# Zscaler IP Ranges
# Updated: 2026-07-12 03:18:05
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# To restrict access to only these IPs in nginx,
# add the following line to your server block in your nginx configuration file (e.g., /etc/nginx/nginx.conf or /etc/nginx/sites-available/default):
# include /path/to/nginx_zscaler_allow.conf;

allow 8.25.203.0/24;
allow 8.34.34.0/24;
allow 8.35.35.0/24;
allow 64.62.169.0/24;
allow 64.215.22.0/24;
allow 70.39.159.0/24;
allow 70.40.176.0/23;
allow 70.40.178.0/24;
allow 87.58.64.0/18;
allow 89.18.89.0/24;
allow 101.2.192.0/18;
allow 104.129.192.0/20;
allow 120.29.239.0/24;
allow 128.177.125.0/24;
allow 128.177.129.0/24;
allow 128.177.135.0/24;
allow 128.177.136.0/24;
allow 129.127.226.0/23;
allow 136.226.0.0/16;
allow 137.31.0.0/16;
allow 137.83.131.0/24;
allow 137.83.132.0/23;
allow 137.83.136.0/23;
allow 137.83.141.0/24;
allow 137.83.143.0/24;
allow 137.83.144.0/22;
allow 137.83.149.0/24;
allow 137.83.150.0/23;
allow 137.83.152.0/24;
allow 137.83.154.0/23;
allow 137.83.157.0/24;
allow 137.83.160.0/23;
allow 137.83.165.0/24;
allow 137.83.166.0/23;
allow 137.83.168.0/21;
allow 137.83.176.0/24;
allow 137.83.178.0/24;
allow 137.83.181.0/24;
allow 137.83.182.0/23;
allow 137.83.184.0/23;
allow 137.83.188.0/23;
allow 137.83.191.0/24;
allow 140.232.188.0/23;
allow 140.232.190.0/24;
allow 142.195.110.0/23;
allow 147.161.128.0/17;
allow 149.117.100.0/24;
allow 149.117.102.0/24;
allow 149.117.230.0/23;
allow 155.95.82.0/24;
allow 155.95.84.0/24;
allow 155.95.86.0/24;
allow 159.254.0.0/16;
allow 161.107.92.0/22;
allow 161.151.200.0/22;
allow 161.151.234.0/23;
allow 161.151.240.0/23;
allow 162.82.254.0/24;
allow 164.137.0.0/16;
allow 165.225.0.0/17;
allow 165.225.192.0/18;
allow 167.73.110.0/24;
allow 167.103.2.0/23;
allow 167.103.4.0/22;
allow 167.103.8.0/21;
allow 167.103.16.0/20;
allow 167.103.32.0/20;
allow 167.103.48.0/23;
allow 167.103.54.0/23;
allow 167.103.56.0/21;
allow 167.103.64.0/20;
allow 167.103.80.0/21;
allow 167.103.88.0/23;
allow 167.103.96.0/21;
allow 167.103.110.0/23;
allow 167.103.112.0/20;
allow 167.103.132.0/22;
allow 167.103.136.0/21;
allow 167.103.144.0/20;
allow 167.103.160.0/21;
allow 167.103.186.0/23;
allow 167.103.188.0/22;
allow 167.103.192.0/23;
allow 167.103.196.0/22;
allow 167.103.200.0/21;
allow 167.103.208.0/21;
allow 167.103.216.0/23;
allow 167.103.228.0/22;
allow 167.103.232.0/22;
allow 167.103.247.0/24;
allow 167.103.248.0/21;
allow 167.106.0.0/16;
allow 168.183.170.0/23;
allow 168.183.172.0/22;
allow 168.183.176.0/23;
allow 168.183.183.0/24;
allow 168.183.184.0/23;
allow 168.183.186.0/24;
allow 168.183.191.0/24;
allow 168.183.192.0/23;
allow 168.246.8.0/23;
allow 170.85.0.0/16;
allow 175.107.128.0/18;
allow 198.14.64.0/18;
allow 199.168.148.0/23;
allow 199.168.150.0/24;
allow 205.220.0.0/17;
allow 209.55.128.0/18;
allow 209.55.192.0/19;
allow 220.42.0.0/15;
allow 2400:7aa0:1200::/39;
allow 2400:7aa0:1400::/38;
allow 2400:7aa0:1800::/37;
allow 2400:7aa0:2200::/39;
allow 2400:7aa0:2400::/39;
allow 2400:7aa0:2600::/40;
allow 2400:7aa0:2800::/39;
allow 2400:7aa0:2b00::/40;
allow 2400:7aa0:2c00::/40;
allow 2400:7aa0:2d00::/48;
allow 2605:4300:5::/48;
allow 2605:4300:1200::/39;
allow 2605:4300:1400::/38;
allow 2605:4300:1800::/37;
allow 2605:4300:2200::/39;
allow 2605:4300:2400::/38;
allow 2605:4300:2800::/38;
allow 2605:4300:2d00::/40;
allow 2605:4300:2e00::/40;
allow 2605:4300:3200::/39;
allow 2605:4300:3400::/39;
allow 2605:4300:3700::/40;
allow 2605:4300:3800::/40;
allow 2605:4300:3a00::/40;
allow 2605:4300:3c01::/48;
allow 2605:4300:e200::/39;
allow 2605:4300:e400::/39;
allow 2605:4300:fe00::/47;
allow 2605:4300:ff00::/40;
allow 2a03:eec0:3210::/46;
allow 2a03:eec0:3216::/47;
allow 2a03:eec0:3221::/48;
allow 2a03:eec0:3222::/47;
allow 2a03:eec0:3224::/48;
allow 2a03:eec0:322b::/48;
allow 2a03:eec0:322c::/47;
allow 2a03:eec0:322e::/48;
deny all;