TACACS+ service maintenance from 2026-04-14 01:00 CDT to 2026-04-14 03:00 CDT

This maintenance has been concluded as planned.

This maintenance is now starting as planned.

In our ongoing commitment to providing outstanding service, we will begin rolling out new routing for our TACACS+ service from Tuesday, April 14th.

If your organization uses Local TACACS+ virtual appliance or Local TACACS+ docker container with credential-based authentication and Microsoft Entra ID or OKTA as an Identity provider, please make sure you whitelist the following subnets to bypass MFA requirements:

• East US: 20.85.190.232/29
• West EU: 20.67.6.144/29
  Follow our documentation to see how to bypass MFA for Entra ID and OKTA.

This feature will roll out in seven phases throughout April, with each phase starting one day after the previous one. Organizations will be switched to new routing at 2AM CDT on given day. Customers can identify their enablement date using the schedule below and the corresponding tenant criteria.

• April 14th - Organizations starting with letters ‘A-B’
• April 15th - Organizations starting with letter ‘C’
• April 16th - Organizations starting with letters ‘D-G’
• April 20th - Organizations starting with letters ‘H-L’
• April 21st - Organizations starting with letters ‘M-P’
• April 22nd - Organizations starting with letters ’Q-T’
• April 23rd - Organizations starting with letters ‘U-Z’

With the enablement of this feature, no interruption in service is expected provided these IPs have been allowlisted in advance. To avoid any potential service disruption, we strongly recommend that your organization add these IPs as soon as possible, ideally before your maintenance window. If you experience any issues following the update, please contact our support team for assistance: https://support.portnox.com