FAQ: Skyhigh Security IP Network Address Expansion

Skyhigh Security IP Network Address Space Expansion

As part of the initiative to continuously enhance the world-class, secure, and high-performance global Skyhigh Cloud Platform, we are transitioning to a new IP address range for all Skyhigh Security Points of Presence (PoPs) and selected services. This change is essential to enhance network performance, scalability, and long-term service reliability.

Required Customer Action

To avoid any disruption in service, we request all customers to review and update their Firewall Allow Lists by July 30th 2025 to include the following IP range:

New IP Range: 131.229.128.0/17

Why is Skyhigh Security Making This Change?

Due to the continued fast paced expansion of Skyhigh Security’s global presence, Skyhigh Security will be transferring and consolidating its current IP space to a new network address range.  

The new network will replace the previous /17 network as well as consolidate smaller separated /24 networks within 1 continuous /17 network range.

The implementation of this new network range will allow for continued future growth providing ample IP addresses for all services and regions as well as mitigating the need for our customers to make frequent updates to accommodate any future network changes.

What Changes Are Required and Why Are These Important?

Over the next 12 months we will be phasing in the new range. We are starting the process of migrating to this new address space in July 2025, to support this migration, each PoP will undergo scheduled maintenance during off-business hours to accommodate change over to the new network range. 

Adding the new IP range to your “Firewall Allow Lists” ensures uninterrupted connectivity to Skyhigh Security services. Failure to complete these updates may result in connectivity issues or interruptions to service.

Note: Once the /17 network range has been applied to customer firewall allow lists, no further action will be required other than for customers with configured IPSec/GRE Tunnels.

Required Action for Customers with configured IPsec/GRE Tunnels

In addition to customers reviewing and updating their firewall allow lists to include new address range, customers with IPsec/GRE tunnels configured will need to reconfigure these tunnels with the new IP addresses that will be deployed as part of this initiative. More details to come in future communications.

• Configure an IPsec Tunnel on Secure Web Gateway

• Configure GRE Tunnels on Secure Web Gateway

• Routing Web Traffic to PoPs

Global Rollout Schedule

Communication Channels For Ongoing Notifications

Formal announcements will be sent to All Registered Connect Customers of the Skyhigh Connect Bi-monthly Newsletter providing information on the rollout schedule.

Additional detailed notifications and instructions will also be sent to the “All Technical Customers” Connect group. 

Please ensure that customers that require these additional detailed notifications have opted in to via Skyhigh Connect portal.

Skyhigh Security Status RSS Feed the Skyhigh Security Status site offers real-time information on maintenance events, performance and service status and will provide supporting maintenance notifications of each change. 

Skyhigh Security IP Address Space Change Resources 

To support this migration Skyhigh will provide the following resources to support this initiative.

• Skyhigh Connect: Customer Communications 

• FAQ: Point of Presence (PoP) IP and Associated Services 

• IP Ranges Overview

• Allow IP Address Ranges for PoP

• Lists of IP Addresses and Other Parameters for Use in Network Configuration

• Configure an IPsec Tunnel on Secure Web Gateway

• Configure GRE Tunnels on Secure Web Gateway

• Support links to Contact Skyhigh Security Support for additional assistance