Microsoft 365 network endpoints

Published connectivity requirements and exact differences observed between complete API versions.

Worldwide · version 2026081400

63 endpoint sets in the complete snapshot · last successful check 01:21 UTC · next check 02:21 UTC

Microsoft endpoint service documentation

No observed changes match this selection. A baseline alone does not establish a change.

Current published sets for this workload

Set 1 · Exchange · Optimize · Required

TCP: 443, 80 · UDP: 443 · ExpressRoute: True

outlook.cloud.microsoft
outlook.office.com
outlook.office365.com
13.107.128.0/22
13.107.18.10/31
13.107.6.152/31
131.253.33.215/32
132.245.0.0/16
150.171.32.0/22
204.79.197.215/32
23.103.160.0/20
2603:1006::/40
2603:1016::/36
2603:1026::/36
2603:1036::/36
2603:1046::/36
2603:1056::/36
2620:1ec:4::152/128
2620:1ec:4::153/128
2620:1ec:8f0::/46
2620:1ec:900::/46
2620:1ec:a92::152/128
2620:1ec:a92::153/128
2620:1ec:c::10/128
2620:1ec:c::11/128
2620:1ec:d::10/128
2620:1ec:d::11/128
40.104.0.0/15
40.96.0.0/13
52.96.0.0/14

Set 2 · Exchange · Allow · Optional

TCP: 143, 587, 993, 995 · UDP: · ExpressRoute: True

outlook.office365.com
smtp.office365.com
13.107.128.0/22
13.107.18.10/31
13.107.6.152/31
131.253.33.215/32
132.245.0.0/16
150.171.32.0/22
204.79.197.215/32
23.103.160.0/20
2603:1006::/40
2603:1016::/36
2603:1026::/36
2603:1036::/36
2603:1046::/36
2603:1056::/36
2620:1ec:4::152/128
2620:1ec:4::153/128
2620:1ec:8f0::/46
2620:1ec:900::/46
2620:1ec:a92::152/128
2620:1ec:a92::153/128
2620:1ec:c::10/128
2620:1ec:c::11/128
2620:1ec:d::10/128
2620:1ec:d::11/128
40.104.0.0/15
40.96.0.0/13
52.96.0.0/14

POP3, IMAP4, SMTP Client traffic

Set 8 · Exchange · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

*.outlook.com
autodiscover.*.onmicrosoft.com

Set 9 · Exchange · Allow · Required

TCP: 443 · UDP: · ExpressRoute: True

*.protection.outlook.com
104.47.0.0/17
2a01:111:f400::/48
2a01:111:f403::/48
40.107.0.0/16
40.92.0.0/15
52.100.0.0/14
52.238.78.88/32

Set 10 · Exchange · Allow · Required

TCP: 25 · UDP: · ExpressRoute: True

*.mail.protection.outlook.com
*.mx.microsoft
104.47.0.0/17
2a01:111:f400::/48
2a01:111:f403::/48
40.107.0.0/16
40.92.0.0/15
52.100.0.0/14

Set 11 · Skype · Optimize · Required

TCP: · UDP: 3478, 3479, 3480, 3481 · ExpressRoute: True

2603:1063::/38
52.112.0.0/14
52.122.0.0/15

Set 12 · Skype · Allow · Required

TCP: 443, 80 · UDP: 443 · ExpressRoute: True

*.lync.com
*.teams.cloud.microsoft
*.teams.microsoft.com
teams.cloud.microsoft
teams.microsoft.com
2603:1027::/48
2603:1037::/48
2603:1047::/48
2603:1057::/48
2603:1063::/38
2620:1ec:40::/42
2620:1ec:6::/48
52.112.0.0/14
52.122.0.0/15

Set 16 · Skype · Default · Required

TCP: 443 · UDP: · ExpressRoute: False

*.keydelivery.mediaservices.windows.net
*.streaming.mediaservices.windows.net

Set 17 · Skype · Default · Required

TCP: 443 · UDP: · ExpressRoute: False

aka.ms

Set 19 · Skype · Default · Optional

TCP: 443, 80 · UDP: · ExpressRoute: False

adl.windows.com

For end user and customer owned device updates

Set 27 · Skype · Default · Required

TCP: 443 · UDP: · ExpressRoute: False

join.secure.skypeassets.com
mlccdnprod.azureedge.net

Set 31 · SharePoint · Optimize · Required

TCP: 443, 80 · UDP: 443 · ExpressRoute: True

*.sharepoint.com
104.146.128.0/17
13.107.136.0/22
150.171.40.0/22
2603:1061:1300::/40
2603:1063:6000::/35
2620:1ec:8f8::/46
2620:1ec:908::/46
2a01:111:f402::/48
40.108.128.0/17
52.104.0.0/14

Set 32 · SharePoint · Default · Optional

TCP: 443 · UDP: · ExpressRoute: False

storage.live.com

OneDrive for Business: supportability, telemetry, APIs, and embedded email links

Set 35 · SharePoint · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

*.wns.windows.com
admin.onedrive.com
officeclient.microsoft.com

Set 36 · SharePoint · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

g.live.com
oneclient.sfx.ms

Set 37 · SharePoint · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

*.sharepointonline.com
spoprod-a.akamaihd.net

Set 39 · SharePoint · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

*.svc.ms

Set 46 · Common · Allow · Required

TCP: 443, 80 · UDP: · ExpressRoute: True

*.officeapps.live.com
*.online.office.com
office.live.com
13.107.140.6/32
13.107.18.15/32
13.107.6.171/32
2603:1006:1400::/40
2603:1016:2400::/40
2603:1026:2400::/40
2603:1036:2400::/40
2603:1046:1400::/40
2603:1056:1400::/40
2603:1063:2000::/38
2620:1ec:8fc::6/128
2620:1ec:a92::171/128
2620:1ec:c::15/128
2a01:111:f100:2000::a83e:3019/128
2a01:111:f100:2002::8975:2d79/128
2a01:111:f100:2002::8975:2da8/128
2a01:111:f100:7000::6fdd:6cd5/128
2a01:111:f100:a004::bfeb:88cf/128
52.108.0.0/14
52.244.37.168/32

Set 47 · Common · Default · Required

TCP: 443, 80 · UDP: 443 · ExpressRoute: False

*.office.net

Set 49 · Common · Default · Required

TCP: 443 · UDP: · ExpressRoute: False

*.onenote.com

Set 50 · Common · Default · Optional

TCP: 443 · UDP: · ExpressRoute: False

*.microsoft.com

OneNote notebooks (wildcards)

Set 51 · Common · Default · Required

TCP: 443 · UDP: · ExpressRoute: False

*cdn.onenote.net

Set 53 · Common · Default · Required

TCP: 443 · UDP: · ExpressRoute: False

ajax.aspnetcdn.com
apis.live.net
officeapps.live.com
www.onedrive.com

Set 56 · Common · Allow · Required

TCP: 443, 80 · UDP: · ExpressRoute: True

*.auth.microsoft.com
*.msftidentity.com
*.msidentity.com
account.activedirectory.windowsazure.com
accounts.accesscontrol.windows.net
adminwebservice.microsoftonline.com
api.passwordreset.microsoftonline.com
autologon.microsoftazuread-sso.com
becws.microsoftonline.com
ccs.login.microsoftonline.com
clientconfig.microsoftonline-p.net
companymanager.microsoftonline.com
device.login.microsoftonline.com
graph.microsoft.com
graph.windows.net
login-us.microsoftonline.com
login.microsoft.com
login.microsoftonline-p.com
login.microsoftonline.com
login.windows.net
logincert.microsoftonline.com
loginex.microsoftonline.com
nexus.microsoftonline-p.com
passwordreset.microsoftonline.com
provisioningapi.microsoftonline.com
20.190.128.0/18
20.20.32.0/19
20.231.128.0/19
2603:1006:2000::/48
2603:1007:200::/48
2603:1016:1400::/48
2603:1017::/48
2603:1026:3000::/48
2603:1027:1::/48
2603:1036:3000::/48
2603:1037:1::/48
2603:1046:2000::/48
2603:1047:1::/48
2603:1056:2000::/48
2603:1057:2::/48
40.126.0.0/18

Set 59 · Common · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

*.hip.live.com
*.microsoftonline-p.com
*.microsoftonline.com
*.msauth.net
*.msauthimages.net
*.msecnd.net
*.msftauth.net
*.msftauthimages.net
*.phonefactor.net
enterpriseregistration.windows.net

Set 64 · Common · Allow · Required

TCP: 443 · UDP: · ExpressRoute: True

*.protection.office.com
*.security.microsoft.com
compliance.microsoft.com
defender.microsoft.com
protection.office.com
purview.microsoft.com
security.microsoft.com
13.107.6.192/32
13.107.9.192/32
2620:1ec:4::192/128
2620:1ec:a92::192/128

Set 66 · Common · Default · Required

TCP: 443 · UDP: · ExpressRoute: False

*.portal.cloudappsecurity.com

Set 69 · Common · Default · Required

TCP: 443 · UDP: · ExpressRoute: False

*.aria.microsoft.com
*.events.data.microsoft.com

Set 70 · Common · Default · Required

TCP: 443 · UDP: · ExpressRoute: False

*.o365weve.com
amp.azure.net
appsforoffice.microsoft.com
assets.onestore.ms
auth.gfx.ms
c1.microsoft.com
dgps.support.microsoft.com
docs.microsoft.com
msdn.microsoft.com
platform.linkedin.com
prod.msocdn.com
shellprod.msocdn.com
support.microsoft.com
technet.microsoft.com

Set 71 · Common · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

*.office365.com

Set 73 · Common · Default · Required

TCP: 443 · UDP: · ExpressRoute: False

*.aadrm.com
*.azurerms.com
*.informationprotection.azure.com
ecn.dev.virtualearth.net
informationprotection.hosting.portal.azure.net

Set 75 · Common · Default · Optional

TCP: 443 · UDP: · ExpressRoute: False

*.sharepointonline.com
dc.services.visualstudio.com
mem.gfx.ms

Graph.windows.net, Office 365 Management Pack for Operations Manager, SecureScore, Azure AD Device Registration, Forms, StaffHub, Application Insights, captcha services

Set 78 · Common · Default · Optional

TCP: 443, 80 · UDP: · ExpressRoute: False

*.microsoft.com
*.msocdn.com
*.onmicrosoft.com

Some Office 365 features require endpoints within these domains (including CDNs). Many specific FQDNs within these wildcards have been published recently as we work to either remove or better explain our guidance relating to these wildcards.

Set 79 · Common · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

o15.officeredir.microsoft.com
officepreviewredir.microsoft.com
officeredir.microsoft.com
r.office.microsoft.com

Set 83 · Common · Default · Required

TCP: 443 · UDP: · ExpressRoute: False

activation.sls.microsoft.com

Set 84 · Common · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

crl.microsoft.com

Set 86 · Common · Default · Required

TCP: 443 · UDP: · ExpressRoute: False

office15client.microsoft.com
officeclient.microsoft.com

Set 89 · Common · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

go.microsoft.com

Set 91 · Common · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

ajax.aspnetcdn.com
cdn.odc.officeapps.live.com

Set 92 · Common · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

officecdn.microsoft.com
otelrules.azureedge.net

Set 93 · Common · Default · Optional

TCP: 443, 80 · UDP: · ExpressRoute: False

*.virtualearth.net
c.bing.net
ocos-office365-s2s.msedge.net
tse1.mm.bing.net
www.bing.com

ProPlus: auxiliary URLs

Set 95 · Common · Default · Optional

TCP: 443 · UDP: · ExpressRoute: False

*.acompli.net
*.outlookmobile.com

Outlook for Android and iOS

Set 96 · Common · Default · Optional

TCP: 443 · UDP: · ExpressRoute: False

login.windows-ppe.net

Outlook for Android and iOS: Authentication

Set 97 · Common · Default · Optional

TCP: 443 · UDP: · ExpressRoute: False

account.live.com
login.live.com

Outlook for Android and iOS: Consumer Outlook.com and OneDrive integration

Set 114 · Common · Default · Optional

TCP: 443, 80 · UDP: · ExpressRoute: False

*.appex-rf.msn.com
*.appex.bing.com
c.bing.com
c.live.com
partnerservices.getmicrosoftkey.com
signup.live.com

Office Mobile URLs

Set 116 · Common · Default · Optional

TCP: 443, 80 · UDP: · ExpressRoute: False

account.live.com
auth.gfx.ms
login.live.com

Office for iPad URLs

Set 117 · Common · Default · Optional

TCP: 443 · UDP: · ExpressRoute: False

*.yammer.com
*.yammerusercontent.com

Viva Engage

Set 118 · Common · Default · Optional

TCP: 443 · UDP: · ExpressRoute: False

*.assets-yammer.com

Viva Engage Assets CDN

Set 121 · Common · Default · Optional

TCP: 443, 80 · UDP: · ExpressRoute: False

www.outlook.com

Planner: auxiliary URLs

Set 122 · Common · Default · Optional

TCP: 443 · UDP: · ExpressRoute: False

eus-www.sway-cdn.com
eus-www.sway-extensions.com
wus-www.sway-cdn.com
wus-www.sway-extensions.com

Sway CDNs

Set 124 · Common · Default · Optional

TCP: 443 · UDP: · ExpressRoute: False

sway.com
www.sway.com

Sway

Set 125 · Common · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

*.entrust.net
*.geotrust.com
*.omniroot.com
*.public-trust.com
*.symcb.com
*.symcd.com
*.verisign.com
*.verisign.net
cacerts.digicert.com
cert.int-x3.letsencrypt.org
crl.globalsign.com
crl.globalsign.net
crl.identrust.com
crl3.digicert.com
crl4.digicert.com
isrg.trustid.ocsp.identrust.com
mscrl.microsoft.com
ocsp.digicert.com
ocsp.globalsign.com
ocsp.msocsp.com
ocsp2.globalsign.com
ocspx.digicert.com
oneocsp.microsoft.com
secure.globalsign.com
www.digicert.com
www.microsoft.com

Set 126 · Common · Default · Optional

TCP: 443 · UDP: · ExpressRoute: False

officespeech.platform.bing.com

Connection to the speech service is required for Office Dictation features. If connectivity is not allowed, Dictation will be disabled.

Set 127 · Skype · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

*.skype.com

Set 147 · Common · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

*.office.com
www.microsoft365.com

Set 152 · Common · Default · Optional

TCP: 443 · UDP: · ExpressRoute: False

*.microsoftusercontent.com

These endpoints enable the Office Scripts functionality in Office clients available through the Automate tab and the Python in Excel functionality available through the Formulas tab. The Office Scripts feature can also be disabled through the Office 365 Admin portal. For admin controls related to Python in Excel, see [Data security and Python in Excel](https://support.microsoft.com/office/data-security-and-python-in-excel-33cc88a4-4a87-485e-9ff9-f35958278327).

Set 153 · Common · Default · Required

TCP: 443 · UDP: · ExpressRoute: False

*.azure-apim.net
*.flow.microsoft.com
*.powerapps.com
*.powerautomate.com

Set 156 · Common · Default · Required

TCP: 443 · UDP: · ExpressRoute: False

*.activity.windows.com
activity.windows.com

Set 158 · Common · Default · Required

TCP: 443 · UDP: · ExpressRoute: False

*.cortana.ai

Set 159 · Common · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

admin.microsoft.com

Set 160 · Common · Default · Required

TCP: 443, 80 · UDP: · ExpressRoute: False

cdn.odc.officeapps.live.com
cdn.uci.officeapps.live.com

Set 184 · Common · Default · Required

TCP: 443 · UDP: 443 · ExpressRoute: False

*.cloud.microsoft

Set 193 · Common · Default · Required

TCP: 443 · UDP: 443 · ExpressRoute: False

*.static.microsoft
*.usercontent.microsoft