Office 365 U.S. Government GCC High endpoints

Summary   : The following endpoints (FQDNs, Ports, URLs, IPv4, and IPv6 prefixes) apply to Office 365 U.S. Government GCC High plans only and are designed to deliver productivity services to organizations that adhere to L4 regulations.

Office 365 endpoints: Worldwide (including GCC) | Office 365 operated by 21 Vianet | Office 365 Germany | Office 365 U.S. Government DoD | Office 365 U.S. Government GCC High |

Last updated: 8/31/2017 - RSS Change Log subscription

Download: the full list in XML format

Office 365 requires internet connectivity from every computer connecting to the service, this article serves as a reference for the specific Microsoft and third-party endpoints computers need to be able to reach. Start with our guide managing Office 365 endpoints to understand how best to use the information here. Except for emergency changes, endpoints are updated at the end of each month.

Important: Destination endpoints may be listed as an IP addresses only, FQDN/URI only, or a combination of the two. Office 365 depends on internet based services such as Microsoft owned cloud services with dynamic addressing, Domain Name Services (DNS), Content Delivery Networks (CDN), Certificate Revocation Lists (CRL), and other third party services where no IP addresses are available. Where IP or FQDN information is not available, we've marked them as Not Available (N/A) in the tables below.

Office 365 U.S. Government GCC High endpoints

The endpoints listed as a Yes in the ExpressRouteGov for Office 365 column are available both over the internet and over ExpressRoute for Government configured. If you plan to use Azure AD Connect, read the special considerations section to ensure you have the appropriate AAD Connect configuration.

Service

IPv4 addresses

IPv6 addresses

FQDN/URL

ExpressRouteGov for Office 365

Destination Ports

Portal and shared

N/A
N/A
portal.office365.us

Yes

TCP 443

Identity management

157.56.53.128/25
157.55.59.128/25
157.56.58.0/25
157.56.151.0/25
131.253.120.0/24
13.71.201.64/26
13.72.17.49/32
13.72.18.116/32
13.72.18.212/32
13.72.18.216/32
13.72.18.221/32
13.72.19.9/32
13.72.19.36/32
13.72.20.4/32
13.72.23.54/32
13.72.49.238/32
13.72.50.182/32
13.72.50.206/32
13.72.50.212/32
13.72.50.218/32
13.72.51.69/32
13.72.55.111/32
13.72.55.162/32
13.72.55.177/32
13.72.184.118/32
13.72.184.199/32
13.72.184.206/32
13.72.185.5/32
13.72.185.34/32
13.72.186.4/32
13.72.186.27/32
13.72.186.138/32
13.72.186.230/32
13.72.187.8/32
13.72.188.36/32
13.72.188.114/32
13.72.188.142/32
13.72.189.27/32
13.72.189.143/32
13.72.190.80/32
13.72.190.167/32
13.72.191.10/32
13.73.64.64/26
13.73.208.128/25
23.100.16.168/29
23.100.32.136/29
23.100.64.24/29
23.100.72.32/29
23.100.80.64/29
23.100.120.64/29
23.101.144.136/29
23.101.165.168/29
23.101.181.128/29
40.113.192.16/29
40.114.120.16/29
52.244.120.128/25 
65.52.1.16/29
65.52.193.136/29
104.42.72.16/29
104.43.208.16/29
104.43.240.16/29
104.45.208.104/29
104.46.112.8/29
104.209.144.16/29
104.210.48.8/29
104.210.208.16/29
104.211.16.16/29
104.211.48.16/29
104.215.96.24/29
N/A
*.gov.us.microsoftonline.com
adminwebservice.gov.us.microsoftonline.com
adminwebservice-s1-bn1a.microsoftonline.com
adminwebservice-s1-dm2a.microsoftonline.com
api.login.microsoftonline.com
becws.gov.us.microsoftonline.com
bws-s1-bn1a-relay.microsoftonline.com
bws-s1-bn1r-relay.microsoftonline.com
bws-s1-dm2a-relay.microsoftonline.com
bws-s1-dm2r-relay.microsoftonline.com
clientconfig.microsoftonline-p.net
hip.microsoftonline-p.net
hipservice.microsoftonline.com
login.microsoftonline.com
login.microsoftonline.us
login.microsoftonline-p.com
login.windows.net
loginex.microsoftonline.com
login-us.microsoftonline.com
monitoring.microsoftonline-p.com
msoid.*tenant*
nexus.microsoftonline-p.com
provisioningapi.gov.us.microsoftonline.com
provisioningapi-s1-dm2a.microsoftonline.com
provisioningapi-s1-dm2r.microsoftonline.com

Yes

TCP 443

Identity Supporting services

N/A
N/A
secure.aadcdn.microsoftonline-p.com
mscrl.microsoft.com

No

TCP 443

Exchange Online

131.253.83.0/26
131.253.84.64/26
131.253.84.192/26
131.253.86.0/24
N/A
outlook.office365.us
autodiscover.*tenant*.onmicrosoft.com
autodiscover.*tenant*.mail.onmicrosoft.com

Yes

TCP 25, 80, 143, 443, 587, 993, 995

Exchange Hybrid Configuration Wizard

40.118.209.192/32
168.62.190.41/32
N/A
domains.live.com

No

TCP 80 & 443

Exchange Online Protection (including SCC & auditing)

13.72.179.197/32
13.72.183.70/32
52.227.182.149/32
52.227.170.14/32
52.227.170.120/32
52.227.178.94/32
52.227.180.138/32
23.103.191.0/24
23.103.199.128/25
23.103.208.0/22
2001:489a:2202:c::/62
2001:489a:2202:4::/62
2001:489a:2202:2000::/63
*.scc.office365.us
*.manage.office365.us
*.protection.office365.us

Yes

TCP 25 & 443

SharePoint Online and OneDrive for Business

102.212.50.0/23
N/A
*.sharepoint.us

Yes

TCP 80 & 443

OneDrive for Business

N/A
N/A
oneclient.sfx.ms
officeclient.microsoft.com/config16
odc.officeapps.live.com/odc/emailhrd
wns.windows.com

No

TCP 80 & 443

Skype for Business Online

104.212.44.0/22
N/A
*.online.gov.skypeforbusiness.us
*.infra.gov.skypeforbusiness.us

Yes

TCP 80, 443, 5061, 50000-59999

UDP 3478, 50000-59999

Office Online

13.72.185.126/32
13.72.20.247/32
N/A
*.gov.online.office365.us

Yes

TCP 443

Office Online CDN

N/A
N/A
*.cdn.office365.us

Yes

TCP 443

Short link for future reference: https://aka.ms/usip

Connect with an expert
Contact us
Expand your skills
Explore training

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×