You can't connect to Lync Online, or certain features don't work, because an on-premises firewall blocks the connection

Article translations Article translations
Article ID: 2409256 - View products that this article applies to.
Expand all | Collapse all

PROBLEM

You experience one or more of the following symptoms in Lync Online: 
  • You can't connect to Lync Online.
  • The following features don't work in Lync Online:
    • Presence updates, and this includes contact pictures
    • Outlook integration
    • File transfers
    • Audio and video

SOLUTION

To resolve this issue, configure an exception for Office 365 URLs and applications from the proxy or firewall. 

To resolve this issue for Internet Security and Acceleration (ISA) Server 2006, create an allow rule. The allow rule should meet the following criteria. These criteria are highly recommended:
  • Allow outgoing connections to the following destination: *.microsoftonline.com
  • Allow outgoing connections to the following destination: *.microsoftonline-p.com
  • Allow outgoing connections to the following destination: *.onmicrosoft.com
  • Allow outgoing connections to the following destination: *.sharepoint.com
  • Allow outgoing connections to the following destination: *.outlook.com
  • Allow outgoing connections to the following destination: *.lync.com
  • Allow outgoing connections to the following destination: evsecure-ocsp.verisign.com
  • Allow outgoing connections to the following destination: evsecure-aia.verisign.com
  • Allow outgoing connections to the following destination: evsecure-crl.verisign.com
  • Allow outgoing connections to the following destination: sa.symcb.com

    Note This is the certification revocation library for microsoftonline.com.
  • Protocols TCP and HTTPS
  • Rule must apply to all users
  • HTTPS/SSL time-out set to 8 hours
Take the following actions:
  • Review the following Office 365 blog post:

    Set up your network for Lync Online
  • Exclude the IP address ranges that are used by Lync Online. To view these IP address ranges, go to the following Microsoft TechNet website:

    Lync Online URLs and IP Address Ranges
  • Exclude the IP address ranges used by other Office 365 services, especially the IP ranges for Microsoft Online Services Sign In. If you're using Exchange Online, make sure that you exclude outgoing IP addresses for Exchange Online.
    Office 365 URLs and IP address ranges
  • Use the Office 365 Custom Domain Name Settings Test for Lync Online:
    Lync Remote Connectivity Analyzer
  • See the following article in the Microsoft Knowledge Base to create an exception in your firewall for the Microsoft Azure AD authentication system:
    2769142 Lync 2013 or Lync 2010 can't connect to the Lync Online service because a proxy is blocking connections from MSOIDSVC.exe
Additionally, the following ports must be open in the external firewall.
Collapse this tableExpand this table
PortProtocolDirectionUsage
443STUN/TCPOutboundAudio, video, application sharing sessions
443PSOM/TLSOutboundData sharing sessions
3478STUN/UDPOutboundAudio, video sessions
5223TCPOutboundLync Mobile push notifications
50000 – 50019RTP/UDPOutboundAudio
50020 – 50039RTP/UDPOutboundVideo
50040 – 50059TCPOutboundFile Transfer and Application Sharing

Note The same rule concepts can be applied to other firewalls. Additionally, your firewall server may require a firewall client to be installed on the end-user's computer.

For more information about how to configure ISA 2006 firewall rules, go to the following Microsoft TechNet website:

Configuring ISA Server 2006 Firewall Rules

MORE INFORMATION

This issue occurs if an on-premises firewall blocks the communication flow.

Still need help? Go to the Office 365 Community website.

Properties

Article ID: 2409256 - Last Review: August 12, 2014 - Revision: 61.0
Applies to
  • Microsoft Lync Online
Keywords: 
o365 o365a o365e o365022013 o365m o365p KB2409256

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com