What IP ranges do I allow through the firewall?

Frontend (public) network:

Datacenter City State Country IP Range
ams01 Amsterdam - NLD 159.253.158.0/23
dal01 Dallas Texas USA 66.228.118.0/23
dal05 Dallas Texas USA 173.192.118.0/23
dal06 Dallas Texas USA 184.172.118.0/23
dal07 Dallas Texas USA 50.22.118.0/23
hou02 Houston Texas USA 173.193.118.0/23
sea01 Seattle Washington USA 67.228.118.0/23
sjc01 San Jose California USA 50.23.118.0/23
sng01 Jurong East - SGP 174.133.118.0/23
wdc01 Washington D.C. - USA 208.43.118.0/23

 

Ports to allow:
All TCP/UDP ports
ICMP – ping (for support troubleshooting and monitoring)

Cisco Guards / Arbor TMS:

 

Datacenter City State Country IP Range
AMS Amsterdam - NLD 159.253.156.0/24
DAL Dallas Texas USA 75.126.61.0/24
HOU Houston Texas USA 173.193.116.0/24
SEA Seattle Washington USA 50.23.167.0/24
SJC San Jose California USA 50.23.116.0/24
SNG Jurong East - SGP 174.133.116.0/24
WDC Washington D.C. - USA 50.22.255.0/24

 

Ports to allow:
All TCP/UDP ports

Backend (private) Network:
IP block: your private IP block for server to server communications (10.X.X.X/X)
Ports to allow:
ICMP – ping (for support troubleshooting)
All TCP/UDP ports

Service Network: (on backend/private network)

 

Datacenter City State Country IP Range
ams01 Amsterdam - NLD 10.2.64.0/20
dal01 Dallas Texas USA 10.0.64.0/19
dal05 Dallas Texas USA 10.1.128.0/19
dal06 Dallas Texas USA 10.2.128.0/20
dal07 Dallas Texas USA 10.1.176.0/20
hou02 Houston Texas USA 10.1.160.0/20
sea01 Seattle Washington USA 10.1.64.0/19
sjc01 San Jose California USA 10.1.192.0/20
sng01 Jurong East - SGP 10.2.32.0/20
wdc01 Washington D.C. - USA 10.1.96.0/19

SSL VPN network: (on backend/private network)
ICMP – ping (for support troubleshooting)
All TCP/UDP ports (for access from your local workstation)

VPN IP Address Pools:
 

SSLVPN (Datacenters)

Datacenter City State Country IP Range
ams01 Amsterdam - NLD 10.2.200.0/24
dal01 Dallas Texas USA 10.1.0.0/24
dal05 Dallas Texas USA 10.1.24.0/24
dal06 Dallas Texas USA 10.2.208.0/24
dal07 Dallas Texas USA 10.1.236.0/24
hou02 Houston Texas USA 10.1.56.0/24
sea01 Seattle Washington USA 10.1.8.0/24
sjc01 San Jose California USA 10.1.224.0/24
sng01 Jurong East SGP 10.2.192.0/24
wdc01 Washington D.C. - USA 10.1.16.0/24

 

SSLVPN (POPS)

POP City State Country IP Range
atl01 Atlanta Georgia USA 10.1.41.0/24
chi01 Chicago Illinois USA 10.1.49.0/24
den01 Denver Colorago USA 10.1.53.0/24
fra01 Frankfurt - GER 10.2.237.0/24
hkg01 Hong Kong - CHN 10.2.229.0/24
lax01 Los Angeles California USA 10.1.33.0/24
lon01 London - ENG 10.2.233.0/24
mia01 Miami Florida USA 10.1.37.0/24
nyc01 New York New York USA 10.1.45.0/24
tok01 Tokyo - JPN 10.2.225.0/24

 

PPTP VPN (Datacenter)

Datacenter City State Country IP Range
ams01 Amsterdam NLD 10.2.203.0/24
dal01 Dallas Texas USA 10.1.3.0/24
dal05 Dallas Texas USA 10.1.27.0/24
dal06 Dallas Texas USA 10.2.211.0/24
dal07 Dallas Texas USA 10.1.238.0/24
hou02 Houston Texas USA 10.1.59.0/24
sea01 Seattle Washington USA 10.1.11.0/24
sjc01 San Jose California USA 10.1.227.0/24
sng01 Jurong East - SGP 10.2.195.0/24
wdc01 Washington D.C. - USA 10.1.19.0/24

 

PPTP VPN (POPS)

POP City State Country IP Range
atl01 Atlanta Georgia USA 10.1.42.0/24
chi01 Chicago Illinois USA 10.1.40.0/24
den01 Denver Colorago USA 10.1.54.0/24
fra01 Frankfurt - GER 10.2.238.0/24
hkg01 Hong Kong - CHN 10.2.230.0/24
lax01 Los Angeles California USA 10.1.33.0/24
lon01 London - ENG 10.2.234.0/24
mia01 Miami Florida USA 10.1.38.0/24
nyc01 New York New York USA 10.1.46.0/24
tok01 Tokyo - JPN 10.2.226.0/24

 

LEGACY NETWORKS

IP Range
67.18.139.0/24
12.96.160.0/24
67.19.0.0/24
216.234.234.0/24
70.85.125.0/24
70.84.160.0/24
216.40.193.0/24
66.98.240.192/26
209.85.4.0/26
216.12.193.9
75.125.126.8

 

Was this helpful?