Cloud Enforcement Node Ranges

SECTIONS

Firewall Config. Requirements
Cloud Enforcement Node Ranges
Central Authority IP Addresses
PAC IP Addresses
Private ZEN Requirements
NSS Configuration
ZAB Configuration
Virtual ZEN Requirements
DLP ICAP Requirements
Zscaler Client Connector
Private Nanolog Firewall
Zscaler Private Access (ZPA)
Zscaler Exact Data Match Requirements
ZIA Virtual Service Edge
ZIA Service Edge

SUPPORT

Changelog
Customer Support

Looking for the latest changes? Changelog.

Customers that have implemented private Cloud Enforcement Nodes in their environment: you may need to take into account additional address ranges not represented here. Customers should ensure that access is permitted to data center IP ranges. Allowing access to only specific IP addresses may result in a loss of service.

Notes
RS	Regional Surcharge	An additional fee is required in order to use this data center.
DNP	Do Not Provision	The Data Center must not be used due to planned data center decommissioning, or possible other factors.
NRU	Not Ready for Use	The Data Center is coming up online but can not be used yet. Please update your firewall configuration to allow future use.
Not in Gateway	The data center is not used in PAC files.

165.225.72.0/22

199.168.148.0/23 104.129.194.0/23

Location	IP Address (CIDR Notation)	Proxy Hostname	GRE Virtual IP	VPN Host Name
EMEA
Frankfurt IV	165.225.72.0/22	fra4.sme.zscalerbeta.net	165.225.72.38	fra4-vpn.zscalerbeta.net
Americas
San Francisco IV	199.168.148.0/23	sunnyvale1.sme.zscalerbeta.net	199.168.148.131	sunnyvale1-vpn.zscalerbeta.net
Washington DC	104.129.194.0/23	was1.sme.zscalerbeta.net	104.129.194.38	was1-vpn.zscalerbeta.net
Future Data centers
Upcoming DC I	185.46.212.0/22
Upcoming DC II	104.129.192.0/20
Upcoming DC III	165.225.0.0/17
Upcoming DC IV	165.225.192.0/18
Upcoming DC V	147.161.128.0/17
Global ZEN IP addresses
185.46.212.88	185.46.212.89	185.46.212.90	185.46.212.91
185.46.212.92	185.46.212.93	185.46.212.97	185.46.212.98

Change Log

07/08/20

Moved all current DCs from Latin America to Americas

07/08/20

Moved all current DCs from Africa to EMEA

07/08/20

Renamed "Europe", "US, Mexico, and Canada" and "Asia" to respectively EMEA, Americas, and APAC

03/03/20

Added Upcoming DC V (147.161.128.0/17) to Future Data centers section

04/12/17

Multiple changes were performed and non-required subnets were removed from DC IP ranges

05/24/2016

Removed Miami Datacenter with IP Range 216.177.204.0/24, 216.177.213.0/24, 216.177.207.0/24

4/21/2016

Removed 95.172.68.144/28, 95.172.74.0/24 and 95.172.88.0/27 from Hub ranges

02/09/2016

Added proxy hostname : mia2.sme.zscaler.net and GRE Virtual IP : 165.225.32.32 to Miami II (165.225.32.0/23).

02/04/2016

Added Warsaw IP range 165.225.84.0/23, , Milan II IP range 165.225.86.0/23, Brussels IP range 165.225.88.0/23

01/27/2016

Removed Toronto I datacenter 70.42.29.0/27

01/26/2016

Removed Tokyo I datacenter 211.13.205.128/27

10/30/2015

Added proxy hostname : tsn1.sme.zscaler.net and GRE Virtual IP : 139.220.195.32 to Tianjin(139.220.195.0/24).

10/27/2015

Multiple Changes Performed. Added proxy hostname : yto2.sme.zscaler.net and GRE Virtual IP : 165.225.36.32 to Toronto II (165.225.36.0/23). Removed Atlanta I(216.52.207.64/26) and Atlanta I (199.168.149.0/24)

10/6/2015

Changed San Francisco IV (104.129.192.0/24 to 104.129.192.0/23), Chicago (104.129.196.0/24 to 104.129.196.0/23), Washington DC (104.129.194.0/24 to 104.129.194.0/23), Amsterdam (185.46.212.0/24 to 185.46.212.0/23), Zurich (185.46.214.0/24 to 185.46.214.0/23)

9/30/2015

Removed San Francisco I (64.62.169.0/24, 216.218.133.193 & 72.52.96.0/26) Sunnyvale (both 8.25.203.0/24 & 199.168.148.0/24) and Moscow II 46.46.150.0/24

8/21/2015

Multiple changes performed. Added proxy hostname : lon3.sme.zscaler.net and GRE Virutal IP : 165.225.80.32 to London III(165.225.80.0/22). Changed cidr notation for Frankfurt IV and Paris II from /24 to /22. Added Dallas I(165.225.34.0/23) and Miami II(165.225.32.0/23).

8/13/2015

Added proxy hostname : par2.sme.zscaler.net and GRE Virutal IP : 165.225.76.32 to Paris II(165.225.76.0/23).

8/5/2015

Added proxy hostname : fra4.sme.zscaler.net and GRE Virutal IP : 165.225.72.32 to Frankfurt IV(165.225.72.0/23).

7/29/2015

Removed Frankfurt II(62.67.237.0/24).

7/10/2015

Added Chennai proxy hostname : maa1.sme.zscaler.net and GRE Virtual IP : 165.225.104.32

7/9/2015

Denver was removed and Denver II was renamed to Denver

6/24/2015

Multiple changes performed. Renamed Proxy Virtual IP to GRE Virtual IP to clean up any confusion surround where GRE tunnels should terminate.Renamed Dallas II to Dallas, Toronto III to Toronto II, Chennai III to Chennai, Mumbai III to Mumbai, San Francisco II to Sunnyvale, Singapore II to Singapore, Sydney II to Sydney, Frankfurt III to Frankfurt IV, London II to London, Madrid II to Madrid, Paris III to Paris II, Sao Paulo I to Sao Paulo, Lagos I to Lagos and Stockholm II to Stockholm (165.225.68.0/24). Removed Stockholm (81.91.3.0/28)

6/19/2015

Added Moscow III (165.225.66.0/24), added Atlanta II (104.129.204.0/23)

6/16/2015

Modified Moscow II proxy hostname from mow2.sme.zscaler.net to mow2a.sme.zscaler.net and added mow2.sme.zscaler.net proxy hostname to Moscow III

5/20/2015

Removed Amsterdam I (95.172.88.0/27) Renamed Amsterdam II (both 185.46.212.0/24 & 213.152.228.0/24) to Amsterdam

5/8/2015

Added the following data centers for future deployment; Atlanta II (104.129.204.0/23), Toronto III (165.225.36.0/23), Frankfurt III (165.225.72.0/23), London III (165.225.80.0/23), Paris III (165.225.76.0/23), Chennai III (165.225.104.0/23), Moscow III (165.225.66.0/24), Tianjin (139.220.195.0/24).

4/13/2015

Added Denver II 104.129.200.0/24 and 104.129.201.0/24

4/12/2015

Modified Tokyo II IP addresses replacing 42.99.166.0/24 with 165.225.100.0/24 and 165.225.101.0/24.

3/30/2015

Removed Washington DC I (66.151.103.0/26), renamed Washington DC III (128.177.136.0/24 & 104.129.194.0/24)to Washington. Removed Taipei (202.147.29.192/26) and renamed Taipei II (165.225.102.0/24) to Taipei.

3/20/2015

Added Zurich 165.225.70.0/24 and 185.46.214.0/24

3/6/2015

Changed Chicago III (128.177.125.0/24 & 104.129.196.0/24) to Chicago

2/27/2015

Changed Hong Kong II from 42.99.165.0/24 to 165.225.96.0/24, Removed Chicago I 67.202.75.0/24, Chicago I 208.100.40.32/27, Chicago II 8.28.177.0/24 and Washington DC II 8.28.19.0/24.

2/20/2015

Removed Los Angeles 8.19.13.0/24, in doing so Los Angeles II datacenters have been renamed Los Angeles

2/15/2015

Modified Taipei II, replaced 42.99.167.0/24 with 165.225.102.0/24, Added Melbourne 165.225.98.0/24

1/25/2015

Modified Copenhagen I, replaced 89.167.133.0/24 with 165.225.64.0/24, Added Stockholm II 165.225.68.0/24

11/18/2014

Modified Zurich, replaced 89.167.131.0/24 with 185.46.213.0/24

9/11/2014

Added Future 165.225.0.0/17 and 165.225.192.0/18 ranges

7/18/2014

Added - Copenhagen I, Denmark (89.167.133.0/24), Chicago III, USA(104.129.196.0/24),Hong Kong (42.99.165.0/24), Los Angeles II, USA(104.129.198.0/24), Santa Clara I, USA(104.129.192.0/24), Singapore II (42.99.164.0/24), Taipei, Taiwan(42.99.167.0/24), Tokyo II, Japan(42.99.166.0/24), Washington III, USA(104.129.194.0/24), Future(104.129.192.0/20)

6/6/2014

Added - Amsterdam II, Netherlands (213.152.228.0/24), Amsterdam II, Netherlands (185.46.212.0/24), Santa Clara, USA (70.39.159.0/24), Santa Clara, USA (128.177.129.0/24), Zurich, Switzerland (89.167.131.0/24), Cape Town, South Africa (196.23.154.96/27),Johannesburg, South Africa (196.23.147.96/27), Washington III, USA (128.177.136.0/24), Los Angeles, USA (128.177.135.0/24), Frankfurt, Germany (62.67.237.0/24) and Chicago, USA (128.177.125.0/24)

6/6/2014

Removed - Madrid, Spain (109.234.81.160/28), London I, United Kingdom (212.118.224.144/28), Amsterdam, Netherlands (94.31.51.0/24)

4/9/2014

Added - Nigeria, South Africa (197.156.245.192/27)

4/4/2014

Removed - Lima, Peru (190.102.136.240/28) and Santiago, Chile (200.29.13.0/24)

3/31/2014

Added - Mumbai III - India (103.27.171.0/24)

2/28/2014

Added - Moscow (46.46.150.0/24)

2/14/2014

Added - Amsterdam - Netherlands II (94.31.51.0/24), Sao Paulo - Brazil II (64.215.22.0/24), Sydney - Australia II (175.45.116.0/24), TBD (185.46.212.0/22), Chicago, USA III (70.39.153.0/24), Madrid, Spain II (89.167.129.0/24)

1/22/2014

Removed - Dallas , USA I (216.52.185.64/27)

1/16/2014

Added - Frankfurt, Germany III (199.168.150.0/24 ), Milan, Italy (72.37.140.0/24) and New York II, USA (199.168.151.0/24)

1/13/2014

Removed - Moscow, Russia (94.25.128.112/28)

1/8/2014

Removed - London, United Kingdom I (212.118.224.144/28)