Updated IP ranges and ports for Skype for Business Online
Published Feb 21 2017 08:19 AM 85.5K Views
Microsoft

Note: We updated our port requirements. For more details see: Simplified port requirements for Skype for Business Online

 

Updated IP ranges and ports for Skype for Business Online 

We heard from some of our customers recently, that the number of IP ranges and ports required for Skype for Business make it complex to configure firewalls. To address this feedback, Microsoft decided to perform several optimizations to simplify the requirements.

 

Skype for Business Online has a significant infrastructure, so while we have started with these changes, it will take some time to be completed. We strongly recommend to open the IP subnets and ports today, to avoid any negative impact to connectivity.

 

  • New IP ranges: We already started to move the Skype for Business infrastructure to new  ranges. The ranges are required in addition to the existing ranges, so remember to open all IP ranges documented in Office 365 URLs and IP address ranges.
  • New ports: While this might take a little bit more time than the new IP ranges, we will leverage the following ports for media traffic in addition to the existing ports:
    • UDP 3479
    • UDP 3480
    • UDP 3481

Please note that the complete list of IP ranges and ports can be found at Office 365 URLs and IP address ranges.The changes to the IP and port ranges were added in August, but now is a great time to go back and review your firewall and other security devices to ensure they are being allowed as we move ahead with the deployment.

 

Note: Though the plan is to move to these new smaller ranges, it’s possible due to the requirements for growth in the environment that the team may add new IP addresses outside of the current ranges before the consolidation is complete.

 

Call to action:

  1. Verify that your firewall is configured for all IP ranges and ports as documented in Office 365 URLs and IP address ranges – and open them if you have not done it yet.
  2. If you are a partner, get sure to update your firewall design templates.
  3. Follow this blog and the Office 365 URLs and IP address ranges to learn when you must add new IP ranges or when you can close some of the ranges that are not required anymore.

 

5 Comments
Version history
Last update:
‎Jan 19 2018 08:14 AM
Updated by: