Secure Web Gateway Network IP Address Ranges to Allow in Access Lists

Secure Web Gateway uses the Global Routing Manager (GRM) service for intelligent routing, load balancing, and failover. Web traffic is routed to the best available Point of Presence (PoP), which is a geo-located entry point into the cloud.

To avoid issues with this traffic management, complete the following as needed:

• Configure your firewall — If you have set up a firewall to protect your network, allow traffic to the inbound IP address ranges of the networks for the Points of Presence (PoPs) in the firewall access list.
  
  This ensures access to the PoPs is not blocked by your firewall.

• Configure access to business-to-business services — If you are running business-to-business services with business partners who restrict access based on source IP addresses, forward outbound IP address ranges of the networks for the Points of Presence (PoPs) to them, so they can enter these in their access lists.
  
  This ensures you can connect to your business-to-business services through the PoPs.

A list of the IP address ranges you should allow in your firewall access list and forward to your business partners is provided on a status site, see Skyhigh Security Status. The list is available there under Setup > IP Addresses/Ranges.

In this list:

• IP address ranges are marked according to whether they are used for inbound or outbound traffic, or for both.
  
  

• IP address ranges of networks that have been deactivated are crossed out.

You can export this list as a file in .txt (for inbound or outbound IP address ranges), .cvs, or .json format.

A map that shows the physical location of the networks for our PoPs is also provided on this site, as well as information about statuses and maintenance windows.