TCP and UDP Ports
The ports that need to be opened for inbound or outbound requests in the UDP Backup for Microsoft Office 365 are as follows:
Exchange Online:
|
ID |
Category |
ER (ExpressRoute) |
Addresses |
Ports |
|
1 |
Optimize Required |
Yes |
outlook.office.com, outlook.office365.com 13.107.6.152/31, 13.107.18.10/31, 13.107.128.0/22, 23.103.160.0/20, 40.96.0.0/13, 40.104.0.0/15, 52.96.0.0/14, 131.253.33.215/32, 132.245.0.0/16, 150.171.32.0/22, 204.79.197.215/32, 2603:1006::/40, 2603:1016::/36, 2603:1026::/36, 2603:1036::/36, 2603:1046::/36, 2603:1056::/36, 2620:1ec:4::152/128, 2620:1ec:4::153/128, 2620:1ec:c::10/128, 2620:1ec:c::11/128, 2620:1ec:d::10/128, 2620:1ec:d::11/128, 2620:1ec:8f0::/46, 2620:1ec:900::/46, 2620:1ec:a92::152/128, 2620:1ec:a92::153/128 |
TCP: 443, 80 UDP: 443 |
|
2 |
Allow Optional Note: POP3, IMAP4, and SMTP Client traffic |
Yes |
*.outlook.com, autodiscover.<tenant>.onmicrosoft.com |
TCP: 587, 993, 995, 143 |
|
8 |
Default Required |
No |
*.outlook.com, autodiscover.<tenant>.onmicrosoft.com |
TCP: 443, 80 |
|
9 |
Allow Required |
Yes |
*.protection.outlook.com 40.92.0.0/15, 40.107.0.0/16, 52.100.0.0/14, 52.238.78.88/32, 104.47.0.0/17, 2a01:111:f400::/48, 2a01:111:f403::/48 |
TCP: 443 |
|
10 |
Allow Required |
Yes |
*.mail.protection.outlook.com 40.92.0.0/15, 40.107.0.0/16, 52.100.0.0/14, 104.47.0.0/17, 2a01:111:f400::/48, 2a01:111:f403::/48 |
TCP: 25 |
SharePoint Online and OneDrive for Business:
|
ID |
Category |
ER |
Addresses |
Ports |
|
31 |
Optimize Required |
No |
*.sharepoint.com 13.107.136.0/22, 40.108.128.0/17, 52.104.0.0/14, 104.146.128.0/17, 150.171.40.0/22, 2603:1061:1300::/40, 2620:1ec:8f8::/46, 2620:1ec:908::/46, 2a01:111:f402::/48 |
TCP: 443, 80 |
|
32 |
Default Optional Note: OneDrive for Business: supportability, telemetry, APIs, and embedded email links |
No |
ssw.live.com, storage.live.com |
TCP: 443 |
|
33 |
Default Optional Note: SharePoint Hybrid Search - Endpoint to SearchContentService where the hybrid crawler feeds documents |
No |
*.search.production.apac.trafficmanager.net, *.search.production.emea.trafficmanager.net, *.search.production.us.trafficmanager.net |
TCP: 443, 80 |
|
35 |
Default Required |
No |
*.wns.windows.com, admin.onedrive.com, officeclient.microsoft.com |
TCP: 443 |
|
36 |
Default Required |
No |
g.live.com, oneclient.sfx.ms |
TCP: 443, 80 |
|
37 |
Default Required |
No |
*.sharepointonline.com, spoprod-a.akamaihd.net |
TCP: 443, 80 |
|
39 |
Default Required |
No |
*.svc.ms |
TCP: 443, 80 |