SKYPE FOR BUSINESS MAC FIREWALL UPDATE

SKYPE FOR BUSINESS MAC FIREWALL UPDATE

Update any design templates you might have.

Celebrate about the simplified port requirements.

No, the requirements for Cloud Connector Edition (see Plan for Skype for Business Cloud Connector Edition) remain unchanged. Please note that the Source Port is only relevant, if your firewall requires a source port to be specified (and a lot of firewalls do not require this setting):įull requirements for Skype for Business Edge Server can be found here: Edge Server environmental requirements in Skype for Business Server 2015.ĭoes this change anything for Cloud Connector Edition? The A/V Edge Server in your environment will need to be configured liked this. If you have an on-premises deployment of Skype for Business, the requirements for your Edge Server to communicate to Skype for Business Online remain unchanged (and also for any Federation scenarios including Skype for Business on-premises). This change only applies to users who are homed in Skype for Business Online. What does this change for hybrid between Skype for Business Server and Skype for Business Online? If you have the ports open today, it makes sense to leave them open. However in our data analysis and pilot deployments with some customers these differences did not show significance. Having the 50,000-59,999 port range open can still have (some) benefits when it comes to call setup times and under some circumstances on call quality. Our organization has these ports open, should we close them? While logic tells us that usually we want to avoid additional hops under all circumstances, the analysis on call quality data has shown us, that this additional hop does not significantly affect call quality - since both these Relay Servers are homed on the Microsoft Network, all traffic between the Relay Servers is sent over a highly reliable pipe designed for real-time communication. Without the 50,000-59,999 port range, the traffic needs to travel via two Relay Server.Īs you can see, closing the 50,000-59,999 port range will force the traffic to travel via an additional hop.The 50,000-59,999 port range can be leveraged to include only a single Relay Server in the media path.There are now the following possible media paths.User and User B are at different branch offices behind firewalls), so the media traffic cannot go directly peer to peer and needs to flow via Skype for Business Online For the sake of the example, the direct connection between User A and User B is blocked (e.g.(To understand all the details of their purpose, we recommend watching Troubleshoot media flows in Skype for Business across online, server and hybrid.) To answer this question, it is important to understand first how the 50,000-59,999 ports were used in the first place. Why are these ports not required anymore? No clients are excluded and there are no specific minimum version required (although we always recommend to run the latest version). This change applies to all clients supported against Skype for Business Online. Is there a minimum client version required to benefit from the port changes? We are happy to announce that the 50,000-59,999 port range (UDP and TCP) is no longer a requirement for Skype for Business endpoints to communicate with Skype for Business Online.Įarlier this year we talked about making simplification for network connectivity for Skype for Business Online (see blog article here) and we recently updated our guidance and removed the mentioned port range as a requirement: Office 365 URLs and IP address rangesĪll clients need to be able to directly connect to Skype for Business Online on the following destination ports: (the IP addresses and FQDNs can be found in the Office 365 URLs and IP address ranges)

Government GCC High click on the respective links. For guidance on Office 365 operated by 21 Vianet, Office 365 Germany, Office 365 U.S.

Note: This article applies only to Office 365 Worldwide (including Government Community Cloud).

Skype for business mac firewall