Secure Web Gateway's IP List to Allow in Customer Firewalls

Overview

Customers deploying Umbrella's Secure Web Gateway (SWG) are recommended to allow SWG's IP space to ensure traffic is allowed through their perimeter firewalls. This article outlines the IPs to add to the allow list.

Prerequisite

This article applies to SWG deployments with PAC file or AnyConnect Client with SWG module 

Explanation

Cisco Umbrella is an elastic cloud service, and its IP space is dynamic and constantly changing. Customers deploying the Umbrella SWG product are recommended to allow the following CIDRs on their perimeter firewalls to ensure they can connect to the Umbrella SWG service:

67.215.64.0/19
146.112.0.0/16
155.190.0.0/16
185.60.84.0/22
204.194.232.0/21
208.67.216.0/21
208.69.32.0/21

Traffic profile:

• Protocol = TCP
• Ports = outbound 80 and 443