Exam MS-700 topic 6 question 2 discussion

Defintely no inbound required

Correct: https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide#skype-for-business-online-and-microsoft-teams

Hi, from a network and firewall perspective. I do not think inbound is needed because Teams initiates an outbound connections, hence outbound ports are required to be open. Usually when a successful connection is established outbound, the return path of the traffic will come back in the same tunnel or session opened when going out. To open inbound won't makes sense as you up your network for inbound traffic to every device. That is a big risk and from a a network point, is not required. You would only open inbound ports, if you are publishing something on those ports. in this case, MS is publishing Teams connectivity on the ports and we connecting outbound to them.

On exam 26.01.2023

Was on exam 19.08.2022

Question included in exam on 9 AUG 2022

On exam 22nd July

So outbound ports are correct in this answer for all scenarios from the link below https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide#skype-for-business-online-and-microsoft-teams Inbound ports are TCP 80,443 and for Sales team SK4B requirement 5000 to 5999 from the link below https://docs.microsoft.com/en-us/microsoft-365/enterprise/additional-office365-ip-addresses-and-urls?view=o365-worldwide

Can someone explain the inboud TCP and UDP? Should it be same as outbound ? Also part of the image is missing so should there be some Inboud UDP ? Thanks

On Exam 28.02.22

This is a bit tricky question. If we take into consideration existing S4B infrastructure then there should be inbound ports open as well. But then again, inbound ports are already open, so there is no additional requirements or considerations regarding inbound traffic. I am confused with the question here even though I completely understand network requirements for the setup.

For Teams to function correctly, you must open TCP ports 80 and 443 from the clients to the internet, and UDP ports 3478 through 3481 from the clients to the internet.

To meet the company’s compliance policy, users in the sales department must continue to use on-premises Skype for Business for IM and calling only. That means the on-prem SfB 2015 remains with limited functionality. The upcoming Skype for Business Online retirement will not affect on-prem, so still a valid scenario. Check SfB Edge Server port requirements: https://docs.microsoft.com/en-us/skypeforbusiness/plan-your-deployment/edge-server-deployments/edge-environmental-requirements#external-port-firewall-summary-table

No inbound required. The article referenced in the answer that the ports listed are outbound only “ Endpoint data below lists requirements for connectivity from a user's machine to Office 365. It does not include network connections from Microsoft into a customer network, sometimes called hybrid or inbound network connections. See Additional endpoints for more information.”