Microsoft 365 endpoints outside the web service
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/microsoft-365-docs · commit cc53103 · +17 −26 lines · also on GitHub
⋯ 32 unchanged lines
3333
3434
Some network endpoints were previously published and haven't been included in the [Microsoft 365 IP Address and URL Web Service](microsoft-365-ip-web-service.md). The web service publishes network endpoints that are required for Microsoft 365 connectivity across an enterprise perimeter network. This scope currently doesn't include:
3535
36
−1. Network connectivity that might be required from a Microsoft datacenter to a customer network (inbound hybrid server network traffic).
37
−2. Network connectivity from servers on a customer network across the enterprise perimeter (outbound server network traffic).
38
−3. Uncommon scenarios for network connectivity requirements from a user.
39
−4. DNS resolution connectivity requirement (not listed below).
40
−5. Internet Explorer or Microsoft Edge Trusted Sites.
36
+- Network connectivity that might be required from a Microsoft datacenter to a customer network (inbound hybrid server network traffic).
37
+- Network connectivity from servers on a customer network across the enterprise perimeter (outbound server network traffic).
38
+- Uncommon scenarios for network connectivity requirements from a user.
39
+- DNS resolution connectivity requirement (not listed below).
40
+- Internet Explorer or Microsoft Edge Trusted Sites.
4141
4242
Apart from DNS, these instances are all optional for most customers unless you need the specific scenario that is described.
4343
⋯ 3 unchanged lines
4747
4848
|Row|Purpose|Destination|Type|
4949
|---|---|---|---|
50
−|1|**[Import Service](https://support.office.com/article/use-network-upload-to-import-your-organization-pst-files-to-office-365-103f940c-0468-4e1a-b527-cc8ad13a5ea6) for PST and file ingestion**|Refer to the [Import Service](https://support.office.com/article/use-network-upload-to-import-your-organization-pst-files-to-office-365-103f940c-0468-4e1a-b527-cc8ad13a5ea6) for more requirements.|Uncommon outbound scenario|
51
−|2|**[Microsoft Support and Recovery Assistant for Office 365](https://diagnostics.office.com/#/)**|`https://autodiscover.outlook.com` <br> `https://officecdn.microsoft.com` <br> `https://api.diagnostics.office.com` <br> `https://apibasic.diagnostics.office.com` <br> `https://autodiscover-s.outlook.com` <br> `https://cloudcheckenabler.azurewebsites.net` <br> `https://login.live.com` <br> `https://login.microsoftonline.com` <br> `https://login.windows.net` <br> `https://o365diagtelemetry.trafficmanager.net` <br> `https://odc.officeapps.live.com` <br> `https://offcatedge.azureedge.net` <br> `https://officeapps.live.com` <br> `https://outlook.office365.com` <br> `https://outlookdiagnostics.azureedge.net` <br> `https://sara.api.support.microsoft.com` |Outbound server traffic|
50
+|1|**[Import Service](/purview/use-network-upload-to-import-pst-files) for PST and file ingestion**|Refer to the [Import Service](/purview/use-network-upload-to-import-pst-files) for more requirements.|Uncommon outbound scenario|
51
+|2|**[Running Get Help troubleshooters for Microsoft 365](https://support.microsoft.com/topic/23bddffd-5495-47f6-a419-7efe166bf1a8)**|`https://autodiscover.outlook.com` <br> `https://officecdn.microsoft.com` <br> `https://api.diagnostics.office.com` <br> `https://apibasic.diagnostics.office.com` <br> `https://autodiscover-s.outlook.com` <br> `https://cloudcheckenabler.azurewebsites.net` <br> `https://login.live.com` <br> `https://login.microsoftonline.com` <br> `https://login.windows.net` <br> `https://o365diagtelemetry.trafficmanager.net` <br> `https://odc.officeapps.live.com` <br> `https://offcatedge.azureedge.net` <br> `https://officeapps.live.com` <br> `https://outlook.office365.com` <br> `https://outlookdiagnostics.azureedge.net` <br> `https://sara.api.support.microsoft.com` |Outbound server traffic|
5252
|3|**Microsoft Entra Connect (w/SSO option)** <p> WinRM & remote PowerShell|Customer STS environment (AD FS Server and AD FS Proxy) \| TCP ports 80 & 443|Inbound server traffic|
5353
|4|**STS** such as AD FS Proxy servers (for federated customers only)|Customer STS (such as AD FS Proxy) \| Ports TCP 443 or TCP 49443 w/ClientTLS|Inbound server traffic|
5454
|5|**[Exchange Online Unified Messaging/SBC integration](/exchange/voice-mail-unified-messaging/telephone-system-integration-with-um/configuration-notes-for-session-border-controllers)**|Bidirectional between on-premises Session Border Controller and `*.um.outlook.com`|Outbound server-only traffic|
⋯ 15 unchanged lines
7070
|21|**Microsoft Stream** (needs the Microsoft Entra user token). <br> Microsoft 365 Worldwide (including GCC)|`*.cloudapp.net` <br> `*.api.microsoftstream.com` <br> `*.notification.api.microsoftstream.com` <br> `amp.azure.net` <br> `api.microsoftstream.com` <br> `az416426.vo.msecnd.net` <br> `s0.assets-yammer.com` <br> `vortex.data.microsoft.com` <br> `web.microsoftstream.com` <br> TCP port 443|Inbound server traffic|
7171
|22|Use **MFA server** for multifactor authentication requests, both new installations of the server and setting it up with Active Directory Domain Services (AD DS).|See [Getting started with the Azure Multi-Factor Authentication Server](/azure/active-directory/authentication/howto-mfaserver-deploy#plan-your-deployment).|Outbound server-only traffic|
7272
|23|**Microsoft Graph Change Notifications** <p> Developers can use [change notifications](/graph/change-notifications-overview) to subscribe to events in the Microsoft Graph.|Public Cloud:<br>20.20.32.0/19, 20.190.128.0/18, 20.231.128.0/19, 40.126.0.0/18<br> <br> Microsoft Cloud for US Government: <br>20.140.232.0/23, 52.126.194.0/23 <br> <br> Microsoft Cloud China operated by 21Vianet:<br>40.72.70.0/23, 52.130.2.32/27, 52.130.3.64/27, 52.130.17.192/27, 52.130.18.32/27 <br> <br> TCP port 443 <p> Note: Developers can specify different ports when creating the subscriptions.|Inbound server traffic|
73
−|24|**Network Connection Status Indicator**<p>Used by Windows 10 and 11 to determine if the computer is connected to the internet (does not apply to non-Windows clients). When this URL cannot be reached, Windows assumes it isn't connected to the Internet and Microsoft 365 Apps for Enterprise will not try to verify activation status, causing connections to Exchange and other services to fail.|`www.msftconnecttest.com` <br> <p> Also see [Manage connection endpoints for Windows 11 Enterprise](/windows/privacy/manage-windows-11-endpoints) and [Manage connection endpoints for Windows 10 Enterprise, version 21H2](/windows/privacy/manage-windows-21h2-endpoints).|Outbound server-only traffic|
73
+|24|**Network Connection Status Indicator**<p>Used by Windows 10 and 11 to determine if the computer is connected to the internet (does not apply to non-Windows clients). When this URL cannot be reached, Windows assumes it isn't connected to the internet and Microsoft 365 Apps for Enterprise will not try to verify activation status, causing connections to Exchange and other services to fail.|`www.msftconnecttest.com` <br> <p> Also see [Manage connection endpoints for Windows 11 Enterprise](/windows/privacy/manage-windows-11-endpoints) and [Manage connection endpoints for Windows 10 Enterprise, version 21H2](/windows/privacy/manage-windows-21h2-endpoints).|Outbound server-only traffic|
7474
|25|**Teams Notifications on Mobile Devices**<p>Used by Android and Apple mobile devices to receive push notifications to the Teams client for incoming calls and other Teams services. When these ports are blocked, all push notifications to mobile devices fail.|For specific ports, see [FCM ports and your firewall in the Google Firebase documentation](https://firebase.google.com/docs/cloud-messaging/network-configuration#messaging-ports-and-your-firewall) and [If your Apple devices aren't getting Apple push notifications](https://support.apple.com/en-us/HT203609).|Outbound server-only traffic|
7575
76
−## Related Topics
77
−
78
−[Managing Microsoft 365 endpoints](managing-office-365-endpoints.md)
79
−
80
−[Monitor Microsoft 365 connectivity](./monitor-connectivity.md)
81
−
82
−[Client connectivity](https://support.office.com/article/client-connectivity-4232abcf-4ae5-43aa-bfa1-9a078a99c78b)
83
−
84
−[Content delivery networks](https://support.office.com/article/content-delivery-networks-0140f704-6614-49bb-aa6c-89b75dcd7f1f)
85
−
86
−[Azure IP Ranges and Service Tags – Public Cloud](https://www.microsoft.com/download/details.aspx?id=56519)
87
−
88
−[Azure IP Ranges and Service Tags – US Government Cloud](https://www.microsoft.com/download/details.aspx?id=57063)
89
−
90
−[Azure IP Ranges and Service Tags – Germany Cloud](https://www.microsoft.com/download/details.aspx?id=57064)
76
+## Related content
9177
92
−[Azure IP Ranges and Service Tags – China Cloud](https://www.microsoft.com/download/details.aspx?id=57062)
93
−
94
−[Microsoft Public IP Space](https://www.microsoft.com/download/details.aspx?id=53602)
78
+- [Managing Microsoft 365 endpoints](managing-office-365-endpoints.md)
79
+- [Monitor Microsoft 365 connectivity](./monitor-connectivity.md)
80
+- [Content delivery networks](content-delivery-networks.md)
81
+- [Azure IP Ranges and Service Tags - Public Cloud](https://www.microsoft.com/download/details.aspx?id=56519)
82
+- [Azure IP Ranges and Service Tags - US Government Cloud](https://www.microsoft.com/download/details.aspx?id=57063)
83
+- [Azure IP Ranges and Service Tags - Germany Cloud](https://www.microsoft.com/download/details.aspx?id=57064)
84
+- [Azure IP Ranges and Service Tags - China Cloud](https://www.microsoft.com/download/details.aspx?id=57062)
85
+- [Microsoft Public IP Space](https://www.microsoft.com/download/details.aspx?id=53602)
Microsoft's Markdown source from MicrosoftDocs/microsoft-365-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 05:03 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.