Portnox Urgent Action Required

Reminder: Action required for customers using IP-based allowlists with Portnox services

Tuesday - March 31rst 2026

Details:

As a reminder, Portnox has added new backend service IP ranges to support performance and reliability improvements.

This applies to you if:
Your organization uses Portnox on-prem components, cloud SiEM integrations, AgentP, ADBroker, Local RADIUS/TACACS+, UniFi Guest Captive Portal, or the Auto-Update Container, and/ or restrict network access to Portnox services using firewall rules, ACLs, or IP allowlists.

This is especially relevant for customers using Portnox TACACS+ with credential-based authentication and Microsoft Entra ID IP allowlisting to bypass MFA requirements.

Action required
Please add the following subnets to your existing allowlists and firewall policies for the same ports already used by these services:

• East US: 20.85.190.232/29
• West EU: 20.67.6.144/29