Skype for Business Online
To use Skype for Business Online, you must first enable endpoints for authentication as well as the Microsoft 365 portal and shared service. You must also ensure the endpoints in the Skype for Business Online FQDN and IP Address tables are reachable. To see the IP addresses, expand the IP address section below the table describing the traffic flow. Keep in mind that wildcards represent all possible sub-domains under the root.
Row |
Purpose |
Source | Credentials |
Destination |
ExpressRoute for Office 365 BGP Communities |
CIDR Address |
Port |
1 |
Required: suite-wide services. |
see Microsoft 365 required entries for shared services, authentication, and Office Online |
||||
2 |
Required: Skype for Business client -Signaling |
client computer | logged on user |
|
yes |
TCP 80 & 443 |
|
3 |
Required: Skype for Business Client - Media Services |
client computer | logged on user |
These IPs are used by media without explicit FQDN mappings. |
yes |
|
TCP 443, UDP 3478-3481 |
4 |
Optional: Skype for Business – Hybrid media |
client computer | logged on user |
These IPs are used by media without explicit FQDN mappings. |
yes |
|
TCP & UDP 50,000-59,999 |
5 |
Required: Skype for Business CDNs |
client computer | logged on user |
|
no |
N/A |
TCP 80 & 443 |
6 |
Required: Skype for Business client quick tips |
client computer | logged on user |
|
no |
N/A. |
TCP 443 |
7 |
Optional: Federation with Skype and public IM connectivity: Contact picture retrieval |
client computer | logged on user |
|
no |
TCP 443 |
|
7 |
Optional: Applies only to those who deploy the Conference Room Systems |
conference room devices /logged on users |
|
no |
N/A |
TCP 80, 443 |