On November 10th, 2025, Portnox will add several new IP addresses to our backend cloud infrastructure services. These IPs will allow us to distribute load more evenly across our growing backend services, improving performance, increasing reliability, and allowing customers to stay ahead of future expansions with limited to no impact.

This notice applies only to Portnox customers who are…

Running any of the following Portnox on-prem components or utilizing our cloud SiEM integrations with a SaaS or cloud-based SiEM provider

    AND

Have access control lists, firewall policies, or any whitelist restrics network traffic with Portnox services to one or more specific IP addresses.

• Use credential-based authentication (not certificates) and have whitelisted IPs in Entra ID not to require MFA
• SiEM Services (Portnox Cloud to a SaaS SiEM provider, such as Splunk Cloud)
• SiEM on-prem services (Through SiEM Docker Container or ADBroker)
• Portnox AgentP
• ADBroker
• Local RADIUS (Container or VM)
• Local TACACS+ (Container or VM)
• Unifi Guest Captive Portal Container
• Portnox Auto-Update Container

Required Action

The following subnets must be added to any access control list, firewall policy, or IP address whitelist that may be restricting network access to Portnox Cloud services before Sunday, November 9th. Failure to update the restrictions with these new subnets could impact the delivery of the associated service. If your tenant is restricted to a specific geo, then only the subnet associated with that geo must be added to any ACL, firewall policy, or whitelist.

Note: The subnets below must be allowed for any/all of the services listed above, using the same port(s) associated with those services. Also, these new subnets should extend any existing firewall policies, ACLs, or whitelists already defined for these services, not as a replacement for those rules.

• East US - 20.85.190.232/29
• West EU - 20.67.6.144/29

Help and Support

Unsure how or if these changes affect you? Perhaps you have questions or concerns regarding these changes? If so, please create a support request and a support engineer will be happy to assist.