Office 365 U.S. Government GCC High endpoints

Summary:    Office 365 requires connectivity to the Internet. The endpoints below should be reachable for customers using Office 365 U.S. Government GCC High plans only.

Office 365 endpoints: Worldwide (including GCC) | Office 365 operated by 21 Vianet | Office 365 Germany | Office 365 U.S. Government DoD | Office 365 U.S. Government GCC High |

Last updated: 10/31/2017 - RSS Change Log subscription

Download: the full list in XML format

Start with managing Office 365 endpoints to understand our recommendations. Except for emergency changes, endpoints are updated at the end of each month.

Important: Destination endpoints may be listed as an IP addresses only, FQDN/URI only, or a combination of the two. Office 365 depends on internet based services such as Microsoft owned cloud services with dynamic addressing, Domain Name Services (DNS), Content Delivery Networks (CDN), Certificate Revocation Lists (CRL), and other third party services where no IP addresses are available. Where IP or FQDN information is not available, we've marked them as Not Available (N/A) in the tables below.

Office 365 U.S. Government GCC High endpoints

The endpoints listed as a Yes in the ExpressRouteGov for Office 365 column are available both over the internet and over ExpressRoute for Government configured. If you plan to use Azure AD Connect, read the special considerations section to ensure you have the appropriate AAD Connect configuration.

Service

IPv4 addresses

IPv6 addresses

FQDN/URL

ExpressRouteGov for Office 365

Ports

Office 365 admin portal and Office Home

13.72.179.48/32
13.72.188.8/32
52.227.167.206/32
52.227.170.242/32
N/A
portal.office365.us
www.office365.us

yes

TCP 80 & 443

Office 365 admin portal and Office Home CDN

N/A
N/A
officehome.msocdn.us
prod.msocdn.us

no

TCP 80 & 443

Identity management

157.56.53.128/25
157.55.59.128/25
157.56.58.0/25
157.56.151.0/25
131.253.120.0/24
13.71.201.64/26
13.72.17.49/32
13.72.18.116/32
13.72.18.212/32
13.72.18.216/32
13.72.18.221/32
13.72.19.9/32
13.72.19.36/32
13.72.20.4/32
13.72.23.54/32
13.72.49.238/32
13.72.50.182/32
13.72.50.206/32
13.72.50.212/32
13.72.50.218/32
13.72.51.69/32
13.72.55.111/32
13.72.55.162/32
13.72.55.177/32
13.72.184.118/32
13.72.184.199/32
13.72.184.206/32
13.72.185.5/32
13.72.185.34/32
13.72.186.4/32
13.72.186.27/32
13.72.186.138/32
13.72.186.230/32
13.72.187.8/32
13.72.188.36/32
13.72.188.114/32
13.72.188.142/32
13.72.189.27/32
13.72.189.143/32
13.72.190.80/32
13.72.190.167/32
13.72.191.10/32
13.73.64.64/26
13.73.208.128/25
23.100.16.168/29
23.100.32.136/29
23.100.64.24/29
23.100.72.32/29
23.100.80.64/29
23.100.120.64/29
23.101.144.136/29
23.101.165.168/29
23.101.181.128/29
40.113.192.16/29
40.114.120.16/29
52.244.120.128/25 
65.52.1.16/29
65.52.193.136/29
104.42.72.16/29
104.43.208.16/29
104.43.240.16/29
104.45.208.104/29
104.46.112.8/29
104.209.144.16/29
104.210.48.8/29
104.210.208.16/29
104.211.16.16/29
104.211.48.16/29
104.215.96.24/29
N/A
*.gov.us.microsoftonline.com
adminwebservice.gov.us.microsoftonline.com
adminwebservice-s1-bn1a.microsoftonline.com
adminwebservice-s1-dm2a.microsoftonline.com
api.login.microsoftonline.com
becws.gov.us.microsoftonline.com
bws-s1-bn1a-relay.microsoftonline.com
bws-s1-bn1r-relay.microsoftonline.com
bws-s1-dm2a-relay.microsoftonline.com
bws-s1-dm2r-relay.microsoftonline.com
clientconfig.microsoftonline-p.net
hip.microsoftonline-p.net
hipservice.microsoftonline.com
login.microsoftonline.com
login.microsoftonline.us
login.microsoftonline-p.com
login.windows.net
loginex.microsoftonline.com
login-us.microsoftonline.com
monitoring.microsoftonline-p.com
msoid.*tenant*
nexus.microsoftonline-p.com
provisioningapi.gov.us.microsoftonline.com
provisioningapi-s1-dm2a.microsoftonline.com
provisioningapi-s1-dm2r.microsoftonline.com

yes

TCP 443

Identity Supporting services

N/A
N/A
secure.aadcdn.microsoftonline-p.com
mscrl.microsoft.com

no

TCP 443

Exchange Online

40.66.16.0/21
131.253.83.0/26
131.253.84.64/26
131.253.84.192/26
131.253.86.0/24
2001:489a:2200:400::/56
outlook.office365.us
autodiscover.*tenant*.onmicrosoft.com
autodiscover.*tenant*.mail.onmicrosoft.com

yes

TCP 25, 80, 143, 443, 587, 993, 995

Exchange Hybrid Configuration Wizard

40.118.209.192/32
168.62.190.41/32
N/A
domains.live.com

no

TCP 80 & 443

Exchange Online Protection (including SCC & auditing)

13.72.179.197/32
13.72.183.70/32
52.227.182.149/32
52.227.170.14/32
52.227.170.120/32
52.227.178.94/32
52.227.180.138/32
23.103.191.0/24
23.103.199.128/25
23.103.208.0/22
2001:489a:2202:c::/62
2001:489a:2202:4::/62
2001:489a:2202:2000::/63
*.scc.office365.us
*.manage.office365.us
*.protection.office365.us
scc.office365.us
manage.office365.us

yes

TCP 25 & 443

SharePoint Online and OneDrive for Business

104.212.50.0/23
2001:489a:2204:2::/63
*.sharepoint.us

yes

TCP 80 & 443

OneDrive for Business

N/A
N/A
oneclient.sfx.ms
officeclient.microsoft.com/config16
odc.officeapps.live.com/odc/emailhrd
wns.windows.com

no

TCP 80 & 443

Skype for Business Online

104.212.44.0/22
N/A
*.online.gov.skypeforbusiness.us
*.infra.gov.skypeforbusiness.us

yes

TCP 80, 443, 5061, 50000-59999

UDP 3478, 50000-59999

Office Online

13.72.185.126/32
13.72.20.247/32
N/A
*.gov.online.office365.us

yes

TCP 443

Office Online CDN

13.72.185.126/32
13.72.20.247/32
N/A
*.cdn.office365.us

yes

TCP 443

Short link for future reference: https://aka.ms/usip

Connect with an expert
Contact us
Expand your skills
Explore training

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×