͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏
Zscaler Support Notification
|
|
|
Executive Summary
| What |
Upcoming New Data Centers and Old CIDR Deprecation |
| Action Required |
Update your firewall policy configuration |
| Concerned Clouds |
zscaler.net, zscloud.net, zscalertwo.net, zscalerthree.net, private.zscaler.com, zpatwo.net |
| Availability |
April 11, 2026, or later |
|
|
|
|
Zscaler is expanding its global data center footprint and will soon offer services from new or expanded facilities at the following listed locations. These new or expanded facilities provide the following benefits:
- A significant capacity increase, including IPSec VPNs
- Seamless migration in the future because the IP addresses are portable and Zscaler owned
- Increased resiliency with multiple transit providers
- Updated network design with state-of-the-art routers and switches
|
What are the new IP address ranges for these data centers?
|
| Region |
Location |
CIDR |
Notes |
| Americas |
Mexico City II |
205.220.94.0/23 |
New data center |
| Americas |
Mexico City II |
205.220.100.0/23 |
New data center |
| Americas |
Mexico City II |
205.220.104.0/23 |
New data center |
| Americas |
Mexico City II |
205.220.106.0/23 |
New data center |
| Americas |
Mexico City II |
205.220.108.0/23 |
New data center |
| Americas |
Mexico City II |
205.220.110.0/23 |
New data center |
| Americas |
Mexico City II |
205.220.112.0/23 |
New data center |
| Americas |
Mexico City II |
205.220.114.0/23 |
New data center |
| Americas |
Mexico City II |
205.220.116.0/23 |
New data center |
| Americas |
Mexico City II |
2605:4300:3a00::/40 |
New data center |
| All |
All |
199.168.148.0/22* |
Deprecated |
*Applicable only to private.zscaler.com cloud |
|
|
|
You must update your firewall policy rules and any upstream Access Control Lists to allow the new IP address ranges before April 11, 2026.
For Zscaler Private Access (ZPA), select your ZPA cloud and refer to the Zscaler Private Access Firewall Allowlist section. You can safely remove the reference to the deprecated IP address range because these addresses are no longer in use.
|
When will the services be provisioned with these new IP address ranges?
|
The services through the new IP address ranges become available any time on or after the availability date listed in the Executive Summary table. You will also receive an advance notification via Trust Post. If you have not signed up to receive Trust Posts, you can subscribe to them here.
|
What if I have more questions?
|
If you have additional questions, contact Zscaler Support via the Support link in the ZIA Admin Portal.
Regards,
Zscaler Support Team
www.zscaler.com
|
|
|
|
|
Copyright ©2026. All rights reserved. Zscaler, Inc. | 120 Holger Way, San Jose, CA 95134
|
|
|
|
|
|
|
|
|