Office 365 U.S. Government DoD endpoints

Summary:    Office 365 requires connectivity to the Internet. The endpoints below should be reachable for customers using Office 365 U.S. Government DoD plans only.

Note: Microsoft is developing a REST-based web service for the IP address and FQDN entries on this page. This new service will help you configure and update network perimeter devices such as firewalls and proxy servers. You can download the list of endpoints, the current version of the list, or specific changes. This service will eventually replace the XML document, RSS feed, and the IP address and FQDN entries on this page. To try out this new service, go to Web service.

Office 365 endpoints: Worldwide (including GCC) | Office 365 operated by 21 Vianet | Office 365 Germany | Office 365 U.S. Government DoD | Office 365 U.S. Government GCC High |

Last updated: 8/1/2018 - RSS Change Log subscription

Download: the full list in XML format

Start with managing Office 365 endpoints to understand our recommendations. Except for emergency changes, endpoints are updated at the end of each month.

Important: Destination endpoints may be listed as an IP addresses only, FQDN/URI only, or a combination of the two. Office 365 depends on internet based services such as Microsoft owned cloud services with dynamic addressing, Domain Name Services (DNS), Content Delivery Networks (CDN), Certificate Revocation Lists (CRL), and other third party services where no IP addresses are available. Where IP or FQDN information is not available, we've marked them as Not Available (N/A) in the tables below.

Office 365 U.S. Government DoD endpoints

The endpoints listed as a Yes in the ExpressRouteGov for Office 365 column are available both over the internet and over ExpressRoute for Government configured. If you plan to use Azure AD Connect, read the special considerations section to ensure you have the appropriate AAD Connect configuration.

Service

IPv4 addresses

IPv6 addresses

FQDN/URL

ExpressRouteGov for Office 365

Ports

Office 365 admin portal and Office Home

52.180.251.166/32
52.180.255.73/32
52.181.160.19/32
52.181.160.113/32
52.181.163.64/32 
52.182.92.132/32
N/A
portal.apps.mil
webshell.dodsuite.office365.us
www.ohome.apps.mil

yes

TCP 443

Identity management

13.71.201.64/26
13.73.64.64/26
13.73.208.128/25
23.100.16.168/29
23.100.32.136/29
23.100.64.24/29
23.100.72.32/29
23.100.80.64/29
23.100.120.64/29
23.101.144.136/29
23.101.165.168/29
23.101.181.128/29
40.113.192.16/29
40.114.120.16/29
52.126.194.0/23
52.244.120.128/25 
65.52.1.16/29
65.52.193.136/29
104.42.72.16/29
104.43.208.16/29
104.43.240.16/29
104.45.208.104/29
104.46.112.8/29
104.209.144.16/29
104.210.48.8/29
104.210.208.16/29
104.211.16.16/29
104.211.48.16/29
104.215.96.24/29
131.253.120.0/24
157.56.53.128/25
157.55.59.128/25
157.56.58.0/25
157.56.151.0/25
13.72.17.49/32
13.72.18.116/32
13.72.18.212/32
13.72.18.216/32
13.72.18.221/32
13.72.184.118/32
13.72.184.199/32
13.72.184.206/32
13.72.185.34/32
13.72.185.5/32
13.72.186.138/32
13.72.186.230/32
13.72.186.27/32
13.72.186.4/32
13.72.187.8/32
13.72.188.114/32
13.72.188.142/32
13.72.188.36/32
13.72.189.143/32
13.72.189.27/32
13.72.19.36/32
13.72.19.9/32
13.72.190.167/32
13.72.190.80/32
13.72.191.10/32
13.72.20.4/32
13.72.23.54/32
13.72.49.238/32
13.72.50.182/32
13.72.50.206/32
13.72.50.212/32
13.72.50.218/32
13.72.51.69/32
13.72.55.111/32
13.72.55.162/32
13.72.55.177/32 
N/A
*.gov.us.microsoftonline.com
adminwebservice.gov.us.microsoftonline.com
adminwebservice-s1-bn1a.microsoftonline.com
adminwebservice-s1-dm2a.microsoftonline.com
api.login.microsoftonline.com
becws.gov.us.microsoftonline.com
bws-s1-bn1a-relay.microsoftonline.com
bws-s1-bn1r-relay.microsoftonline.com
bws-s1-dm2a-relay.microsoftonline.com
bws-s1-dm2r-relay.microsoftonline.com
clientconfig.microsoftonline-p.net
hip.microsoftonline-p.net
hipservice.microsoftonline.com
login.microsoftonline.com
login.microsoftonline.us
login.microsoftonline-p.com
login.windows.net
loginex.microsoftonline.com
login-us.microsoftonline.com
monitoring.microsoftonline-p.com
msoid.*tenant*
nexus.microsoftonline-p.com
provisioningapi.gov.us.microsoftonline.com
provisioningapi-s1-dm2a.microsoftonline.com
provisioningapi-s1-dm2r.microsoftonline.com

yes

TCP 443

Identity Supporting services

N/A
N/A
secure.aadcdn.microsoftonline-p.com
mscrl.microsoft.com

no

TCP 443

Exchange Online

40.66.24.0/21
131.253.80.0/24
131.253.83.64/26
131.253.84.0/26
131.253.84.128/26
131.253.87.0/25
131.253.87.128/28
131.253.87.160/27
131.253.87.192/28
131.253.87.224/28
131.253.88.16/28
131.253.88.64/28
131.253.88.80/28
131.253.88.112/28
131.253.88.176/28
131.253.88.208/28
131.253.88.224/28
2001:489a:2200:500::/56
webmail.apps.mil
outlook-dod.office365.us
autodiscover.*tenant*.onmicrosoft.com
autodiscover.*tenant*.mail.onmicrosoft.com

yes

TCP 25, 80, 143, 443, 587, 993, 995

Exchange Hybrid Configuration Wizard

40.118.209.192/32
168.62.190.41/32
N/A
domains.live.com

no

TCP 80 & 443

Exchange Online Protection (including SCC & auditing)1

23.103.191.0/24
23.103.199.0/25
23.103.204.0/22
52.181.167.91/32
52.182.95.219/32
2001:489a:2202::/62
2001:489a:2202:8::/62
2001:489a:2202:2000::/63
*.protection.office365.us
*.scc.protection.apps.mil
scc.protection.apps.mil

yes

TCP 25 & 443

SharePoint Online and OneDrive for Business

104.212.48.0/23
2001:489a:2204::/63
*.sharepoint-mil.us
*.dps.mil

yes

TCP 80 & 443

OneDrive for Business

N/A
N/A
oneclient.sfx.ms
officeclient.microsoft.com/config16
odc.officeapps.live.com/odc/emailhrd
wns.windows.com

no

TCP 80 & 443

Skype for Business Online/Microsoft Teams

52.127.64.0/21
52.180.249.148/32
52.180.252.118/32
52.180.252.187/32
52.180.253.137/32
52.180.253.154/32
52.180.255.180/32
52.181.165.243/32
52.181.166.119/32
52.181.167.43/32
52.181.167.64/32
52.181.180.13/32
52.181.200.104/32
104.212.32.0/22
104.212.60.0/23
195.134.240.0/22
N/A
*.online.dod.skypeforbusiness.us
*.dod.teams.microsoft.us
dod.teams.microsoft.us

yes

TCP 80, 443, 5061, 50000-59999

UDP 3478, 50000-59999

Other Office 365 including Office Online and Office 365 ProPlus

52.127.80.0/23
52.181.164.39/32
52.182.95.191/32
52.127.72.0/21
N/A
*.dod.online.office365.us
*.osi.apps.mil

yes

TCP 443

Office Online CDN

N/A
N/A
*.dod.cdn.office365.us

yes

TCP 443

Office 365 ProPlus2

N/A
N/A
officeclient.microsoft.com
odc.officeapps.live.com
cdn.odc.officeapps.live.com

no

TCP 80 & 443

1 The Security and Compliance Center (SCC) provides support for Azure ExpressRoute for Office 365. The same applies for many features exposed through the SCC such as Reporting, Auditing, Advanced eDiscovery, Unified DLP, and Data Governance. Two specific features, PST Import and eDiscovery Export, currently do not support Azure ExpressRoute with only Office 365 route filters due to their dependency on Azure Blob Storage. To consume those features, you need separate connectivity to Azure Blob Storage using any supportable Azure connectivity options, which include Internet connectivity or Azure ExpressRoute with Azure Public route filters. You have to evaluate establishing such connectivity for both of those features. The Office 365 Information Protection team is aware of this limitation and is actively working to bring support for Azure ExpressRoute for Office 365 as limited to Office 365 route filters for both of those features.

2 There are additional optional endpoints for Office 365 ProPlus that are not listed and are not required for users to launch Office 365 ProPlus applications and edit documents. Optional endpoints are hosted in Microsoft datacenters and do not process, transmit, or store customer data. We recommend that user connections to these endpoints be directed to the default Internet egress perimeter.

Short link for future reference: https://aka.ms/usdodip

Expand your Office skills
Explore training
Get new features first
Join Office Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×