Zscaler Support Notification

Executive Summary

Details

As part of our effort to provide the world’s most robust and high-performance internet security platform, Zscaler is expanding its global core platform service, Zscaler Zero Trust Exchange (ZTE), and adding new Hub IP Address ranges. This expansion of ZTE provides the scalability and reliability required to meet the growing demand for global connectivity on our cloud platform.

What are the new IP Address ranges?

The following new IP address range has been added to the Zscaler Hub IP Addresses and Zscaler Aggregate IP Addresses lists. 

What do I need to do? 

You must review and update your firewall policy rules and any upstream Access Control Lists (ACLs) to allow the IP address ranges under the Required section before January 5, 2026. If the corresponding IP address ranges from the Recommended section are already allowed, then no action is required. View the full list of Zscaler Hub IP Addresses by going to https://config.zscaler.com/<Zscaler cloud name>/hubs for your Zscaler cloud (e.g., https://config.zscaler.com/zscaler.net/hubs).

To view the list of Zscaler Aggregate IP Address Ranges, go to ‘https://config.zscaler.com/<Zscaler cloud name>/cenr’ (e.g., https://config.zscaler.com/zscaler.net/cenr). To learn more, see What Is My Cloud Name for ZIA? 

For Zscaler Private Access (ZPA), select your respective ZPA cloud and refer to the Zscaler Private Access Firewall Allowlist section.

When will the service be provisioned with the new IP ranges? 

The services running through the new Hub IP Address ranges can be put to use any time on or after the availability date noted earlier.

What if I have more questions? 

If you have additional questions, contact Zscaler Support via the Support link in the ZIA Admin Portal.

Regards,

Zscaler Support Team

www.zscaler.com