TCP and UDP Ports

The ports that need to be opened for inbound or outbound requests in the UDP Backup for Microsoft Office 365 are as follows:

Exchange Online:

ID

Category

ER (ExpressRoute)

Addresses

Ports

1

Optimize Required

Yes

outlook.office.com, outlook.office365.com 13.107.6.152/31, 13.107.18.10/31, 13.107.128.0/22, 23.103.160.0/20, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 131.253.33.215/32, 132.245.0.0/16, 150.171.32.0/22, 204.79.197.215/32, 2603:1006::/40, 2603:1016::/36, 2603:1026::/36, 2603:1036::/36, 2603:1046::/36, 2603:1056::/36, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128

TCP: 443, 80

UDP: 443

2

Allow Optional

Note: POP3, IMAP4, and SMTP Client traffic

Yes

*.outlook.com, autodiscover.<tenant>.onmicrosoft.com

TCP: 587, 993, 995, 143

8

Default Required

No

*.outlook.com, autodiscover.<tenant>.onmicrosoft.com

TCP: 443, 80

9

Allow Required

Yes

*.protection.outlook.com

40.92.0.0/15, 40.107.0.0/16, 52.100.0.0/14, 52.238.78.88/32, 104.47.0.0/17, 2a01:111:f400::/48, 2a01:111:f403::/48

TCP: 443

10

Allow Required

Yes

*.mail.protection.outlook.com

40.92.0.0/15, 40.107.0.0/16, 52.100.0.0/14, 104.47.0.0/17, 2a01:111:f400::/48, 2a01:111:f403::/48

TCP: 25

SharePoint Online and OneDrive for Business:

ID

Category

ER

Addresses

Ports

31

Optimize Required

No

*.sharepoint.com

13.107.136.0/22, 40.108.128.0/17, 52.104.0.0/14, 104.146.128.0/17, 150.171.40.0/22, 2603:1061:1300::/40, 2620:1ec:8f8::/46, 2620:1ec:908::/46, 2a01:111:f402::/48

TCP: 443, 80

32

Default Optional

Note: OneDrive for Business: supportability, telemetry, APIs, and embedded email links

No

ssw.live.com, storage.live.com

TCP: 443

33

Default Optional

Note: SharePoint Hybrid Search - Endpoint to SearchContentService where the hybrid crawler feeds documents

No

*.search.production.apac.trafficmanager.net, *.search.production.emea.trafficmanager.net, *.search.production.us.trafficmanager.net

TCP: 443, 80

35

Default Required

No

*.wns.windows.com, admin.onedrive.com, officeclient.microsoft.com

TCP: 443

36

Default Required

No

g.live.com, oneclient.sfx.ms

TCP: 443, 80

37

Default Required

No

*.sharepointonline.com, spoprod-a.akamaihd.net

TCP: 443, 80

39

Default Required

No

*.svc.ms

TCP: 443, 80