
Microsoft Teams ICE Behavior Causes Unexpected Private IP Connections
The issue involves Microsoft Teams attempting to connect to random private IP addresses using UDP ports above 50,000 during one-to-one calls. This behavior is related to the Interactive Connectivity Establishment (ICE) framework, which Teams uses to establish peer-to-peer connections for media streams. ICE generates a list of candidate addresses, including private IPs, to find the best path for the connection. While this is a normal part of the ICE process, it can cause unexpected connection attempts that might trigger firewall alerts. Network administrators should ensure proper network configuration and monitoring to handle such traffic securely. The problem highlights the importance of understanding ICE behavior and configuring networks to accommodate it without compromising security.