Microsoft 365 Backup/Recovery Requires Direct Internet Access

Product version: 11.0

Last modified: 10 July 2025

Problem

Microsoft 365 backup or recovery jobs in NAKIVO Backup & Replication may fail or hang when run in environments with a proxy server:

  • Connection timeouts during Microsoft 365 account authorization

  • Failed data retrieval for mailboxes, OneDrive, or Teams

  • Job logs showing errors such as:

    • Connect timed out to get Office 365 code

    • Unauthorized

    • Unable to resolve host

Background

NAKIVO Backup & Replication integrates with Microsoft 365 using the Microsoft Graph API, along with authentication and content endpoints hosted by Microsoft. These services are essential for:

  • Connecting and authorizing Microsoft 365 accounts

  • Discovering and accessing user data from Exchange Online, OneDrive, SharePoint, and Teams

  • Executing backup and recovery jobs

In environments using proxy servers, access to these endpoints may be blocked, filtered, or redirected, resulting in job failures.

Solution

To ensure stable and successful Microsoft 365 backup and recovery in proxy-enabled environments, follow these steps:

  1. Configure your proxy server or system settings to bypass or whitelist the following domains required for Microsoft 365 integration. Refer to Microsoft 365 URLs and IP address ranges for a full and up-to-date list.

  2. Verify that the Director and Transporter have direct access to the Internet or use a proxy server that has the required domains excluded from filtering or SSL inspection.

  3. Test Endpoint Accessibility. Use terminal commands like curl or telnet to verify connectivity from the system running the Transporter:

curl -I https://graph.microsoft.com

curl -I https://login.microsoftonline.com

A successful HTTP 200 response confirms that access is proper. A timeout, 403, or SSL error indicates that proxy settings need adjustment.