Executive Summary
| What |
Upcoming Data Center Expansion & Changes |
| Action Required |
Update your Firewall policy configuration |
| Concerned Clouds |
zscaler.net, zscloud.net, zscalertwo.net, zscalerthree.net, private.zscaler.com, zpatwo.net |
| Availability |
October 31, 2026, or later |
Details
Zscaler is expanding its global data center footprint and will soon offer services from expanded facilities at the following listed locations. These expanded facilities provide the following benefits:
- A significant capacity increase, including IPSec VPNs
- Seamless migration in the future because the IP addresses are portable and Zscaler owned
- Increased resiliency with multiple transit providers
- Updated network design with state-of-the-art routers and switches
What are the new IP address ranges and changes for these data centers?
| Region |
Location |
CIDR |
Notes |
| Americas |
Washington DC |
137.31.170.0/23 |
Expansion of existing data center |
| Americas |
Bogota II |
205.220.68.0/24 |
Removed allocation from this data center |
What do I need to do?
You must update your Firewall policy rules and any upstream Access Control Lists (ACLs) to allow the new IP address ranges and remove legacy IP address ranges before October 31, 2026.
For Private Access (ZPA), select your Private Access cloud and see the Zscaler Private Access Firewall Allowlist section.
When will the services be provisioned with these new IP address ranges?
The services through the new IP address ranges become available any time on or after the availability date noted in the Executive Summary table. You will also receive an advance notification via the Zscaler Trust Post. If you have not signed up to receive Trust Posts, you can subscribe to them here.
What if I have more questions?
If you have additional questions, contact Zscaler Support via the Support link in the ZIA Admin Portal or the Help menu in the Zscaler Admin Console.
Regards,
Zscaler Support Team
www.zscaler.com
