Synchronization with the WindowsAzureActiveDirectory used by Office365 occurs over SSL; this synchronization is outbound (as it is initiated by DirSync) and uses port 443. Internalnetworkcommunication uses standard ActiveDirectory related ports; for successful synchronization, the DirSync server must be able to contact all DCs in the Forest.