Forum Discussion

Brass Contributor

Mar 07, 2022

Firewall settings: Source IP range for Ms Graph call notifications

Hi everybody, we have configured a calling BOT with an Webhook (for calling) URL like https://servername:Port/graph/notifications/calls. Which source ip ranges do we have to open in the firew...

Graph API

microsoft teams

relkniw

Brass Contributor

Mar 09, 2022

Sayali-MSFT

We knew these document, but it's not helpful for us. We have opened all ports within these document.

But we are looking for the Server IP addresses for call notifications. If we make a telephone call to our bot, we get notifications from different servers:

First try the notification cames from source 40.69.26.58, then when we try again the notifications came from source 51.103.28.16.

These adresses are not listed in the document.

So every time we make a call to our bot, the source ip address of the notification changes. And we need a list of all possible source ip adresses.

Sayali-MSFT

Microsoft

Mar 10, 2022

relkniw - We are checking it engineering team and let you know if we get any updates.

Sayali-MSFT
Microsoft
Mar 21, 2022
@relkniw -We got confirmation from engineering team. " The bot platform services run in the public Azure cloud but we do not publish their source IP addresses. So for inbound TCP connections, the bot firewall will need to allow anything from the Azure public cloud. There is a JSON file Azure publishes with its public IP address ranges @ https://www.microsoft.com/en-us/download/details.aspx?id=56519.

If the bot is participating in audio/video calls, then it can firewall peer/source IP addresses for UDP to 52.112.0.0/14 and 13.107.64.0/18, per https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide#skype-for-business-online-and-microsoft-teams "

11 Optimize
Required Yes 13.107.64.0/18, 52.112.0.0/14, 52.120.0.0/14 UDP: 3478, 3479, 3480, 3481