What firewall ports do I need open to connect to Office 365 for Education?


This was a question for a large university in Arizona moving faculty, staff and students to Office 365.

Here are the ports from the deployment guide (note: these are subject to change so refer here to the latest Port and IP list):

image

 

Can I lock it down to certain IP ranges, URLs/servers?

Yes, here are the IP ranges and URLs/Servers:

Office 365 portal

image

 

Microsoft online services sign in:

image

 

Exchange Online sign in and authentication:

207.46.150.128/25
157.55.59.128/25
*.microsoftonline.com
*.microsoftonline-p.com
*.microsoftonline-p.net
*.microsoftonlineimages.com
*.microsoftonlinesupport.net

 

Exchange Online servers: note: only need  IP ranges for your geographic region

Americas

65.54.62.0/25
65.55.39.128/25
65.55.78.128/25
65.55.94.0/25
65.55.113.64/26
65.55.126.0/25
65.55.174.0/25
65.55.181.128/25
70.37.151.128/25
157.55.49.0/25
157.55.49.128/25
157.55.61.0/25
157.55.61.128/25
157.55.157.128/25
157.56.24.0/25
157.56.234.0/28
157.56.234.16/29
157.56.234.24/29
157.56.234.32/28
157.56.234.48/28
157.56.234.64/28
157.56.236.0/28
157.56.236.16/28
157.56.236.32/29
157.56.236.40/29
157.56.236.48/28
157.56.236.64/28
157.56.240.0/28
157.56.240.16/28
157.56.240.32/29
157.56.240.40/29
157.56.240.48/28
157.56.240.64/28
157.56.244.0/28
157.56.244.16/29
157.56.244.24/29
157.56.244.32/28
157.56.244.48/28
157.56.244.64/28
207.46.4.128/25
207.46.198.0/25
207.46.203.128/26

Europe

94.245.117.128/25
157.55.9.128/25
157.55.11.0/25
157.55.47.0/25
157.55.47.128/25
157.55.224.128/25
157.55.225.0/25
213.199.174.0/25
213.199.177.0/26

Asia-Pacific

111.221.23.128/25
111.221.66.0/25
111.221.69.128/25
207.46.58.128/25

Microsoft Federation Gateway – required for federated delegation and hybrid deployments

207.46.150.128/25
207.46.164.0/24
*.microsoftonline-p.com
*.live.com
*.microsoftonline.com
*.microsoftonlinesupport.net

FOPE URLs and IP addresses

  • 12.129.20.0/24
  • 12.129.199.61
  • 12.129.219.155
  • 63.241.222.0/24
  • 65.55.88.0/24
  • 94.245.120.64/26
  • 206.16.57.70
  • 207.46.51.64/26
  • 207.46.163.0/24
  • 213.199.154.0/24
  • 213.199.180.128/26
  • 216.32.180.0/24
  • 216.32.181.0/24

CIDR format

  • 12.129.20.0/24 = 12.129.20.1 – 12.129.20.254
  • 63.241.222.0/24 = 63.241.222.1 – 63.241.222.254
  • 65.55.88.0/24 = 65.55.88.1 – 65.55.88.254
  • 94.245.120.64/26 = 94.245.120.65 – 94.245.120.126
  • 207.46.51.64/26 = 207.46.51.65 – 207.46.51.126
  • 207.46.163.0/24 = 207.46.163.1 – 207.46.163.254
  • 213.199.154.0/24 = 213.199.154.1 – 213.199.154.254
  • 213.199.180.128/26 = 213.199.180.129 – 213.199.180.190
  • 216.32.180.0/24 = 216.32.180.1 – 216.32.180.254
  • 216.32.181.0/24 = 216.32.181.1 – 216.32.181.254

Lync Online URLs and Servers

IP Ranges

  • 111.221.17.128/27
  • 111.221.22.64/26
  • 111.221.23.0/25
  • 157.55.104.96/27
  • 157.55.229.128/27
  • 157.55.238.0/25
  • 157.55.40.128/25
  • 157.55.46.0/27
  • 157.55.46.64/26
  • 207.46.5.0/24
  • 207.46.57.0/25
  • 207.46.7.128/27
  • 65.54.54.128/25
  • 65.55.121.128/27
  • 65.55.127.0/24

Lync Online URLs

  • *.online.lync.com
  • *.onmicrosoft.com
  • *.infra.lync.com
  • *.lync.com

Comments (0)