a6:200::/40, 2603:10a6:400::/40, 2603:10a6:600::/40, 2603:10a6:800::/40, 2603:10d6:200::/40, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128, 2a01:111:f400::/48 | TCP:587 |
| 3 | Default Required | No | r1.res.office365.com, r3.res.office365.com, r4.res.office365.com | TCP:443, 80 |
| 4 | Default Optional Notes: used to configure Exchange Hybrid, using the Exchange Hybrid Configuration Wizard. | No | domains.live.com | TCP:443, 80 |
| 5 | Allow Optional Notes:Exchange Online IMAP4 migration | Yes | *.outlook.office.com, outlook.office365.com13.107.6.152/31, 13.107.9.152/31, 13.107.18.10/31, 13.107.19.10/31, 13.107.128.0/22, 23.103.160.0/20, 23.103.224.0/19, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 111.221.112.0/21, 131.253.33.215/32, 132.245.0.0/16, 134.170.68.0/23, 150.171.32.0/22, 157.56.232.0/21, 157.56.240.0/20, 191.232.96.0/19, 191.234.140.0/22, 204.79.197.215/32, 206.191.224.0/19, 2603:1006::/40, 2603:1016::/40, 2603:1026::/40, 2603:1026:200::/39, 2603:1026:400::/39, 2603:1026:600::/44, 2603:1026:620::/44, 2603:1026:800::/44, 2603:1026:820::/45, 2603:1036::/39, 2603:1036:200::/40, 2603:1036:400::/40, 2603:1036:600::/40, 2603:1036:800::/38, 2603:1036:c00::/40, 2603:1046::/37, 2603:1046:900::/40, 2603:1056::/40, 2603:1056:400::/40, 2603:1056:600::/40, 2603:1096::/38, 2603:1096:400::/40, 2603:1096:600::/40, 2603:1096:a00::/39, 2603:1096:c00::/40, 2603:10a6:200::/40, 2603:10a6:400::/40, 2603:10a6:600::/40, 2603:10a6:800::/40, 2603:10d6:200::/40, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128, 2a01:111:f400::/48 | TCP:143, 993 |
| 6 | Allow Optional Notes:Exchange Online POP3 migration | Yes | *.outlook.office.com, outlook.office365.com13.107.6.152/31, 13.107.9.152/31, 13.107.18.10/31, 13.107.19.10/31, 13.107.128.0/22, 23.103.160.0/20, 23.103.224.0/19, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 111.221.112.0/21, 131.253.33.215/32, 132.245.0.0/16, 134.170.68.0/23, 150.171.32.0/22, 157.56.232.0/21, 157.56.240.0/20, 191.232.96.0/19, 191.234.140.0/22, 204.79.197.215/32, 206.191.224.0/19, 2603:1006::/40, 2603:1016::/40, 2603:1026::/40, 2603:1026:200::/39, 2603:1026:400::/39, 2603:1026:600::/44, 2603:1026:620::/44, 2603:1026:800::/44, 2603:1026:820::/45, 2603:1036::/39, 2603:1036:200::/40, 2603:1036:400::/40, 2603:1036:600::/40, 2603:1036:800::/38, 2603:1036:c00::/40, 2603:1046::/37, 2603:1046:900::/40, 2603:1056::/40, 2603:1056:400::/40, 2603:1056:600::/40, 2603:1096::/38, 2603:1096:400::/40, 2603:1096:600::/40, 2603:1096:a00::/39, 2603:1096:c00::/40, 2603:10a6:200::/40, 2603:10a6:400::/40, 2603:10a6:600::/40, 2603:10a6:800::/40, 2603:10d6:200::/40, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128, 2a01:111:f400::/48 | TCP:995 |
| 7 | Default Optional Notes: Used to configure Exchange Hybrid, using the Exchange Hybrid Configuration Wizard. | No | *.store.core.windows.net, asl.configure.office.com, mshrcstorageprod.blob.core.windows.net, tds.configure.office.com | TCP:443, 80 |
| 8 | Default Required | No | *.outlook.com, *.outlook.office.com, attachments.office.net | TCP:443, 80 |
| 9 | Allow Required | Yes | *.protection.outlook.com23.103.132.0/22, 23.103.136.0/21, 23.103.144.0/20, 23.103.198.0/23, 23.103.200.0/22, 40.92.0.0/14, 40.107.0.0/17, 52.100.0.0/14, 52.238.78.88/32, 65.55.88.0/24, 65.55.169.0/24, 94.245.120.64/26, 104.47.0.0/17, 157.55.234.0/24, 157.56.110.0/23, 157.56.112.0/24, 207.46.100.0/24, 207.46.163.0/24, 213.199.154.0/24, 213.199.180.128/26, 216.32.180.0/23, 2a01:111:f400:7c00::/54, 2a01:111:f403::/48 | TCP:443 |
| 10 | Allow Required | Yes | *.mail.protection.outlook.com23.103.132.0/22, 23.103.136.0/21, 23.103.144.0/20, 23.103.198.0/23, 23.103.200.0/22, 40.92.0.0/14, 40.107.0.0/17, 52.100.0.0/14, 65.55.88.0/24, 65.55.169.0/24, 94.245.120.64/26, 104.47.0.0/17, 157.55.234.0/24, 157.56.110.0/23, 157.56.112.0/24, 207.46.100.0/24, 207.46.163.0/24, 213.199.154.0/24, 213.199.180.128/26, 216.32.180.0/23, 2a01:111:f400:7c00::/54, 2a01:111:f403::/48 | TCP:25 |
SharePoint Online and OneDrive for Business
| ID | Category | ER | Addresses | Ports |
|---|---|---|---|---|
| 31 | Optimize Required | Yes | <tenant>.sharepoint.com, <tenant>-my.sharepoint.com13.107.6.150/31, 13.107.6.168/32, 13.107.9.150/31, 13.107.9.168/32, 13.107.136.0/22, 40.108.0.0/19, 40.108.128.0/17, 52.104.0.0/14, 104.146.0.0/19, 104.146.128.0/17, 134.170.200.0/21, 134.170.208.0/21, 150.171.40.0/22, 191.232.0.0/23, 191.235.0.0/20, 2603:1026:630::/44, 2603:1026:830::/44, 2603:1039:e01::/48, 2603:1039:1001::/48, 2620:1ec:8f8::/46, 2620:1ec:908::/46, 2620:1ec:a92::150/128, 2a01:111:f402::/48 | TCP:443, 80 |
| 32 | Default Optional Notes: OneDrive for Business: supportability, telemetry, APIs, and embedded email links | No | *.log.optimizely.com, click.email.microsoftonline.com, ssw.live.com, storage.live.com | TCP:443 |
| 33 | Default Optional Notes: SharePoint Hybrid Search – Endpoint to SearchContentService where the hybrid crawler feeds documents | No | *.search.production.apac.trafficmanager.net, *.search.production.emea.trafficmanager.net, *.search.production.us.trafficmanager.net | TCP:443 |
| 35 | Default Required | No | admin.onedrive.com, officeclient.microsoft.com, skydrive.wns.windows.com | TCP:443, 80 |
| 36 | Default Required | No | g.live.com, oneclient.sfx.ms | TCP:443, 80 |
| 37 | Default Required | No | *.sharepointonline.com, cdn.sharepointonline.com, privatecdn.sharepointonline.com, publiccdn.sharepointonline.com, spoprod-a.akamaihd.net, static.sharepointonline.com | TCP:443, 80 |
| 38 | Default Optional Notes: SharePoint Online: auxiliary URLs | No | prod.msocdn.com, watson.telemetry.microsoft.com | TCP:443, 80 |
| 39 | Default Required | No | *.svc.ms, <tenant>-files.sharepoint.com, <tenant>-myfiles.sharepoint.com | TCP:443, 80 |
Skype for Business Online and Microsoft Teams
| ID | Category | ER | Addresses | Ports |
|---|---|---|---|---|
| 11 | Optimize Required | Yes | 13.107.64.0/18, 52.112.0.0/14 | UDP:3478, 3479, 3480, 3481 |
| 12 | Allow Required | Yes | *.lync.com, *.teams.microsoft.com, teams.microsoft.com13.70.151.216/32, 13.71.127.197/32, 13.72.245.115/32, 13.73.1.120/32, 13.75.126.169/32, 13.89.240.113/32, 13.107.3.0/24, 13.107.64.0/18, 51.140.155.234/32, 51.140.203.190/32, 51.141.51.76/32, 52.112.0.0/14, 52.163.126.215/32, 52.170.21.67/32, 52.172.185.18/32, 52.178.94.2/32, 52.178.161.139/32, 52.228.25.96/32, 52.238.119.141/32, 52.242.23.189/32, 52.244.160.207/32, 104.215.11.144/32, 104.215.62.195/32, 138.91.237.237/32, 2603:1027::/48, 2603:1029:100::/48, 2603:1037::/48, 2603:1039:100::/48, 2603:1047::/48, 2603:1049:100::/48, 2603:1057::/48, 2620:1ec:6::/48, 2620:1ec:40::/42, 2620:1ec:42::/48, 2a01:111:203e:2::/64, 2a01:111:f404:9401::/64, 2a01:111:f404:a001::/64 | TCP:443, 80 |
| 13 | Allow Required | Yes | *.broadcast.skype.com, broadcast.skype.com13.70.151.216/32, 13.71.127.197/32, 13.72.245.115/32, 13.73.1.120/32, 13.75.126.169/32, 13.89.240.113/32, 13.107.3.0/24, 13.107.64.0/18, 51.140.155.234/32, 51.140.203.190/32, 51.141.51.76/32, 52.112.0.0/14, 52.163.126.215/32, 52.170.21.67/32, 52.172.185.18/32, 52.178.94.2/32, 52.178.161.139/32, 52.228.25.96/32, 52.238.119.141/32, 52.242.23.189/32, 52.244.160.207/32, 104.215.11.144/32, 104.215.62.195/32, 138.91.237.237/32, 2603:1027::/48, 2603:1029:100::/48, 2603:1037::/48, 2603:1039:100::/48, 2603:1047::/48, 2603:1049:100::/48, 2603:1057::/48, 2620:1ec:6::/48, 2620:1ec:40::/42, 2620:1ec:42::/48, 2a01:111:203e:2::/64, 2a01:111:f404:9401::/64, 2a01:111:f404:a001::/64 | TCP:443 |
| 14 | Default Required | No | quicktips.skypeforbusiness.com | TCP:443 |
| 15 | Default Required | No | *.sfbassets.com, *.urlp.sfbassets.com, skypemaprdsitus.trafficmanager.net | TCP:443, 80 |
| 16 | Default Required | No | *.keydelivery.mediaservices.windows.net, *.msecnd.net, *.streaming.mediaservices.windows.net, ajax.aspnetcdn.com, mlccdn.blob.core.windows.net | TCP:443 |
| 17 | Default Required | No | aka.ms, amp.azure.net | TCP:443 |
| 18 | Default Optional Notes:Federation with Skype and public IM connectivity: Contact picture retrieval | No | *.users.storage.live.com | TCP:443 |
| 19 | Default Optional Notes:Applies only to those who deploy the Conference Room Systems | No | *.adl.windows.com | TCP:443, 80 |
| 22 | Allow Optional Notes:Teams: Messaging interop with Skype for Business | Yes | *.skypeforbusiness.com13.70.151.216/32, 13.71.127.197/32, 13.72.245.115/32, 13.73.1.120/32, 13.75.126.169/32, 13.89.240.113/32, 13.107.3.0/24, 13.107.64.0/18, 51.140.155.234/32, 51.140.203.190/32, 51.141.51.76/32, 52.112.0.0/14, 52.163.126.215/32, 52.170.21.67/32, 52.172.185.18/32, 52.178.94.2/32, 52.178.161.139/32, 52.228.25.96/32, 52.238.119.141/32, 52.242.23.189/32, 52.244.160.207/32, 104.215.11.144/32, 104.215.62.195/32, 138.91.237.237/32, 2603:1027::/48, 2603:1029:100::/48, 2603:1037::/48, 2603:1039:100::/48, 2603:1047::/48, 2603:1049:100::/48, 2603:1057::/48, 2620:1ec:6::/48, 2620:1ec:40::/42, 2620:1ec:42::/48, 2a01:111:203e:2::/64, 2a01:111:f404:9401::/64, 2a01:111:f404:a001::/64 | TCP:443 |
| 25 | Default Required | No | scsinstrument-ss-us.trafficmanager.net, scsquery-ss-asia.trafficmanager.net, scsquery-ss-eu.trafficmanager.net, scsquery-ss-us.trafficmanager.net | TCP:443 |
| 26 | Default Required | No | *.msedge.net, compass-ssl.microsoft.com | TCP:443 |
| 27 | Default Required | No | *.mstea.ms, *.secure.skypeassets.com, mlccdnprod.azureedge.net, videoplayercdn.osi.office.net | TCP:443 |
| 29 | Default Optional Notes:Yammer third-party integration | No | *.tenor.com | TCP:443, 80 |
| 127 | Default Required | No | *.skype.com | TCP:443, 80 |
Microsoft 365 Common and Office Online
| ID | Category | ER | Addresses | Ports |
|---|---|---|---|---|
| 40 | Default Optional Notes: Office 365 Video CDNs | No | ajax.aspnetcdn.com, r3.res.outlook.com, spoprod-a.akamaihd.net | TCP:443 |
| 41 | Default Optional Notes: Microsoft Stream | No | *.api.microsoftstream.com, *.cloudapp.net, *.notification.api.microsoftstream.com, amp.azure.net, api.microsoftstream.com, az416426.vo.msecnd.net, s0.assets-yammer.com, vortex.data.microsoft.com, web.microsoftstream.com | TCP:443 |
| 42 | Default Optional Notes: Microsoft Stream CDN | No | amsglob0cdnstream11.azureedge.net, amsglob0cdnstream12.azureedge.net | TCP:443 |
| 43 | Default Optional Notes: Microsoft Stream 3rd party integration (including CDNs) | No | nps.onyx.azure.net | TCP:443 |
| 44 | Default Optional Notes: Microsoft Stream – unauthenticated | No | *.azureedge.net, *.media.azure.net, *.streaming.mediaservices.windows.net | TCP:443 |
| 45 | Default Optional Notes: Office 365 Video | No | *.keydelivery.mediaservices.windows.net, *.streaming.mediaservices.windows.net | TCP:443 |
| 46 | Allow Required | Yes | *broadcast.officeapps.live.com, *excel.officeapps.live.com, *onenote.officeapps.live.com, *powerpoint.officeapps.live.com, *view.officeapps.live.com, *visio.officeapps.live.com, *word-edit.officeapps.live.com, *word-view.officeapps.live.com, office.live.com13.107.6.171/32, 13.107.140.6/32, 52.108.0.0/14, 52.238.106.116/32, 52.247.150.191/32, 2603:1010:2::cb/128, 2603:1010:200::c7/128, 2603:1020:200::682f:a0fd/128, 2603:1020:201:9::c6/128, 2603:1020:600::a1/128, 2603:1020:700::a2/128, 2603:1020:800:2::6/128, 2603:1020:900::8/128, 2603:1030:7::749/128, 2603:1030:800:5::bfee:ad3c/128, 2603:1030:f00::17/128, 2603:1030:1000::21a/128, 2603:1040:200::4f3/128, 2603:1040:401::762/128, 2603:1040:601::60f/128, 2603:1040:a01::1e/128, 2603:1040:c01::28/128, 2603:1040:e00:1::2f/128, 2603:1040:f00::1f/128, 2603:1050:1::cd/128, 2620:1ec:8fc::6/128, 2620:1ec:a92::171/128, 2a01:111:f100:2002::8975:2d79/128, 2a01:111:f100:2002::8975:2da8/128, 2a01:111:f100:7000::6fdd:6cd5/128, 2a01:111:f100:a004::bfeb:88cf/128 | TCP:443 |
| 47 | Default Required | No | *.cdn.office.net, contentstorage.osi.office.net | TCP:443 |
| 49 | Default Required | No | *.onenote.com | TCP:443 |
| 50 | Default Optional Notes: OneNote notebooks (wildcards) | No | *.microsoft.com, *.msecnd.net, *.office.net | TCP:443 |
| 51 | Default Required | No | *cdn.onenote.net | TCP:443 |
| 52 | Default Optional Notes: OneNote 3rd party supporting services and CDNs | No | ad.atdmt.com, s.ytimg.com, www.youtube.com | TCP:443 |
| 53 | Default Required | No | ajax.aspnetcdn.com, apis.live.net, cdn.optimizely.com, officeapps.live.com, www.onedrive.com | TCP:443 |
| 54 | Default Required | No | ccs.login.microsoftonline.com | TCP:443, 80 |
| 56 | Allow Required | Yes | *.msappproxy.net, account.activedirectory.windowsazure.com, accounts.accesscontrol.windows.net, adminwebservice.microsoftonline.com, api.login.microsoftonline.com, api.passwordreset.microsoftonline.com, autologon.microsoftazuread-sso.com, becws.microsoftonline.com, clientconfig.microsoftonline-p.net, companymanager.microsoftonline.com, device.login.microsoftonline.com, graph.microsoft.com, graph.windows.net, hip.microsoftonline-p.net, hipservice.microsoftonline.com, login.microsoft.com, login.microsoftonline.com, login.microsoftonline-p.com, login.windows.net, logincert.microsoftonline.com, loginex.microsoftonline.com, login-us.microsoftonline.com, nexus.microsoftonline-p.com, passwordreset.microsoftonline.com, provisioningapi.microsoftonline.com13.67.50.224/29, 13.71.201.64/26, 13.75.48.16/29, 13.75.80.16/29, 13.106.4.128/25, 13.106.56.0/25, 20.190.128.0/18, 23.100.16.168/29, 23.100.32.136/29, 23.100.64.24/29, 23.100.72.32/29, 23.100.80.64/29, 23.100.88.32/29, 23.100.101.112/28, 23.100.104.16/28, 23.100.112.64/29, 23.100.120.64/29, 23.101.5.104/29, 23.101.144.136/29, 23.101.165.168/29, 23.101.181.128/29, 23.101.210.24/29, 23.101.222.240/28, 23.101.224.16/29, 23.101.226.16/28, 40.112.64.16/28, 40.113.192.16/29, 40.114.120.16/29, 40.115.152.16/28, 40.126.0.0/18, 40.127.67.24/29, 52.172.144.16/28, 65.52.1.16/29, 65.52.193.136/29, 65.54.170.128/25, 70.37.154.128/25, 104.40.240.48/28, 104.41.13.120/29, 104.41.216.16/28, 104.42.72.16/29, 104.43.208.16/29, 104.43.240.16/29, 104.44.218.128/25, 104.44.254.128/25, 104.44.255.0/25, 104.45.0.16/28, 104.45.208.104/29, 104.46.112.8/29, 104.46.224.64/28, 104.209.144.16/29, 104.210.48.8/29, 104.210.83.160/29, 104.210.208.16/29, 104.211.16.16/29, 104.211.48.16/29, 104.211.88.16/28, 104.211.216.32/27, 104.215.96.24/29, 104.215.144.64/29, 104.215.184.16/29, 134.170.67.0/25, 134.170.116.0/25, 134.170.165.0/25, 134.170.172.128/25, 157.55.45.128/25, 157.55.59.128/25, 157.55.130.0/25, 157.55.145.0/25, 157.55.155.0/25, 157.55.227.192/26, 157.56.53.128/25, 157.56.58.0/25, 157.56.151.0/25, 191.232.2.128/25, 191.237.248.32/29, 191.237.252.192/28, 2001:df0:d9:200::/64, 2603:1020:201::4a0/128, 2603:1020:201::4a1/128, 2603:1020:201::4a2/128, 2603:1020:201::4a3/128, 2603:1020:201::4a4/128, 2603:1020:201::4a5/128, 2603:1020:201::4a6/128, 2603:1020:201::4a7/128, 2603:1020:201::4aa/128, 2603:1020:201::581/128, 2603:1020:201::583/128, 2603:1020:201::584/128, 2603:1020:201::586/128, 2603:1020:201::588/128, 2603:1020:201::589/128, 2603:1020:201::58a/128, 2603:1020:201::58b/128, 2603:1020:201::58c/128, 2603:1020:201:2::/64, 2603:1020:201:3::/64, 2603:1030:7::2c/128, 2603:1030:7::2d/128, 2603:1030:7::2f/128, 2603:1030:7::30/128, 2603:1030:7::34/128, 2603:1030:7::3f/128, 2603:1030:7::40/128, 2603:1030:7::41/128, 2603:1047:100::/64, 2a01:111:2005:6::/64, 2a01:111:200a:a::/64, 2a01:111:2035:8::/64, 2a01:111:f100:1002::4134:d89f/128, 2a01:111:f100:1002::4134:d944/128, 2a01:111:f100:1002::4134:d95f/128, 2a01:111:f100:1002::4134:da55/128, 2a01:111:f100:1002::4134:da5c/128, 2a01:111:f100:1002::4134:da81/128, 2a01:111:f100:1002::4134:dab5/128, 2a01:111:f100:1002::4134:daee/128, 2a01:111:f100:1002::4134:db2a/128, 2a01:111:f100:1002::4134:db60/128, 2a01:111:f100:1002::4134:db89/128, 2a01:111:f100:1002::4134:dbe7/128, 2a01:111:f100:1002::4134:dc2d/128, 2a01:111:f100:1002::4134:dc2e/128, 2a01:111:f100:1002::4134:dc43/128, 2a01:111:f100:1002::4134:dc6e/128, 2a01:111:f100:1002::4134:dd7a/128, 2a01:111:f100:1002::4134:ddcb/128, 2a01:111:f100:2002::8975:2c3b/128, 2a01:111:f100:2002::8975:2c3f/128, 2a01:111:f100:2002::8975:2c6d/128, 2a01:111:f100:2002::8975:2cdd/128, 2a01:111:f100:2002::8975:2cea/128, 2a01:111:f100:2002::8975:2ced/128, 2a01:111:f100:2002::8975:2d08/128, 2a01:111:f100:2002::8975:2d19/128, 2a01:111:f100:2002::8975:2d25/128, 2a01:111:f100:2002::8975:2d4d/128, 2a01:111:f100:2002::8975:2d6a/128, 2a01:111:f100:2002::8975:2d97/128, 2a01:111:f100:2002::8975:2daa/128, 2a01:111:f100:2002::8975:2dc7/128, 2a01:111:f100:3002::8987:30a0/128, 2a01:111:f100:3002::8987:3103/128, 2a01:111:f100:3002::8987:3278/128, 2a01:111:f100:3002::8987:328f/128, 2a01:111:f100:3002::8987:3299/128, 2a01:111:f100:3002::8987:3344/128, 2a01:111:f100:3002::8987:3396/128, 2a01:111:f100:3002::8987:3398/128, 2a01:111:f100:3002::8987:33b3/128, 2a01:111:f100:3002::8987:33ec/128, 2a01:111:f100:3002::8987:34eb/128, 2a01:111:f100:3002::8987:34f8/128, 2a01:111:f100:3002::8987:353b/128, 2a01:111:f100:3002::8987:35b5/128, 2a01:111:f100:4001::4625:a3ee/128, 2a01:111:f100:4001::4625:a4b6/128, 2a01:111:f100:4001::4625:a4ba/128, 2a01:111:f100:4001::4625:a4c7/128, 2a01:111:f100:4001::4625:a4cf/128, 2a01:111:f100:4001::4625:a4ee/128, 2a01:111:f100:4001::4625:a56f/128, 2a01:111:f100:4001::4625:a589/128, 2a01:111:f100:7000::6fdd:6a44/128, 2a01:111:f100:7000::6fdd:6b96/128, 2a01:111:f100:7000::6fdd:6bb6/128, 2a01:111:f100:7000::6fdd:6c82/128, 2a01:111:f100:7000::6fdd:6d1c/128, 2a01:111:f100:7000::6fdd:6d23/128, 2a01:111:f100:7000::6fdd:6d50/128, 2a01:111:f100:7000::6fdd:6d88/128, 2a01:111:f100:a004::bfeb:8a92/128, 2a01:111:f100:a004::bfeb:8ab0/128, 2a01:111:f100:a004::bfeb:8b12/128, 2a01:111:f100:a004::bfeb:8b15/128, 2a01:111:f100:a004::bfeb:8b3c/128, 2a01:111:f100:a004::bfeb:8b47/128, 2a01:111:f100:a004::bfeb:8b6c/128, 2a01:111:f100:a004::bfeb:8beb/128, 2a01:111:f100:a004::bfeb:8c55/128, 2a01:111:f100:a004::bfeb:8c6d/128, 2a01:111:f100:a004::bfeb:8c6f/128, 2a01:111:f100:a004::bfeb:8c88/128, 2a01:111:f100:a004::bfeb:8cc0/128, 2a01:111:f100:a004::bfeb:8cdc/128, 2a01:111:f100:a004::bfeb:8d83/128, 2a01:111:f100:a004::bfeb:8d96/128, 2a01:111:f100:a004::bfeb:8daa/128, 2a01:111:f102:8001::1761:4929/128, 2a01:111:f102:8001::1761:4948/128, 2a01:111:f102:8001::1761:4b83/128, 2a01:111:f102:8001::1761:4f0d/128, 2a01:111:f102:8001::1761:4f32/128, 2a01:111:f102:8001::1761:4f64/128, 2a01:111:f102:8001::1761:4f8d/128, 2a01:111:f102:8001::1761:4fc0/128, 2a01:111:f406:1::/64, 2a01:111:f406:2::/64, 2a01:111:f406:c00::/64, 2a01:111:f406:1004::/64, 2a01:111:f406:1805::/64, 2a01:111:f406:3404::/64, 2a01:111:f406:8000::/64, 2a01:111:f406:8801::/64, 2a01:111:f406:a003::/64 | TCP:443, 80 |
| 59 | Default Required | No | *.adhybridhealth.azure.com, *.blob.core.windows.net, *.microsoftonline.com, *.microsoftonline-p.com, *.microsoftonline-p.net, *.msecnd.net, *.phonefactor.net, *.queue.core.windows.net, *.servicebus.windows.net, *.table.core.windows.net, *.windows.net, aadcdn.msauth.net, aadcdn.msftauth.net, ccscdn.msauth.net, ccscdn.msftauth.net, management.azure.com, policykeyservice.dc.ad.msft.net, secure.aadcdn.microsoftonline-p.com | TCP:443, 80 |
| 64 | Allow Required | Yes | *.manage.office.com, *.protection.office.com, manage.office.com, protection.office.com13.80.125.22/32, 13.84.178.101/32, 13.91.91.243/32, 13.107.6.156/31, 13.107.7.190/31, 13.107.9.156/31, 40.69.185.117/32, 40.76.54.117/32, 40.81.156.154/32, 40.83.127.89/32, 40.90.218.198/32, 40.112.144.173/32, 40.113.91.234/32, 40.124.8.53/32, 52.164.121.65/32, 52.164.124.124/32, 52.164.127.6/32, 52.168.128.89/32, 52.174.56.180/32, 52.183.75.62/32, 52.184.165.82/32, 52.225.223.43/32, 65.52.220.46/32, 104.40.211.46/32, 104.42.230.91/32, 104.43.21.58/32, 104.214.107.57/32, 157.55.145.0/25, 157.55.155.0/25, 157.55.227.192/26, 168.61.149.234/32, 207.46.140.244/32, 2a01:111:200a:a::/64, 2a01:111:2035:8::/64, 2a01:111:f406:1::/64, 2a01:111:f406:c00::/64, 2a01:111:f406:1004::/64, 2a01:111:f406:1805::/64, 2a01:111:f406:3404::/64, 2a01:111:f406:8000::/64, 2a01:111:f406:8801::/64, 2a01:111:f406:a003::/64 | TCP:443 |
| 65 | Allow Required | Yes | *.portal.cloudappsecurity.com, account.office.net, admin.microsoft.com, home.office.com, portal.office.com, www.office.com13.80.125.22/32, 13.84.178.101/32, 13.91.91.243/32, 13.107.6.156/31, 13.107.7.190/31, 13.107.9.156/31, 40.69.185.117/32, 40.76.54.117/32, 40.81.156.154/32, 40.83.127.89/32, 40.90.218.198/32, 40.112.144.173/32, 40.113.91.234/32, 40.124.8.53/32, 52.164.121.65/32, 52.164.124.124/32, 52.164.127.6/32, 52.168.128.89/32, 52.174.56.180/32, 52.183.75.62/32, 52.184.165.82/32, 52.225.223.43/32, 65.52.220.46/32, 104.40.211.46/32, 104.42.230.91/32, 104.43.21.58/32, 104.214.107.57/32, 157.55.145.0/25, 157.55.155.0/25, 157.55.227.192/26, 168.61.149.234/32, 207.46.140.244/32, 2a01:111:200a:a::/64, 2a01:111:2035:8::/64, 2a01:111:f406:1::/64, 2a01:111:f406:c00::/64, 2a01:111:f406:1004::/64, 2a01:111:f406:1805::/64, 2a01:111:f406:3404::/64, 2a01:111:f406:8000::/64, 2a01:111:f406:8801::/64, 2a01:111:f406:a003::/64 | TCP:443 |
| 66 | Allow Required | Yes | apc.delve.office.com, aus.delve.office.com, can.delve.office.com, delve.office.com, eur.delve.office.com, gbr.delve.office.com, ind.delve.office.com, jpn.delve.office.com, kor.delve.office.com, lam.delve.office.com, nam.delve.office.com, suite.office.net, webshell.suite.office.com13.107.6.171/32, 13.107.140.6/32, 52.108.0.0/14, 52.238.106.116/32, 52.247.150.191/32, 2603:1010:2::cb/128, 2603:1010:200::c7/128, 2603:1020:200::682f:a0fd/128, 2603:1020:201:9::c6/128, 2603:1020:600::a1/128, 2603:1020:700::a2/128, 2603:1020:800:2::6/128, 2603:1020:900::8/128, 2603:1030:7::749/128, 2603:1030:800:5::bfee:ad3c/128, 2603:1030:f00::17/128, 2603:1030:1000::21a/128, 2603:1040:200::4f3/128, 2603:1040:401::762/128, 2603:1040:601::60f/128, 2603:1040:a01::1e/128, 2603:1040:c01::28/128, 2603:1040:e00:1::2f/128, 2603:1040:f00::1f/128, 2603:1050:1::cd/128, 2620:1ec:8fc::6/128, 2620:1ec:a92::171/128, 2a01:111:f100:2002::8975:2d79/128, 2a01:111:f100:2002::8975:2da8/128, 2a01:111:f100:7000::6fdd:6cd5/128, 2a01:111:f100:a004::bfeb:88cf/128 | TCP:443 |
| 67 | Default Optional Notes: Security and Compliance Center eDiscovery export | No | *.blob.core.windows.net | TCP:443 |
| 68 | Default Optional Notes: Portal and shared: 3rd party office integration. (including CDNs) | No | *.helpshift.com, *.localytics.com, analytics.localytics.com, api.localytics.com, connect.facebook.net, firstpartyapps.oaspapps.com, outlook.uservoice.com, prod.firstpartyapps.oaspapps.com.akadns.net, rink.hockeyapp.net, sdk.hockeyapp.net, telemetryservice.firstpartyapps.oaspapps.com, web.localytics.com, webanalytics.localytics.com, wus-firstpartyapps.oaspapps.com | TCP:443 |
| 69 | Default Required | No | *.aria.microsoft.com, browser.pipe.aria.microsoft.com, mobile.pipe.aria.microsoft.com | TCP:443 |
| 70 | Default Required | No | *.o365weve.com, amp.azure.net, appsforoffice.microsoft.com, assets.onestore.ms, auth.gfx.ms, az826701.vo.msecnd.net, c1.microsoft.com, client.hip.live.com, contentstorage.osi.office.net, dgps.support.microsoft.com, docs.microsoft.com, msdn.microsoft.com, platform.linkedin.com, prod.msocdn.com, products.office.com, r1.res.office365.com, r4.res.office365.com, res.delve.office.com, shellprod.msocdn.com, support.content.office.net, support.microsoft.com, support.office.com, technet.microsoft.com, templates.office.com, video.osi.office.net, videocontent.osi.office.net, videoplayercdn.osi.office.net | TCP:443 |
| 71 | Default Required | No | *.office365.com2603:1020:0:7::19c/128, 2603:1020:0:7::4e1/128, 2603:1020:200::682f:a1d8/128, 2603:1020:201::3c4/128, 2603:1020:201::5f2/128, 2603:1020:201:a::2b1/128, 2603:1020:300::33/128, 2603:1020:400::26/128, 2603:1020:600::1d3/128, 2603:1020:600::21f/128, 2603:1020:700::1cb/128, 2603:1020:700::215/128, 2603:1030:603::6a/128, 2603:1030:603::72/128, 2603:1030:603::3c9/128, 2603:1030:a02::118/128, 2603:1030:a02::367/128, 2603:1040:200::111/128, 2603:1040:200::325/128, 2603:1040:400::5d/128, 2603:1040:400::5e/128, 2603:1040:400::7b/128, 2603:1040:400::2f4/128, 2603:1040:401::c/128, 2603:1040:401::57/128, 2603:1040:401::597/128, 2603:1040:601::2f/128, 2603:1040:601::4e/128, 2603:1040:601::1e7/128, 2603:1040:601::26f/128, 2603:1040:601::36c/128, 2801:80:1d0:1c00::/64, 2a01:111:2003::/48, 2a01:111:202c::/48, 2a01:111:202d::/48, 2a01:111:202e::/48, 2a01:111:202e::156/128, 2a01:111:202e::190/128, 2a01:111:202e::191/128, 2a01:111:f100:1002::4134:c0cb/128, 2a01:111:f100:1002::4134:c440/128, 2a01:111:f100:1002::4134:d93c/128, 2a01:111:f100:1002::4134:d9ee/128, 2a01:111:f100:1003::4134:3644/128, 2a01:111:f100:1003::4134:36d5/128, 2a01:111:f100:1004::4134:f0c8/128, 2a01:111:f100:2000::a83e:3349/128, 2a01:111:f100:2002::8975:2c33/128, 2a01:111:f100:2002::8975:2cbc/128, 2a01:111:f100:2002::8975:2d11/128, 2a01:111:f100:2002::8975:2d43/128, 2a01:111:f100:2002::8975:2d92/128, 2a01:111:f100:2002::8975:2d98/128, 2a01:111:f100:3000::a83e:1a8c/128, 2a01:111:f100:3002::8987:320c/128, 2a01:111:f100:3002::8987:342a/128, 2a01:111:f100:3002::8987:3552/128, 2a01:111:f100:3002::8987:358e/128, 2a01:111:f100:4001::4625:609b/128, 2a01:111:f100:4001::4625:61ea/128, 2a01:111:f100:4001::4625:a065/128, 2a01:111:f100:4001::4625:a1e3/128, 2a01:111:f100:4001::4625:a248/128, 2a01:111:f100:4001::4625:a4b4/128, 2a01:111:f100:4002::9d37:c021/128, 2a01:111:f100:4002::9d37:c08f/128, 2a01:111:f100:4002::9d37:c11a/128, 2a01:111:f100:6000::4134:a2af/128, 2a01:111:f100:6000::4134:a591/128, 2a01:111:f100:6000::4134:b0ba/128, 2a01:111:f100:6000::4134:b84b/128, 2a01:111:f100:7000::6fdd:50bb/128, 2a01:111:f100:7000::6fdd:568a/128, 2a01:111:f100:7000::6fdd:6095/128, 2a01:111:f100:7000::6fdd:682b/128, 2a01:111:f100:7000::6fdd:699d/128, 2a01:111:f100:7000::6fdd:6b20/128, 2a01:111:f100:7000::6fdd:6b76/128, 2a01:111:f100:7000::6fdd:6cac/128, 2a01:111:f100:7000::6fdd:6fc4/128, 2a01:111:f100:8000::4134:902e/128, 2a01:111:f100:8000::4134:941b/128, 2a01:111:f100:8001::d5c7:8077/128, 2a01:111:f100:9001::1761:91cb/128, 2a01:111:f100:9001::1761:9642/128, 2a01:111:f100:a000::5ef5:581c/128, 2a01:111:f100:a000::5ef5:6c55/128, 2a01:111:f100:a001::a83f:5c85/128, 2a01:111:f100:a004::bfeb:8aa2/128, 2a01:111:f100:a004::bfeb:8c89/128, 2a01:111:f100:a004::bfeb:8cb8/128, 2a01:111:f100:a004::bfeb:8deb/128, 2a01:111:f102:8001::1761:4237/128, 2a01:111:f102:8001::1761:4daf/128, 2a01:111:f102:8001::1761:4f8a/128, 2a01:111:f406:1000::/64, 2a01:111:f406:1801::/64 | TCP:443 |
| 72 | Default Optional Notes: Azure Rights Management (RMS) with Office 2010 clients | No | *.cloudapp.net | TCP:443 |
| 73 | Default Required | No | *.aadrm.com, *.azurerms.com, api.informationprotection.azure.com, ecn.dev.virtualearth.net, informationprotection.hosting.portal.azure.net | TCP:443 |
| 74 | Default Optional Notes: Remote Connectivity Analyzer – Initiate connectivity tests. | No | testconnectivity.microsoft.com | TCP:443, 80 |
| 75 | Default Optional Notes:Graph.windows.net, Office 365 Management Pack for Operations Manager, SecureScore, Azure AD Device Registration, Forms, StaffHub, Application Insights, captcha services | No | *.blob.core.windows.net, *.hockeyapp.net, *.sharepointonline.com, *.staffhub.office.com, api.office.com, dc.applicationinsights.microsoft.com, dc.services.visualstudio.com, ea-000.forms.osi.office.net, enterpriseregistration.windows.net, eus2-000.forms.osi.office.net, forms.microsoft.com, forms.office.com, mem.gfx.ms, neu-000.forms.osi.office.net, office365servicehealthcommunications.cloudapp.net, securescore.office.com, signup.microsoft.com, staffhub.ms, staffhub.office.com, staffhub.uservoice.com, staffhubweb.azureedge.net, watson.telemetry.microsoft.com, weu-000.forms.osi.office.net, wu.client.hip.live.com, wus-000.forms.osi.office.net | TCP:443 |
| 76 | Default Optional Notes: Microsoft Azure RemoteApp | No | vortex.data.microsoft.com | TCP:443 |
| 77 | Allow Required | Yes | nexus.officeapps.live.com, nexusrules.officeapps.live.com, portal.microsoftonline.com13.107.6.171/32, 13.107.140.6/32, 52.108.0.0/14, 52.238.106.116/32, 52.247.150.191/32, 2603:1010:2::cb/128, 2603:1010:200::c7/128, 2603:1020:200::682f:a0fd/128, 2603:1020:201:9::c6/128, 2603:1020:600::a1/128, 2603:1020:700::a2/128, 2603:1020:800:2::6/128, 2603:1020:900::8/128, 2603:1030:7::749/128, 2603:1030:800:5::bfee:ad3c/128, 2603:1030:f00::17/128, 2603:1030:1000::21a/128, 2603:1040:200::4f3/128, 2603:1040:401::762/128, 2603:1040:601::60f/128, 2603:1040:a01::1e/128, 2603:1040:c01::28/128, 2603:1040:e00:1::2f/128, 2603:1040:f00::1f/128, 2603:1050:1::cd/128, 2620:1ec:8fc::6/128, 2620:1ec:a92::171/128, 2a01:111:f100:2002::8975:2d79/128, 2a01:111:f100:2002::8975:2da8/128, 2a01:111:f100:7000::6fdd:6cd5/128, 2a01:111:f100:a004::bfeb:88cf/128 | TCP:443 |
| 78 | Default Optional Notes: Some Office 365 features require endpoints within these domains (including CDNs). Many specific FQDNs within these wildcards have been published recently as we work to either remove or better explain our guidance relating to these wildcards. | No | *.microsoft.com, *.msocdn.com, *.office.com, *.office.net, *.onmicrosoft.com | TCP:443, 80 |
| 79 | Default Required | No | o15.officeredir.microsoft.com, ocsredir.officeapps.live.com, officepreviewredir.microsoft.com, officeredir.microsoft.com, r.office.microsoft.com | TCP:443, 80 |
| 80 | Default Required | No | ocws.officeapps.live.com | TCP:443 |
| 81 | Default Required | No | odc.officeapps.live.com | TCP:443, 80 |
| 82 | Default Required | No | roaming.officeapps.live.com | TCP:443, 80 |
| 83 | Default Required | No | activation.sls.microsoft.com | TCP:443 |
| 84 | Default Required | No | crl.microsoft.com | TCP:443, 80 |
| 85 | Default Required | No | ols.officeapps.live.com | TCP:443 |
| 86 | Default Required | No | office15client.microsoft.com, officeclient.microsoft.com | TCP:443 |
| 87 | Default Required | No | ocsa.officeapps.live.com | TCP:443, 80 |
| 88 | Default Required | No | insertmedia.bing.office.net | TCP:443, 80 |
| 89 | Default Required | No | go.microsoft.com, support.office.com | TCP:443, 80 |
| 90 | Default Required | No | mrodevicemgr.officeapps.live.com | TCP:443 |
| 91 | Default Required | No | ajax.aspnetcdn.com, cdn.odc.officeapps.live.com | TCP:443, 80 |
| 92 | Default Required | No | officecdn.microsoft.com, officecdn.microsoft.com.edgesuite.net | TCP:443, 80 |
| 93 | Default Optional Notes: ProPlus: auxiliary URLs | No | ajax.microsoft.com, c.bing.net, excelbingmap.firstpartyapps.oaspapps.com, excelcs.officeapps.live.com, ocos-office365-s2s.msedge.net, omextemplates.content.office.net, peoplegraph.firstpartyapps.oaspapps.com, pptcs.officeapps.live.com, store.office.com, templateservice.office.com, tse1.mm.bing.net, uci.officeapps.live.com, watson.microsoft.com, wikipedia.firstpartyapps.oaspapps.com, wordcs.officeapps.live.com, www.bing.com | TCP:443, 80 |
| 95 | Default Optional Notes: Outlook for Android and iOS | No | *.acompli.net, *.outlookmobile.com, *.outlookmobile.us | TCP:443 |
| 96 | Default Optional Notes: Outlook for Android and iOS: Authentication | No | api.office.com, go.microsoft.com, login.windows-ppe.net, mam.manage.microsoft.com, secure.aadcdn.microsoftonline-p.com, vortex.data.microsoft.com | TCP:443 |
| 97 | Default Optional Notes: Outlook for Android and iOS: Consumer Outlook.com and OneDrive integration | No | account.live.com, apis.live.net, auth.gfx.ms, login.live.com | TCP:443 |
| 98 | Default Optional Notes: Outlook for Android and iOS: Google integration | No | accounts.google.com, mail.google.com, www.googleapis.com | TCP:443 |
| 99 | Default Optional Notes: Outlook for Android and iOS: Yahoo integration | No | api.login.yahoo.com, social.yahooapis.com | TCP:443 |
| 100 | Default Optional Notes: Outlook for Android and iOS: DropBox integration | No | api.dropboxapi.com, www.dropbox.com | TCP:443 |
| 101 | Default Optional Notes: Outlook for Android and iOS: Box integration | No | app.box.com | TCP:443 |
| 102 | Default Optional Notes: Outlook for Android and iOS: Facebook integration | No | graph.facebook.com, m.facebook.com | TCP:443 |
| 103 | Default Optional Notes: Outlook for Android and iOS: Evernote integration | No | www.evernote.com | TCP:443 |
| 104 | Default Optional Notes: Outlook for Android and iOS: WunderList integration | No | a.wunderlist.com, www.wunderlist.com | TCP:443 |
| 105 | Default Optional Notes: Outlook for Android and iOS: Outlook Privacy | No | bit.ly, www.acompli.com | TCP:443 |
| 106 | Default Optional Notes: Outlook for Android and iOS: User voice integration | No | by.uservoice.com, outlook.uservoice.com | TCP:443 |
| 107 | Default Optional Notes: Outlook for Android and iOS: Log upload integration | No | api.diagnostics.office.com | TCP:443 |
| 109 | Default Optional Notes: Outlook for Android and iOS: Flurry log integration | No | data.flurry.com | TCP:443 |
| 110 | Default Optional Notes: Outlook for Android and iOS: Adjust integration | No | app.adjust.com | TCP:443 |
| 111 | Default Optional Notes: Outlook for Android and iOS: Hockey log integration | No | rink.hockeyapp.net, sdk.hockeyapp.net | TCP:443 |
| 112 | Default Optional Notes: Outlook for Android and iOS: Helpshift integration | No | acompli.helpshift.com | TCP:443 |
| 113 | Default Optional Notes: Outlook for Android and iOS: Play Store integration (Android only) | No | play.google.com | TCP:443 |
| 114 | Default Optional Notes: Office Mobile URLs | No | *.appex.bing.com, *.appex-rf.msn.com, *.itunes.apple.com, c.bing.com, c.live.com, cl2.apple.com, client.hip.live.com, d.docs.live.net, directory.services.live.com, docs.live.net, en-us.appex-rf.msn.com, foodanddrink.services.appex.bing.com, ms.tific.com, odcsm.officeapps.live.com, office.microsoft.com, officeimg.vo.msecnd.net, partnerservices.getmicrosoftkey.com, roaming.officeapps.live.com, sas.office.microsoft.com, signup.live.com, view.atdmt.com, watson.telemetry.microsoft.com, weather.tile.appex.bing.com | TCP:443, 80 |
| 115 | Default Optional Notes: Outlook for Android and iOS: Meetup integration | No | api.meetup.com, secure.meetup.com | TCP:443 |
| 116 | Default Optional Notes: Office for iPad URLs | No | account.live.com, auth.gfx.ms, c.bing.com, c.live.com, cl2.apple.com, client.hip.live.com, directory.services.live.com, docs.live.net, en-us.appex-rf.msn.com, foodanddrink.services.appex.bing.com, go.microsoft.com, login.live.com, ms.tific.com, office.microsoft.com, officeimg.vo.msecnd.net, p100-sandbox.itunes.apple.com, partnerservices.getmicrosoftkey.com, roaming.officeapps.live.com, sas.office.microsoft.com, signup.live.com, view.atdmt.com, watson.telemetry.microsoft.com, weather.tile.appex.bing.com | TCP:443, 80 |
| 117 | Default Optional Notes: Yammer | No | *.yammer.com, *.yammerusercontent.com | TCP:443 |
| 118 | Default Optional Notes: Yammer CDN | No | *.assets-yammer.com | TCP:443 |
| 119 | Default Optional Notes: Planner | No | cus-000.tasks.osi.office.net, ea-000.tasks.osi.office.net, eus-zzz.tasks.osi.office.net, neu-000.tasks.osi.office.net, sea-000.tasks.osi.office.net, tasks.office.com, weu-000.tasks.osi.office.net, wus-000.tasks.osi.office.net | TCP:443 |
| 120 | Default Optional Notes: Planner CDNs | No | ajax.aspnetcdn.com | TCP:443 |
| 121 | Default Optional Notes: Planner: auxiliary URLs | No | www.outlook.com | TCP:443, 80 |
| 122 | Default Optional Notes: Sway CDNs | No | eus-www.sway-cdn.com, eus-www.sway-extensions.com, wus-www.sway-cdn.com, wus-www.sway-extensions.com | TCP:443 |
| 123 | Default Optional Notes: Sway website analytics | No | www.google-analytics.com | TCP:443 |
| 124 | Default Optional Notes: Sway | No | sway.com, sway.office.com, www.sway.com | TCP:443 |
| 125 | Default Required | No | *.entrust.net, *.geotrust.com, *.omniroot.com, *.public-trust.com, *.symcb.com, *.symcd.com, *.verisign.com, *.verisign.net, aia.entrust.net, apps.identrust.com, cacert.a.omniroot.com, cacert.omniroot.com, cacerts.digicert.com, cdp1.public-trust.com, cert.int-x3.letsencrypt.org, crl.entrust.net, crl.globalsign.com, crl.globalsign.net, crl.identrust.com, crl.microsoft.com, crl3.digicert.com, crl4.digicert.com, evintl-aia.verisign.com, evintl-crl.verisign.com, evintl-ocsp.verisign.com, evsecure-aia.verisign.com, evsecure-crl.verisign.com, evsecure-ocsp.verisign.com, isrg.trustid.ocsp.identrust.com, mscrl.microsoft.com, ocsp.digicert.com, ocsp.entrust.net, ocsp.globalsign.com, ocsp.int-x3.letsencrypt.org, ocsp.msocsp.com, ocsp.omniroot.com, ocsp2.globalsign.com, ocspx.digicert.com, s1.symcb.com, s2.symcb.com, sa.symcb.com, sd.symcb.com, secure.globalsign.com, sr.symcb.com, sr.symcd.com, su.symcb.com, su.symcd.com, vassg142.crl.omniroot.com, vassg142.ocsp.omniroot.com, www.digicert.com, www.microsoft.com | TCP:443, 80 |
| 126 | Default Optional Notes: Connection to the speech service is required for Office Dictation features. If connectivity is not allowed, Dictation will be disabled. | No | officespeech.platform.bing.com | TCP:443 |
| 128 | Default Optional Notes: Blocking this endpoint will affect Office 365 ProPlus and other Click-to-Run deployment features in Configuration Manager and Intune. | No | *.officeconfig.msocdn.com, config.office.com | TCP:443 |
| 130 | Default Required | No | *.loki.delve.office.com, loki.delve.office.com, loki.delve-gcc.office.com, lpcres.delve.office.com | TCP:443 |
Credit: Microsoft 365 IP and URL’s
Share this content:
Click to rate this post!
[Total: 1 Average: 5]
