SOLVED

Skype for Business Network Assessment Tool & network 52.114.*.*

%3CLINGO-SUB%20id%3D%22lingo-sub-182947%22%20slang%3D%22en-US%22%3ESkype%20for%20Business%20Network%20Assessment%20Tool%20%26amp%3B%20network%2052.114.*.*%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-182947%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20document%20-%26nbsp%3B%3CA%20title%3D%22Office%20365%20URLs%20and%20IP%20address%20ranges%22%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FOffice-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2%23bkmk_sfb_ip%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3EOffice%20365%20URLs%20and%20IP%20address%20ranges%3C%2FA%3E%20lists%20IP%20addresses%20used%20by%20the%20Skype%20for%20Business%20Service.%20Running%20the%26nbsp%3B%3CA%20title%3D%22Skype%20for%20Business%20Network%20Assessment%20Tool%22%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fdownload%2Fconfirmation.aspx%3Fid%3D53885%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3ESkype%20for%20Business%20Network%20Assessment%20Tool%3C%2FA%3E%20fails%20on%20a%20range%20of%20addresses%20that%20are%20not%20mentioned%20in%20that%20document%20-%20is%20there%20an%20updated%20version%20of%20the%20tool%20available%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%3E%3CFONT%3EPlease%20check%20if%20IP%2052.114.6.0%20is%20reachable%20using%20UDP%20on%20Port%203478%3CBR%20%2F%3EPlease%20check%20if%20IP%2052.114.14.0%20is%20reachable%20using%20UDP%20on%20Port%203478%3CBR%20%2F%3EPlease%20check%20if%20IP%2052.114.76.1%20is%20reachable%20using%20UDP%20on%20Port%203478%3CBR%20%2F%3EPlease%20check%20if%20IP%2052.114.74.3%20is%20reachable%20using%20UDP%20on%20Port%203478%3CBR%20%2F%3EPlease%20check%20if%20IP%2052.114.142.1%20is%20reachable%20using%20UDP%20on%20Port%203478%3CBR%20%2F%3EPlease%20check%20if%20IP%2052.114.158.13%20is%20reachable%20using%20UDP%20on%20Port%203478%3CBR%20%2F%3EPlease%20ensure%20your%20firewall%20allows%20connections%20to%20the%20following%20domains%3A%20*.cc.skype.com%3C%2FFONT%3E%3C%2FDIV%3E%3CDIV%3E%3CFONT%3EVerifications%20failed.%3CBR%20%2F%3E%3C%2FFONT%3E%3C%2FDIV%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIan%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-182947%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EDeployment%20%26amp%3B%20Operations%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDesktop%20Client%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMonitoring%20%26amp%3B%20Reporting%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-265636%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Network%20Assessment%20Tool%20%26amp%3B%20network%2052.114.*.*%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-265636%22%20slang%3D%22en-US%22%3EThank's%2C%20I%20found%20the%20error%20and%20the%20missmatch%20in%20the%20firewall.%20And%20sorry%20for%20the%20confusion%20with%20the%20mask%20of%20IP%20address!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-265617%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Network%20Assessment%20Tool%20%26amp%3B%20network%2052.114.*.*%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-265617%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F168039%22%20target%3D%22_blank%22%3E%40Martin%20Alter%3C%2FA%3E%2C%20you%20need%20to%20use14%20as%20the%20%22mask%20bits%22%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20748px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F55250i5B0282554225D6CD%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22subnets.PNG%22%20title%3D%22subnets.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-265580%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Network%20Assessment%20Tool%20%26amp%3B%20network%2052.114.*.*%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-265580%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F15786%22%20target%3D%22_blank%22%3E%40Thomas%20Binder%3C%2FA%3E%26nbsp%3BI%20see%20some%20IPs%20from%20range%26nbsp%3B52.114.*.*.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-265571%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Network%20Assessment%20Tool%20%26amp%3B%20network%2052.114.*.*%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-265571%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F168039%22%20target%3D%22_blank%22%3E%40Martin%20Alter%3C%2FA%3E%2C%20which%20IP%20address%20do%20you%20see%20blocked%20or%20not%20listed%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-265003%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Network%20Assessment%20Tool%20%26amp%3B%20network%2052.114.*.*%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-265003%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F15786%22%20target%3D%22_blank%22%3E%40Thomas%20Binder%3C%2FA%3E%2C%3C%2FP%3E%3CP%3EI%20have%20the%20same%20problem%20with%20the%20IP%26nbsp%3B%3CSPAN%3Eaddresses%20and%20blocked%20connections%20in%20Microsoft%20Teams.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EI%20can%20not%20follow%20your%20answer%2C%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3EIf%20i%20check%20the%20ip%20calculator%20I%20see%20not%20the%20range%2052.112.0.1%20-%2052.115.255.254%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EMaybe%20you%20can%20tell%20me%20more%20details%20about%20the%20ip%20range.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3Eregards%2C%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EMartin%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-183639%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Network%20Assessment%20Tool%20%26amp%3B%20network%2052.114.*.*%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-183639%22%20slang%3D%22en-US%22%3E%3CP%3EExcellent%2C%20thanks%20Thomas%2C%20can%20confirm%20the%20tool%20is%20now%20working%20as%20expected.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20to%20our%20specific%20issue%20with%20screen%20sharing%20this%20was%20down%20to%20the%20Fortigate%20firewalls%20using%20SSL%20inspection%20for%20the%20Skype%20packets.%20Fixed%20by%20creating%20a%20policy%20to%20ignore%20this%20for%20the%20destination%20networks%20mentioned%20in%20the%20document%20referenced%20in%20this%20discussion.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-183637%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Network%20Assessment%20Tool%20%26amp%3B%20network%2052.114.*.*%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-183637%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F3119%22%20target%3D%22_blank%22%3E%40Ian%20Moran%3C%2FA%3E%2C%20thanks%20again%20for%20reporting.%20The%20issue%20should%20now%20be%20resolved%20and%20you%20should%20not%20see%20these%20errors%20anymore.%20I%20hope%20this%20did%20not%20cause%20too%20much%20inconvenience.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-183094%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Network%20Assessment%20Tool%20%26amp%3B%20network%2052.114.*.*%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-183094%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F3119%22%20target%3D%22_blank%22%3E%40Ian%20Moran%3C%2FA%3E%2C%20thanks%20for%20reporting%20the%20issue%2C%20we%20are%20working%20to%20fix%20it.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-183056%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Network%20Assessment%20Tool%20%26amp%3B%20network%2052.114.*.*%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-183056%22%20slang%3D%22en-US%22%3E%3CP%3EI%20can%20confirm%20that%20they%20are%20failing%20for%20me%20as%20well.%20I%20will%20follow%20up%20with%20the%20team.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-183009%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Network%20Assessment%20Tool%20%26amp%3B%20network%2052.114.*.*%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-183009%22%20slang%3D%22en-US%22%3E%3CP%3EThat%20same%20range%20is%20failing%20from%20several%20locations%2Ftenants%20here%20in%20the%20UK%20where%20the%20firewalls%20have%20been%20configured%20to%20allow%20connections%20to%20all%20destinations%20on%20UDP%203478%2C%203479%2C%203480%20%26amp%3B%203481%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEverything%20appears%20to%20be%20working%20but%20on%20one%20site%20we%20were%20having%20intermittent%20issues%20with%20screen%20sharing%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-183001%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Network%20Assessment%20Tool%20%26amp%3B%20network%2052.114.*.*%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-183001%22%20slang%3D%22en-US%22%3E%3CP%3EAh%20of%20course%2C%20thanks%20Thomas.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-182991%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Network%20Assessment%20Tool%20%26amp%3B%20network%2052.114.*.*%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-182991%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F3119%22%20target%3D%22_blank%22%3E%40Ian%20Moran%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E52.112.0.0%2F14%3C%2FSPAN%3E%20is%20listed%20on%26nbsp%3B%3CA%20title%3D%22Office%20365%20URLs%20and%20IP%20address%20ranges%22%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FOffice-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2%23bkmk_sfb_ip%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3EOffice%20365%20URLs%20and%20IP%20address%20ranges%3C%2FA%3E.%20This%20range%20goes%20from%26nbsp%3B52.112.0.1%20-%2052.115.255.254%20and%20includes%20the%20IP%20addresses%20you%20asked%20below%20(I%20used%26nbsp%3B%3CA%20href%3D%22http%3A%2F%2Fwww.subnet-calculator.com%2Fsubnet.php%3Fnet_class%3DA%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ethis%20subnet%20calculator%3C%2FA%3E).%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ehth%2C%3C%2FP%3E%0A%3CP%3Ethomas%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1348566%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Network%20Assessment%20Tool%20%26amp%3B%20network%2052.114.*.*%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1348566%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F15786%22%20target%3D%22_blank%22%3E%40Thomas%20Binder%3C%2FA%3E%26nbsp%3B%20Hi%20Thomas.%20Can%20you%20share%20about%20this%20issue%20for%20us%3F%26nbsp%3B%20We%20still%20have%20the%20same%20problem%20when%20use%20Network%20Testing%20Companion%20Tools.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1348572%22%20slang%3D%22en-US%22%3ERe%3A%20Skype%20for%20Business%20Network%20Assessment%20Tool%20%26amp%3B%20network%2052.114.*.*%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1348572%22%20slang%3D%22en-US%22%3EHi%20lan.%20Can%20you%20share%20us%20more%20information%20about%20how%20you%20fixed%20this%20issue%3F%3CBR%20%2F%3EWe%20also%20use%20Fortigate%20Firewall.....%20Thanks%3C%2FLINGO-BODY%3E
Regular Contributor

The document - Office 365 URLs and IP address ranges lists IP addresses used by the Skype for Business Service. Running the Skype for Business Network Assessment Tool fails on a range of addresses that are not mentioned in that document - is there an updated version of the tool available ?

 

Please check if IP 52.114.6.0 is reachable using UDP on Port 3478
Please check if IP 52.114.14.0 is reachable using UDP on Port 3478
Please check if IP 52.114.76.1 is reachable using UDP on Port 3478
Please check if IP 52.114.74.3 is reachable using UDP on Port 3478
Please check if IP 52.114.142.1 is reachable using UDP on Port 3478
Please check if IP 52.114.158.13 is reachable using UDP on Port 3478
Please ensure your firewall allows connections to the following domains: *.cc.skype.com
Verifications failed.

 

Ian

 

14 Replies
best response confirmed by Thomas Binder (Microsoft)
Solution

Hi @Ian Moran,

52.112.0.0/14 is listed on Office 365 URLs and IP address ranges. This range goes from 52.112.0.1 - 52.115.255.254 and includes the IP addresses you asked below (I used this subnet calculator).

 

hth,

thomas 

Ah of course, thanks Thomas.

That same range is failing from several locations/tenants here in the UK where the firewalls have been configured to allow connections to all destinations on UDP 3478, 3479, 3480 & 3481

 

Everything appears to be working but on one site we were having intermittent issues with screen sharing

I can confirm that they are failing for me as well. I will follow up with the team.

@Ian Moran, thanks for reporting the issue, we are working to fix it.

@Ian Moran, thanks again for reporting. The issue should now be resolved and you should not see these errors anymore. I hope this did not cause too much inconvenience. 

Excellent, thanks Thomas, can confirm the tool is now working as expected.

 

As to our specific issue with screen sharing this was down to the Fortigate firewalls using SSL inspection for the Skype packets. Fixed by creating a policy to ignore this for the destination networks mentioned in the document referenced in this discussion.

 

 

Hi @Thomas Binder,

I have the same problem with the IP addresses and blocked connections in Microsoft Teams.

I can not follow your answer, If i check the ip calculator I see not the range 52.112.0.1 - 52.115.255.254

 

Maybe you can tell me more details about the ip range.

 

regards,

Martin

@Martin Alter, which IP address do you see blocked or not listed?

@Thomas Binder I see some IPs from range 52.114.*.*. 

@Martin Alter, you need to use14 as the "mask bits":

 

subnets.PNG

Thank's, I found the error and the missmatch in the firewall. And sorry for the confusion with the mask of IP address!

@Thomas Binder  Hi Thomas. Can you share about this issue for us?  We still have the same problem when use Network Testing Companion Tools.

Hi lan. Can you share us more information about how you fixed this issue?
We also use Fortigate Firewall..... Thanks