Firewall settings: Source IP range for Ms Graph call notifications

Brass Contributor

Hi everybody,

 

we have configured a calling BOT with an Webhook (for calling) URL like
https://servername:Port/graph/notifications/calls.

Which source ip ranges do we have to open in the firewall settings for this notifications?

We need a list of all Microsoft Cloud Servers, which sends this call notifications.

 

Thanks for your help.

 

Regards

 

Gerd

 

 

 

 

 

5 Replies
@relkniw-We are looking into this I will get back to you soon.

@Sayali-MSFT 

We knew these document, but it's not helpful for us. We have opened all ports within these document.

But we are looking for the Server IP addresses for call notifications. If we make a telephone call to our bot, we get notifications from different servers:

First try the notification cames from source 40.69.26.58, then when we try again the notifications came from source 51.103.28.16.

 

These adresses are not listed in the document.

 

So every time we make a call to our bot, the source ip address of the notification changes. And we need a list of all possible source  ip adresses.

 

 

@relkniw - We are checking it engineering team and let you know if we get any updates.

@relkniw -We got confirmation from engineering team. " The bot platform services run in the public Azure cloud but we do not publish their source IP addresses. So for inbound TCP connections, the bot firewall will need to allow anything from the Azure public cloud. There is a JSON file Azure publishes with its public IP address ranges @ https://www.microsoft.com/en-us/download/details.aspx?id=56519.

If the bot is participating in audio/video calls, then it can firewall peer/source IP addresses for UDP to 52.112.0.0/14 and 13.107.64.0/18, per https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-world...
11 Optimize
Required
Yes 13.107.64.0/18, 52.112.0.0/14, 52.120.0.0/14 UDP: 3478, 3479, 3480, 3481