What IP ranges do I allow through the firewall?

Frontend (public) network:

Datacenter City State Country IP Range
ams01 Amsterdam - NLD 159.253.158.0/23
dal01 Dallas Texas USA 66.228.118.0/23
dal05 Dallas Texas USA 173.192.118.0/23
dal06 Dallas Texas USA 184.172.118.0/23
dal07 Dallas Texas USA 50.22.118.0/23
hkg02 Hong Kong - CHN 119.81.138.0/23
hou02 Houston Texas USA 173.193.118.0/23
lon02 London - ENG 5.10.118.0/23
mel01 Melbourne - AUS 168.1.118.0/23
sea01 Seattle Washington USA 67.228.118.0/23
sjc01 San Jose California USA 50.23.118.0/23
sng01 Jurong East - SGP 174.133.118.0/23
tor01 Toronto - CAN 158.85.118.0/23
wdc01 Washington D.C. - USA 208.43.118.0/23

 

Ports to allow:
All TCP/UDP ports
ICMP – ping (for support troubleshooting and monitoring)

DOS Mitigation Systems:

Datacenter City State Country IP Range
AMS Amsterdam - NLD 159.253.156.0/24
DAL Dallas Texas USA 75.126.61.0/24
HKG Hong Kong - CHN 119.81.136.0/24
HOU Houston Texas USA 173.193.116.0/24
LON London - ENG 5.10.116.0/24
MEL Melbourne - AUS 168.1.116.0/24
SEA Seattle Washington USA 50.23.167.0/24
SJC San Jose California USA 50.23.116.0/24
SNG Jurong East - SGP 174.133.116.0/24
TOR Toronto - CAN 158.85.116.0/24
WDC Washington D.C. - USA 50.22.255.0/24

 

Ports to allow:
All TCP/UDP ports

Backend (private) Network:
IP block: your private IP block for server to server communications (10.X.X.X/X)
Ports to allow:
ICMP – ping (for support troubleshooting)
All TCP/UDP ports

Service Network: (on backend/private network):

Be sure to add rules for both DAL01, and the location of your server.  If your server is in AMS01, you'll need to add rules allowing traffic from both DAL01 and AMS01.

Datacenter City State Country IP Range
ams01 Amsterdam - NLD 10.2.64.0/20
dal01 Dallas Texas USA 10.0.64.0/19
dal05 Dallas Texas USA 10.1.128.0/19
dal06 Dallas Texas USA 10.2.128.0/20
dal07 Dallas Texas USA 10.1.176.0/20
hkg02 Hong Kong - CHN 10.2.160.0/20
hou02 Houston Texas USA 10.1.160.0/20
lon02 London - ENG 10.1.208.0/20
mel01 Melbourne - AUS 10.2.80.0/20
sea01 Seattle Washington USA 10.1.64.0/19
sjc01 San Jose California USA 10.1.192.0/20
sng01 Jurong East - SGP 10.2.32.0/20
tor01 Toronto - CAN 10.2.48.0/20
wdc01 Washington D.C. - USA 10.1.96.0/19

SSL VPN network: (on backend/private network)
ICMP – ping (for support troubleshooting)
All TCP/UDP ports (for access from your local workstation)

VPN IP Address Pools:
 

SSL VPN Datacenters

Datacenter City State Country IP Range
ams01 Amsterdam - NLD 10.2.200.0/24
dal01 Dallas Texas USA 10.1.0.0/24
10.1.2.0/24
dal05 Dallas Texas USA 10.1.24.0/24
dal06 Dallas Texas USA 10.2.208.0/24
dal07 Dallas Texas USA 10.1.236.0/24
hkg02 Hong Kong - CHN 10.2.216.0/24
hou02 Houston Texas USA 10.1.56.0/24
lon02 London - ENG 10.2.220.0/24
mel01 Melbourne - AUS 10.2.228.0/24
sea01 Seattle Washington USA 10.1.8.0/24
sjc01 San Jose California USA 10.1.224.0/24
sng01 Jurong East - SGP 10.2.192.0/24
tor01 Toronto - CAN 10.1.232.0/24
wdc01 Washington D.C. - USA 10.1.16.0/24

 

SSL VPN POPs

POP City State Country IP Range
atl01 Atlanta Georgia USA 10.1.41.0/24
chi01 Chicago Illinois USA 10.1.49.0/24
den01 Denver Colorado USA 10.1.53.0/24
fra01 Frankfurt - GER 10.2.237.0/24
lax01 Los Angeles California USA 10.1.33.0/24
mia01 Miami Florida USA 10.1.37.0/24
nyc01 New York New York USA 10.1.45.0/24
tok01 Tokyo - JPN 10.2.225.0/24

 

PPTP VPN Datacenters

Datacenter City State Country IP Range
ams01 Amsterdam - NLD 10.2.203.0/24
dal01 Dallas Texas USA 10.1.3.0/24
dal05 Dallas Texas USA 10.1.27.0/24
dal06 Dallas Texas USA 10.2.211.0/24
dal07 Dallas Texas USA 10.1.238.0/24
hkg02 Hong Kong - CHN 10.2.217.0/24
hou02 Houston Texas USA 10.1.59.0/24
lon02 London - ENG 10.2.221.0/24
mel01 Melbourne - AUS 10.2.229.0/24
sea01 Seattle Washington USA 10.1.11.0/24
sjc01 San Jose California USA 10.1.227.0/24
sng01 Jurong East - SGP 10.2.195.0/24
tor01 Toronto - CAN 10.1.233.0/24
wdc01 Washington D.C. - USA 10.1.19.0/24

 

PPTP VPN POPs

POP City State Country IP Range
atl01 Atlanta Georgia USA 10.1.42.0/24
chi01 Chicago Illinois USA 10.1.40.0/24
den01 Denver Colorado USA 10.1.54.0/24
fra01 Frankfurt - GER 10.2.238.0/24
lax01 Los Angeles California USA 10.1.34.0/24
mia01 Miami Florida USA 10.1.38.0/24
nyc01 New York New York USA 10.1.46.0/24
tok01 Tokyo - JPN 10.2.226.0/24

 

LEGACY NETWORKS

IP Range
12.96.160.0/24
66.98.240.192/26
67.18.139.0/24
67.19.0.0/24
70.84.160.0/24
70.85.125.0/24
75.125.126.8
209.85.4.0/26
216.12.193.9
216.40.193.0/24
216.234.234.0/24