How to Find Microsoft 365 IP Addresses for VPN Configuration
Question details
The user needs to locate the official and current Microsoft 365 IP address ranges and URLs to properly configure VPN split tunneling.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Configuring network routing, firewalls, or VPN split tunneling for a corporate network to optimize Microsoft 365 traffic.
- Observed behavior
- Requires the latest official network endpoint data to ensure uninterrupted and optimized access to Microsoft 365 services.
Ensure you have administrative access to your organization's VPN or firewall management console, as applying these IP ranges requires advanced network privileges.
Use the Official Microsoft 365 Endpoint Documentation
Microsoft regularly updates its cloud infrastructure, so referencing their official endpoints documentation is the most reliable way to get current IP ranges.
Because Microsoft 365 is a dynamic cloud service, its IP addresses and URLs are frequently updated. Microsoft maintains a dedicated web page that publishes all active network endpoints necessary for routing.
Navigate to the official 'Microsoft 365 and Office 365 URLs and IP address ranges' page on the Microsoft Learn website.
Scroll to the specific Microsoft 365 service you are configuring (e.g., Exchange Online, SharePoint Online, or Microsoft Teams) using the provided tables.
Review the 'IP addresses' and 'Ports' columns to copy the necessary CIDR blocks and protocols for your VPN split tunneling configuration.
Enter these extracted IP addresses into your corporate VPN routing table or firewall to allow direct routing for Microsoft 365 traffic.
Request Organization-Specific IPs via Microsoft Support
If your organization has unique routing requirements or requires a customized list, you can request tailored assistance through the Admin Center.
Looking for an office suite with minimal network setup?
Managing complex cloud endpoints and VPN split tunneling can be tedious. If your team needs a robust, fast, and offline-friendly office suite, try WPS Office. It provides powerful desktop applications that do not strictly depend on constant cloud connectivity.
- 1. Download the Installer: Visit the official WPS Office website and download the free installation package for your operating system.
- 2. Run the Setup: Open the downloaded file and follow the on-screen instructions to quickly install the suite.
- 3. Start Working Offline: Launch WPS Writer, Spreadsheet, or Presentation to immediately start editing your documents without requiring complex network connectivity.
Frequently Asked Questions
Why do Microsoft 365 IP addresses change so frequently?
Microsoft constantly scales and maintains its global cloud infrastructure to ensure security, performance, and reliability. As new data centers are added or old ones are retired to manage load, the associated IP ranges must be updated to reflect the new network topology.
How can I automate the updating of Microsoft 365 IP addresses in my firewall?
Microsoft provides the Office 365 IP Address and URL Web Service API. Network administrators can write scripts to query this API, fetch the latest endpoints in JSON format, and automatically update their VPN or firewall routing tables without manual intervention.
What happens if I don't configure split tunneling for Microsoft 365?
If you force all Microsoft 365 traffic through your corporate VPN rather than using split tunneling, you may experience significant latency, poor audio/video quality in Microsoft Teams, and unnecessary strain on your overall VPN bandwidth.
