Forum Discussion

relkniw's avatar
relkniw
Brass Contributor
Mar 07, 2022

Firewall settings: Source IP range for Ms Graph call notifications

Hi everybody,   we have configured a calling BOT with an Webhook (for calling) URL like https://servername:Port/graph/notifications/calls. Which source ip ranges do we have to open in the firew...
Graph API
microsoft teams
Sayali-MSFT's avatar
Sayali-MSFT
Icon for Microsoft rankMicrosoft
relkniw - We are checking it engineering team and let you know if we get any updates.
Sayali-MSFT's avatar
Sayali-MSFT
Icon for Microsoft rankMicrosoft
Mar 21, 2022

@relkniw -We got confirmation from engineering team. " The bot platform services run in the public Azure cloud but we do not publish their source IP addresses. So for inbound TCP connections, the bot firewall will need to allow anything from the Azure public cloud. There is a JSON file Azure publishes with its public IP address ranges @ https://www.microsoft.com/en-us/download/details.aspx?id=56519.

If the bot is participating in audio/video calls, then it can firewall peer/source IP addresses for UDP to 52.112.0.0/14 and 13.107.64.0/18, per https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide#skype-for-business-online-and-microsoft-teams "
11 Optimize
Required		 Yes 13.107.64.0/18, 52.112.0.0/14, 52.120.0.0/14 UDP: 3478, 3479, 3480, 3481

Resources