Office 365 URLs and IP address ranges
Applies to: Office 365 Enterprise
Topic Last Modified: 2014-06-25
Summary: Lists the URLs and IP address ranges used by Office 365 and provides links to RSS feeds that help you stay up-to-date on the latest changes.
Subscribe via RSS to receive notice when updates are made to this topic.
Office 365 is designed to provide high speed and highly reliable access to the end users of all customers around the world. To accomplish this basic requirement of cloud services, Office 365 leverages regional datacenters, dynamic IP address ranges, and Content Delivery Networks (CDNs). This design is similar to other scalable enterprise cloud services and contributes to the stringent security, speed, and availability that enterprise customers require. This design does not lend itself to filtering at the firewall, yet we understand that some customers prefer to use filtering to access Office 365.
For those customers, we try to maintain the information below to help you manage filtering for the non-browser based clients. We can’t provide filtering information for CDNs, and we don’t differentiate regional services. If you would like to understand more about CDNs and regional datacenters, please see our further explanation of Reference: Content delivery networks and Reference: Client connectivity.
To be notified of future changes to the list below, you should Subscribe to the RSS feed. If you want to see just the changes, we keep those with date stamps in the Change notification for Office 365 URLs and IP address ranges article.
To successfully manage filtering, clients need to connect to the URLs/IP Addresses listed for each service. In addition to the Office 365 URLs/IP Addresses, each service is listed separately. It is important that clients can connect to the Office 365 URLs/IP Addresses as well as the URLs/IP Addresses for each licensed service (Such as Exchange Online, SharePoint Online, Lync Online, and Office 365 ProPlus). It is also important to include the URLs in the client’s Internet Explorer Trusted Sites Zone.
| URL filtering is a better solution than IP filtering. |
To use Office 365, you must be able to reach these URLs/IP Addresses. If you have licensed additional services or purchased a suite license, you will also need to allow access to the Exchange Online, SharePoint Online, Lync Online, and Office 365 ProPlus services. These services will require both port 80 & port 443. This list of URLs and IP Addresses include both Office 365 portal and Azure Active Directory resources.
| Office 365 URLs | Office 365 IPv4 Addresses | Office 365 IPv6 Addresses |
|---|---|---|
|
*.aadrm.com *.activedirectory.windowsazure.com *.glbdns.microsoft.com *.live.com *.lync.com *.microsoft.com *.microsoftonline.com *.microsoftonline-p.com *.microsoftonline-p.net *.microsoftonlineimages.com *.microsoftonlinesupport.net¹ *.msecnd.net *.msocdn.com *.msn.com *.msn.co.jp *.msn.co.uk *.onmicrosoft.com *.office.com *.office.net *.office365.com *.officeapps.live.com *.outlook.com *.phonefactor.net *.Sharepoint.com *.Sharepointonline.com |
23.96.208.238 23.97.64.252 23.97.68.113 23.97.70.147 23.97.72.158 23.97.72.161 23.97.72.165 23.97.148.36 23.97.148.228 23.98.66.168 23.98.69.116 23.98.70.90 65.52.64.61 65.52.64.230 65.52.136.224 65.52.144.125 65.52.148.27 65.52.184.75 65.52.196.64 65.52.208.73 65.52.228.75 65.52.228.100 65.52.236.160 65.52.240.233 65.52.244.66 65.54.54.32/27 65.54.55.201 65.54.74.0/23 65.54.80.0/20 65.54.165.0/25 65.55.86.0/23 65.55.233.0/27 65.55.239.168 70.37.56.152 70.37.97.234 70.37.128.0/23 70.37.142.0/23 70.37.159.0/24 70.37.160.72 70.37.160.202 94.245.68.0/22 94.245.82.0/23 94.245.84.0/24 94.245.86.0/24 94.245.88.223 94.245.88.194 94.245.117.53 94.245.108.85 111.221.16.0/21 111.221.24.0/21 111.221.70.0/25 111.221.71.0/25 111.221.111.196 111.221.127.112/28 132.245.0.0/16 137.135.47.6 137.135.47.4 137.135.47.28 137.116.129.62/32 137.117.99.175 137.117.103.21 137.135.41.12/32 137.135.42.195/32 137.135.43.100/32 137.135.44.5/32 137.135.44.73/32 137.135.48.128/32 157.55.59.128/25 157.55.80.175 157.55.80.182 157.55.84.13/32 157.55.84.19/32 157.55.84.80/32 157.55.84.237/32 157.55.130.0/25 157.55.145.0/25 157.55.155.0/25 157.55.168.18 157.55.176.63 157.55.185.100 157.55.194.46 157.55.208.198 157.55.227.192/26 157.55.252.101 157.56.0.0/16 168.61.33.178/32 168.61.35.252/32 168.61.36.121 168.61.37.63/32 168.61.38.105 168.61.39.14/32 168.61.82.81/32 168.61.83.48/32 168.61.85.180/32 168.61.85.193/32 168.62.4.28 168.62.11.24 168.62.11.117 168.62.16.112 168.62.16.140 168.62.16.149 168.62.24.104 168.62.24.114 168.62.24.150 168.62.41.25 168.62.42.89 168.62.52.198 168.62.52.203 168.62.60.71 168.62.60.80 168.62.104.146 168.62.176.34 168.62.180.151 168.63.16.66/32 168.63.16.112/32 168.63.16.114/32 168.63.17.221/32 168.63.25.227 168.63.27.2 168.63.166.200 168.63.165.67 168.63.164.177 168.63.208.73/32 168.63.213.203/32 168.63.214.35/32 168.63.216.117/32 168.63.250.173/32 168.63.252.39/32 168.63.252.71/32 191.234.6.0/24 191.235.135.139 191.235.135.222 207.46.57.128/25 207.46.70.0/24 207.46.73.250 207.46.198.0/25 207.46.206.0/23 207.46.216.54 213.199.128.58 213.199.128.91 213.199.148.0/23 213.199.182.128/25 |
2a01:111:f406:1000::/64 2a01:111:f406:1801::/64 |
¹ Only outbound ports for 80 and 443.
In addition to the list of URLs/IP Addresses for Office 365, the following must be accessible for Exchange Online to work.
The Microsoft Federation Gateway is used with Exchange Online under the following circumstances:
-
Federated delegation For more information, see Configure Federated Delegation in the Cloud.
-
Hybrid deployments For more information, see Exchange Hybrid Deployment and Migration with Office 365.
| Exchange Online IP Addresses | The Microsoft Federation Gateway IP Addresses |
|---|---|
|
65.54.62.0/25 65.55.39.128/25 65.55.78.128/25 65.55.94.0/25 65.55.113.64/26 65.55.126.0/25 65.55.174.0/25 65.55.181.128/25 70.37.151.128/25 94.245.117.128/25 111.221.66.0/25 111.221.69.128/25 111.221.112.0/21 191.234.192.0/19 157.55.9.128/25 157.55.11.0/25 157.55.47.0/24 157.55.49.0/24 157.55.61.0/24 157.55.157.128/25 157.55.224.128/25 157.55.225.0/25 207.46.4.128/25 207.46.58.128/25 207.46.203.128/26 213.199.174.0/25 213.199.177.0/26 |
207.46.150.128/25 207.46.164.0/24 |
In addition to the list of URLs/IP Addresses for Office 365, the following must be accessible for Lync Online to work.
| Lync Online URLs | Lync Online IPv4 Addresses |
|---|---|
|
ev-secure.verisign.com evsecure-ocsp.verisign.com evsecure-aia.verisign.com evsecure-crl.verisign.com sa.symcb.com |
65.54.54.128/25 65.55.121.128/27 65.55.127.0/24 111.221.17.128/27 111.221.22.64/26 111.221.23.0/25 111.221.76.96/27 111.221.76.128/25 111.221.77.0/26 134.170.0.0/16 157.55.40.128/25 157.55.46.0/27 157.55.46.64/26 157.55.104.96/27 157.55.229.128/27 157.55.232.128/26 157.55.238.0/25 207.46.5.0/24 207.46.7.128/27 207.46.57.0/25 |
In addition to the list of URLs/IP Addresses for Office 365, the following must be accessible for SharePoint Online to work.
| SharePoint Online |
|---|
In addition to the list of URLs/IP Addresses for Office 365, the following must be accessible for FOPE & EOP to work.
| Forefront Online Protection for Exchange | Exchange Online Protection |
|---|---|
| Forefront Online Protection for Exchange Online URLs and IP Address Ranges |
This list of IPv4 IP Addresses is the current list used by the Office 365 remote analyzer tools.
| Office 365 remote analyzer tools IP Addresses |
|---|
|
65.55.150.61 65.55.150.158 65.55.150.160 134.170.52.122 134.170.52.123 134.170.52.124 157.56.138.141 157.56.138.142 157.56.138.143 207.46.14.52 207.46.14.62 207.46.14.63 |
This list of URLs/IPv4 IP Addresses is the current list required to connect to all Yammer services.
| Yammer URLs | Yammer IPv4 Addresses |
|---|---|
|
*.amazonaws.com *.cloudfront.net *.cotssl.net *.edgekey.net *.yammer.com *.yammerusercontent.com *.assets-yammer.com |
204.152.18.0/23 |
This list of URLs/IPv4 IP Addresses is the current list required for Office 365 ProPlus.
| Office 365 ProPlus URLs | Office 365 ProPlus IPv4 Addresses |
|---|---|
|
https://activation.sls.microsoft.com http://crl.microsoft.com/pki/crl/products/MicrosoftProductSecureServer.crl http://crl.microsoft.com/pki/crl/products/MicrosoftRootAuthority.crl http://crl.microsoft.com/pki/crl/products/MicrosoftProductSecureCommunicationsPCA.crl http://www.microsoft.com/pki/crl/products/MicrosoftProductSecureCommunicationsPCA.crl https://odc.officeapps.live.com https://ols.officeapps.live.com/olsc http://officecdn.microsoft.com go.microsoft.com office15client.microsoft.com sls.microsoft.com |
65.52.98.231:443 157.55.44.71:443 157.55.160.109:443 |
In addition to the list of URLs/IP Addresses for Office 365, the following must be accessible for Office Online to work.
| Office Online IPv4 Addresses | Office Online IPv6 Addresses |
|---|---|
|
131.170.0.0/16 |
2a01:111:f406:8800::/64 2a01:111:f406:400::/64 2a01:111:f406:9400::/64 2a01:111:f406:2402::/64 2a01:111:f406:a804::/64 |