tokb:ip_SfB_Full

Skype for Business Online

To use Skype for Business Online, you must be able to connect to the endpoints described below. To enable authentication, the endpoints listed in the Office 365 authentication and identity section must be reachable. Similarly, for shared infrastructure and portal services, the endpoints in the portal and shared section are must be reachable. These are rows One and Two respectively. Once the required endpoints in these tables are reachable, ensure the endpoints in the Skype for Business Online table below are reachable. To see the IP addresses, expand the IP address section below the table describing the traffic flow.

Row

Purpose

Source | Credentials

Source Port

Destination

CDN

ExpressRoute for Office 365

Destination IP

Destination Port

1

Required: Authentication and identity

See Office 365 authentication and identity

2

Required: Portal and shared

See Office 365 portal and shared

3

Required: SIP signaling

Client Computer | Logged on user

Ephemeral ports

*.lync.com

No

Yes

Skype for Business IP ranges.

TCP 443

4

Required: Persistent Shared Object Model (PSOM) connections web conferencing

Client Computer | Logged on user

Ephemeral ports

*.lync.com

No

Yes

Skype for Business IP ranges.

TCP 443

5

Required: HTTPS downloads

Client Computer | Logged on user

Ephemeral ports

*.lync.com

No

Yes

Skype for Business IP ranges.

TCP 443

6

Required: Audio

Client Computer | Logged on user

TCP/UDP 50,000-50019

*.lync.com

No

Yes

Skype for Business IP ranges.

TCP 443, UDP 3478, 3479, 3480, & 3481, TCP/UDP 50,000-59,999

7

Required: Video

Client Computer | Logged on user

TCP/UDP 50,020-50039

*.lync.com

No

Yes

Skype for Business IP ranges.

TCP 443, UDP 3478, 3479, 3480, & 3481, TCP/UDP 50,000-59,999

8

Required: Desktop sharing

Client Computer | Logged on user

TCP/UDP 50,040-50059

*.lync.com

No

Yes

Skype for Business IP ranges.

TCP 443, UDP 3478, 3479, 3480, & 3481, TCP/UDP 50,000-59,999

9

Required: Lync Mobile push notifications for Lync Mobile 2010 on iOS devices. You don't need this for Android, Nokia Symbian or Windows Phone mobile devices.

Client Computer | Logged on user

Ephemeral ports

*.lync.com

No

Yes

Skype for Business IP ranges.

TCP 5223

10

Required: Skype Telemetry

Client Computer | Logged on user

Ephemeral ports

skypemaprdsitus.trafficmanager.net

pipe.skype.com

No

No

N/A.

TCP 443

11

Required: Skype client quicktips

Client Computer | Logged on user

Ephemeral ports

quicktips.skypeforbusiness.com

No

No

N/A.

TCP 443

12

Required: Skype for Business chat in OWA

Client Computer | Logged on user

Ephemeral ports

swx.cdn.skype.com

No

No

N/A.

TCP 443

13

Required: Skype for Business client configurations

Client Computer | Logged on user

Ephemeral ports

a.config.skype.com

b.config.skype.com

config.edge.skype.com

No

No

13.107.3.128

13.107.3.129

23.99.213.58

23.101.115.193

23.101.116.26

23.101.156.198

23.101.158.111

23.102.17.214

23.102.24.114

40.68.229.156

40.68.230.133

40.78.145.194

104.40.75.8

104.40.76.196

191.233.80.151

191.233.95.169

191.234.19.21

191.234.20.241

191.234.21.145

191.234.23.27

TCP 443

14

Optional: Federation with Skype and public IM connectivity: Contact picture retrieval

Client Computer | Logged on user

Ephemeral ports

*.api.skype.com

*.users.storage.live.com

No

No

N/A.

TCP 443

15

Optional: Federation with Skype and public IM connectivity: Skype Search

Client Computer | Logged on user

Ephemeral ports

graph.skype.com

No

No

N/A.

TCP 443

Share Facebook Facebook Twitter Twitter Email Email

Was this information helpful?

Great! Any other feedback?

How can we improve it?

Thank you for your feedback!

×