What are the ingress IP addresses for the exchange hybrid configuration?

Vimal K 0 Reputation points
2024-06-18T08:39:14.5933333+00:00

Hi,

We are planning to set up a hybrid configuration to integrate the on-premises Exchange server calendar with the Teams application. We want to restrict connections to the auto-discover and EWS URLs only from the Microsoft 365 environment and not expose them to the internet. Therefore, we need to find the IP address details for the ingress traffic to Exchange Onprem. Where can we find this information?

Microsoft Teams
Microsoft Teams
A Microsoft customizable chat-based workspace.
9,471 questions
Microsoft Exchange Hybrid Management
Microsoft Exchange Hybrid Management
Microsoft Exchange: Microsoft messaging and collaboration software.Hybrid Management: Organizing, handling, directing or controlling hybrid deployments.
1,969 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Bruce Jing-MSFT 2,070 Reputation points Microsoft Vendor
    2024-06-19T06:34:00.11+00:00

    Hi,@Vimal K

    Thanks for posting your question in the Microsoft Q&A forum.

    You want to integrate your on-premises Exchange server calendar with the Teams application.

    First, you need to meet the prerequisites, you can refer to this link for details: Resolve interaction issues between Teams and Exchange Server - Microsoft Teams | Microsoft Learn

    A screenshot of a computer errorDescription automatically generated

    Step1:The Teams service uses the Exchange Autodiscover service to locate the EWS URL that is published by the server that's running Exchange Server. To verify that the Autodiscover process is working correctly, use the following steps:

    1. Ask the user to navigate to the Microsoft Remote Connectivity Analyzer. The Remote Connectivity Analyzer tool uses a specific set of IP addresses to locate the EWS URL. For a list of these IP addresses for Microsoft 365, see the information for ID 46 in Microsoft 365 URLs and IP address ranges.
    2. Select the Use Autodiscover to detect server settings check box.
    3. Input the requested information.
    4. Select the Perform Test button to start the Autodiscover test.

    If the test fails, you must first resolve the Autodiscover issue.

    Step 2: Verify that the Autodiscover service can route the Autodiscover requests to on-premises

    In Windows PowerShell, run the following command:

    Invoke-RestMethod -Uri https://outlook.office365.com/autodiscover/autodiscover.json?Email=onpremisemailbox@contoso.com&Protocol=EWS&RedirectCount=5 -UserAgent Teams

    For a mailbox hosted on-premises, the EWS URL should point to the on-premises external EWS. The output should resemble the following:

    A close-up of a logoDescription automatically generated

    If this test fails, or if the EWS URL is incorrect, review the Prerequisites section. This is because the problem is likely caused by an Exchange hybrid configuration issue, or a firewall or reverse proxy that is blocking external requests.

    If my answer is helpful to you, please mark it as the answer so that other users can refer to it. Thank you for your support and understanding.