TCP and UDP Ports
The ports that need to be opened for inbound or outbound requests in the UDP Backup for Microsoft Office 365 are as follows:
Exchange Online:
ID |
Category |
ER (ExpressRoute) |
Addresses |
Ports |
1 |
Optimize Required |
Yes |
outlook.office.com, outlook.office365.com 13.107.6.152/31, 13.107.18.10/31, 13.107.128.0/22, 23.103.160.0/20, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 131.253.33.215/32, 132.245.0.0/16, 150.171.32.0/22, 204.79.197.215/32, 2603:1006::/40, 2603:1016::/36, 2603:1026::/36, 2603:1036::/36, 2603:1046::/36, 2603:1056::/36, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128 |
TCP: 443, 80 UDP: 443 |
2 |
Allow Optional Note: POP3, IMAP4, and SMTP Client traffic |
Yes |
*.outlook.com, autodiscover.<tenant>.onmicrosoft.com |
TCP: 587, 993, 995, 143 |
8 |
Default Required |
No |
*.outlook.com, autodiscover.<tenant>.onmicrosoft.com |
TCP: 443, 80 |
9 |
Allow Required |
Yes |
*.protection.outlook.com 40.92.0.0/15, 40.107.0.0/16, 52.100.0.0/14, 52.238.78.88/32, 104.47.0.0/17, 2a01:111:f400::/48, 2a01:111:f403::/48 |
TCP: 443 |
10 |
Allow Required |
Yes |
*.mail.protection.outlook.com 40.92.0.0/15, 40.107.0.0/16, 52.100.0.0/14, 104.47.0.0/17, 2a01:111:f400::/48, 2a01:111:f403::/48 |
TCP: 25 |
SharePoint Online and OneDrive for Business:
ID |
Category |
ER |
Addresses |
Ports |
31 |
Optimize Required |
No |
*.sharepoint.com 13.107.136.0/22, 40.108.128.0/17, 52.104.0.0/14, 104.146.128.0/17, 150.171.40.0/22, 2603:1061:1300::/40, 2620:1ec:8f8::/46, 2620:1ec:908::/46, 2a01:111:f402::/48 |
TCP: 443, 80 |
32 |
Default Optional Note: OneDrive for Business: supportability, telemetry, APIs, and embedded email links |
No |
ssw.live.com, storage.live.com |
TCP: 443 |
33 |
Default Optional Note: SharePoint Hybrid Search - Endpoint to SearchContentService where the hybrid crawler feeds documents |
No |
*.search.production.apac.trafficmanager.net, *.search.production.emea.trafficmanager.net, *.search.production.us.trafficmanager.net |
TCP: 443, 80 |
35 |
Default Required |
No |
*.wns.windows.com, admin.onedrive.com, officeclient.microsoft.com |
TCP: 443 |
36 |
Default Required |
No |
g.live.com, oneclient.sfx.ms |
TCP: 443, 80 |
37 |
Default Required |
No |
*.sharepointonline.com, spoprod-a.akamaihd.net |
TCP: 443, 80 |
39 |
Default Required |
No |
*.svc.ms |
TCP: 443, 80 |