Update (April 19th):
SWG servers in many of our new data centers will use 22.214.171.124/16 for ingress. That is, proxy.sig.umbrella.com will resolve to IPs in the 126.96.36.199/16 range. The first two data centers with this change are Tokyo 2 and Mumbai 2.
If you limit outbound connectivity on your network and endpoints, please be sure to add an allow rule for 188.8.131.52/16. The full list of firewall recommendations for SWG is available here.
Update (February 14th):
The new IP address range will not be used for internet-facing connections in the Tokyo edge data center. The new range will be used for internet-facing connections initially in upcoming expansion data centers (Tokyo #2 and Mumbai #2) in the coming months, and for other new and expanded data centers going forward.
Important – Action may be required.
When your traffic leaves an Umbrella edge data center, the source (or “egress”) IP addresses will be chosen from a range of Umbrella address blocks. As we continue to extend and improve the Umbrella service, we've added the following IP address range:
- SIG IP address range 184.108.40.206/16
Impact: You may be required to inform providers of services you access through Umbrella of this new IP address range.
Some service providers require prior knowledge of the source IP address ranges used to access their services. Customers using such services must inform their providers of this new range, 220.127.116.11/16, to ensure uninterrupted access to their services through Umbrella.
The 18.104.22.168/16 range is being implemented first in the Tokyo edge data center. Initially, a limited amount of traffic will egress from this IP address range. 22.214.171.124/16 will continue to be the primary egress range for Umbrella, with 126.96.36.199/16 and 188.8.131.52/16 used only in rare circumstances.
Reserved IP is available for customers that require a fixed egress IP address that is not shared with other Umbrella customers.