Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Blocklists - Microsoft - Microsoft Teams ======

===== Get Current List of IP Addresses =====

<code bash>
curl https://endpoints.office.com/endpoints/worldwide?clientrequestid=948beb0b-32bb-4e1c-a67d-091c861a0cc6 > /tmp/office.txt
jq -r '.[] | select(.serviceArea=="Skype") | select(.ips) .ips[]' /tmp/office.txt | sort -t . -k1,1n -k2,2n -k3,3n -k4,4n | uniq
</code>

<WRAP info>
**NOTE:**  Use **Skype** as the ServiceArea.

See: [[Blocklists:Microsoft:Get Microsoft URLs, IP addresses and Ports|Get Microsoft URLs, IP addresses and Ports]].
</WRAP>

returns:

<code bash>
13.107.64.0/18
52.112.0.0/14
52.120.0.0/14
52.238.119.141/32
52.244.160.207/32
2603:1027::/48
2603:1037::/48
2603:1047::/48
2603:1057::/48
2620:1ec:40::/42
2620:1ec:6::/48
</code>

<WRAP info>
**NOTE:**  These IP Ranges may change.
</WRAP>

----

===== Get Current List of URLs =====

<code bash>
jq -r '.[] | select(.serviceArea=="Skype") | select(.urls) .urls[]' /tmp/office.txt | sort -t . -k1,1n -k2,2n -k3,3n -k4,4n | uniq
</code>
returns:

<code>
*.adl.windows.com
ajax.aspnetcdn.com
aka.ms
amp.azure.net
*.broadcast.skype.com
broadcast.skype.com
compass-ssl.microsoft.com
*.keydelivery.mediaservices.windows.net
*.lync.com
mlccdn.blob.core.windows.net
mlccdnprod.azureedge.net
*.msecnd.net
*.msedge.net
*.mstea.ms
*.secure.skypeassets.com
*.sfbassets.com
*.skype.com
*.skypeforbusiness.com
skypemaprdsitus.trafficmanager.net
statics.teams.microsoft.com
*.streaming.mediaservices.windows.net
*.teams.microsoft.com
teams.microsoft.com
*.tenor.com
*.urlp.sfbassets.com
*.users.storage.live.com
videoplayercdn.osi.office.net
</code>

----

===== Get Current List of TCP Ports =====

<code bash>
jq -r '.[] | select(.serviceArea=="Skype") | .tcpPorts' office.txt | sort | uniq
</code>

returns:

<code>
443
80
null
</code>

<WRAP info>
**NOTE:**  An alternative command: 

<code bash>
jq -r '.[] | select(.serviceArea=="Skype") | .tcpPorts' office.txt  | sed 's/,/\n/'g | sort | uniq
</code>
</WRAP>

----

===== Get Current List of UDP Ports =====

<code bash>
jq -r '.[] | select(.serviceArea=="Skype") | .udpPorts' office.txt  | sed 's/,/\n/'g | sort | uniq
</code>

returns:

<code>
3478
3479
3480
3481
null
</code>


<WRAP info>
**NOTE:**  An alternative command: 

<code bash>
jq -r '.[] | select(.serviceArea=="Skype") | .udpPorts' office.txt | sort | uniq
</code>

</WRAP>

----

===== Original Lists =====

<code>
13.107.64.0/18 # Microsoft Teams.
52.112.0.0/14 # Microsoft Teams.
52.120.0.0/14 # Microsoft Teams.
</code>

<code>
*.microsoft.com
*.microsoftonline.com
*.teams.skype.com
*.teams.microsoft.com
*.sfbassets.com
*.skypeforbusiness.com
</code>

<WRAP info>
**NOTE:**  These may change.
</WRAP>

----

===== References =====

https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide

https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide#skype-for-business-online-and-microsoft-teams

https://docs.microsoft.com/en-gb/MicrosoftTeams/troubleshoot/teams-welcome

https://techcommunity.microsoft.com/t5/microsoft-teams/ports-needed-for-microsoft-teams/m-p/28417

https://docs.microsoft.com/en-gb/MicrosoftTeams/prepare-network