MS Teams room system IP addresses for firewall rules or rule design

Question

Hello community,

We about to start a massive migration from Cisco to MS Teams and we want to make sure we have to proper firewall rules for our room systems.

Microsoft has published a list of URL and IP addresses in this link:

endpoints.office.com/endpoints/worldwide?clientrequestid=b10c5ed1-bad1-445f-b386-b919946339a7

and also in this link:

Office 365 URLs and IP address ranges - Microsoft 365 Enterprise | Microsoft Learn

Problem statement:

My firewall does not support URLs. If I only configure the IP addresses on my firewall, will that be sufficient for my room systems to connect and work correctly?

I suspect the URLs likely go to those published IP addresses anyway ?

It's not compulsory to use the URLs is it? I'm thinking that's just for people who perform URL filtering on their network, right ?

Thank you

Answer 1

Hello

I’m Adeyemi and I’d be happy to help you with your question.

Yes, you're correct. The URLs listed by Microsoft do indeed resolve to the IP addresses they've provided. If your firewall doesn't support URL-based rules, configuring the firewall with the provided IP addresses should be sufficient for your Microsoft Teams Rooms systems to connect and work correctly.

However, please note that Microsoft may change these IP addresses over time, so it's important to keep an eye on the published list for any updates.

Also, while it's not compulsory to use the URLs, they can provide additional security by ensuring that only traffic to those specific addresses is allowed. This can be particularly useful if you're concerned about potential security risks from other services that might be hosted on the same IP addresses.

I hope this helps.

Give back to the community. Help the next person who has this issue by indicating if this reply solved your problem. Click Yes or No below.

Kind regards, Adeyemi

Answer 2

Yes, the information about the IP addresses and URLs for Microsoft Teams Rooms can be found in the official Microsoft documentation. The Microsoft Teams Rooms security article provides information on network security for Teams Rooms devices. It mentions that "Access through firewalls and other security devices is the same for Teams Rooms as for any other Microsoft Teams client." https://learn.microsoft.com/en-us/microsoftteams/rooms/security

The Prepare your Environment article also provides information on the network requirements for Microsoft Teams Rooms, including the need for access to HTTP ports 80 and 443 and certain TCP and UDP ports. https://learn.microsoft.com/en-us/microsoftteams/rooms/rooms-prep

However, these documents do not explicitly state that it’s sufficient to only configure the firewall with the provided IP addresses if your firewall doesn’t support URL-based rules. This is generally understood based on how firewalls work. If you have further questions or need more specific information, I recommend reaching out to Microsoft Support for assistance. They may be able to provide more specific guidance based on the details of your situation.

Regards Adeyemi

Answer 3

Hello Adeyemi,

Thanks for sharing your knowledge. Is there a document or publication that I could be referred to that confirms this please?

Thank you