Applies to: Office 365 Enterprise
Topic Last Modified: 2014-04-09
Summary: Lists the URLs and IP address ranges used by Office 365 and provides links to RSS feeds that help you stay up-to-date on the latest changes.
Subscribe via RSS to receive notice when updates are made to this topic.
Some organizations have policies that require inbound/outbound filtering to internet services such as Microsoft Office 365 for enterprises. As with most global high traffic web applications, listing all of the connection points to filter is a near impossible task. The connection points span many Microsoft datacenters worldwide and include the use of internal and 3rd party Content Delivery Networks (CDNs) to host graphics and other parts of the service. Using CDNs for HTTP & HTTPS traffic is an industry standard for web based applications enabling better performance, faster response times, and the ability to deliver enhanced end user experiences. Currently those enhanced experiences are available for our browser based tools (such as the Admin Portal, OWA, etc.). Although this may change in the future, the non-browser based tools (such as Outlook, ActiveSync clients, Lync, etc.) are not currently optimized to use the CDNs.
Considering the changing nature of our datacenters and the CDNs, we recommend moving away from inbound/outbound filtering, especially if the browser based tools will be a central component of your deployment. If the browser based tools will not be a part of your deployment strategy and only the non-browser tools will be used, filtering based on URLs (such as *.Outlook.com, *.MicrosoftOnline.com, *.SharePoint.com, etc.) will offer a reliable connection experience and filtering based on IP addresses will offer a reliable experience that requires maintenance when we add new IP address ranges.
If you still need to manage inbound/outbound filtering for the non-browser based clients, we maintain the list of URLs and IP addresses in this article and the associated articles for each service. We make a strong effort to update the list after we make changes to our production systems. We can’t guarantee that we will always support connectivity to the IP addresses from non-browser based clients and recommend you evaluate moving to URL based filtering in the future. If you want to see just the changes, we keep those with date stamps in the Change notification for Office 365 URLs and IP address ranges article. You should Subscribe to the RSS feed of these changes to ensure you are notified of changes.
The URLs and IPs below are for all Office 365 subscriptions regardless of which services are included in the subscription. To successfully manage inbound/outbound filtering, you need to include the URLs and IPs below as well as the URLs and IPs for each service included in your subscription. For URL and IP information of each of the services we have linked directly to those pages.
|Service||IP Address Details|
Microsoft Exchange Online
Forefront Online Protection for Exchange
Exchange Online Protection
This list of URLs is only for Office 365. If you have licensed additional services or purchased a suite license, you will also need to allow access to the SharePoint, Lync, & Exchange services. These services will require both port 80 & port 443.
*.aadrm.com *.activedirectory.windowsazure.com *.glbdns.microsoft.com *.live.com *.lync.com *.microsoft.com *.microsoftonline.com *.microsoftonline-p.com *.microsoftonline-p.net *.microsoftonlineimages.com *.microsoftonlinesupport.net¹ *.msecnd.net *.msocdn.com *.msn.com *.msn.co.jp *.msn.co.uk *.onmicrosoft.com *.office.com *.office.net *.office365.com *.officeapps.live.com *.outlook.com *.phonefactor.net *.Sharepoint.com *.Sharepointonline.com
¹ Only outbound ports for 80 and 443.
This list of IPv4 IP Addresses is the current list of IP Addresses used by Office 365.
188.8.131.52 184.108.40.206 220.127.116.11 18.104.22.168 22.214.171.124 126.96.36.199/27 188.8.131.52 184.108.40.206/23 220.127.116.11/20 18.104.22.168/25 22.214.171.124/23 126.96.36.199/27 188.8.131.52 184.108.40.206 220.127.116.11/23 18.104.22.168/23 22.214.171.124/24 126.96.36.199/22 188.8.131.52/23 184.108.40.206/24 220.127.116.11/24 18.104.22.168 22.214.171.124 126.96.36.199/21 188.8.131.52/21 184.108.40.206/25 220.127.116.11/25 18.104.22.168 22.214.171.124/28 126.96.36.199/16 188.8.131.52/27 184.108.40.206/25 220.127.116.11/25 18.104.22.168/25 22.214.171.124/25 126.96.36.199/25 188.8.131.52/25 184.108.40.206/25 220.127.116.11 18.104.22.168 22.214.171.124/26 126.96.36.199/25 188.8.131.52/23 184.108.40.206/22 220.127.116.11/24 18.104.22.168 22.214.171.124/25 126.96.36.199/24 188.8.131.52 184.108.40.206/25 220.127.116.11/25 18.104.22.168/23 22.214.171.124/23 126.96.36.199/25
This list of IPv6 IP Addresses is the current list of IP Addresses used by Office 365.
This list of IPv4 IP Addresses is the current list used by the Office 365 remote analyzer tools.
This list of URLs and IPv4 IP Addresses is the current list required to connect to all Yammer services.
This list of URLs and IPv4 IP Addresses is the current list required for Office 365 ProPlus.
https://activation.sls.microsoft.com http://crl.microsoft.com/pki/crl/products/MicrosoftProductSecureServer.crl http://crl.microsoft.com/pki/crl/products/MicrosoftRootAuthority.crl http://crl.microsoft.com/pki/crl/products/MicrosoftProductSecureCommunicationsPCA.crl http://www.microsoft.com/pki/crl/products/MicrosoftProductSecureCommunicationsPCA.crl https://odc.officeapps.live.com https://ols.officeapps.live.com/olsc http://officecdn.microsoft.com go.microsoft.com office15client.microsoft.com sls.microsoft.com