Unable to load canva.com behind SonicWALL firewall
Description
Since May 22, 2026, users have reported issues accessing Canva.com when connected through a SonicWALL firewall. The website fails to load in browsers and displays a "Connection timed out" error.
Observed Behavior
- Users can successfully ping canva.com, indicating that DNS resolution and basic network connectivity are functioning correctly.
- Despite successful ping responses, the website does not load in web browsers.
Root Cause
- The issue appears to be related to Geo-IP filtering configured on the SonicWALL firewall.
- Traffic to Canva is being blocked due to a rule that blocks connections to Australia, which is where some Canva services are hosted.
Impact
- Users behind the affected firewall are unable to access Canva, resulting in disruption to workflows that depend on the service.
Resolution
Root Cause Details
-
The affected IP addresses so far observed are 103.169.142.20 and 103.169.142.21 owned by Canva Pty Ltd (Australia).
-
Registration Details:
- Organization: Canva Pty Ltd (Australia)
- IP Range: 103.169.142.0 – 103.169.142.255
-
As per the official Canva status page (https://www.canvastatus.com/), Canva experienced service issues on May 22, 2026.
-
As part of their mitigation efforts, Canva appears to have rerouted traffic through Australia-based CDN endpoints.
-
You may also observe that running a ping or DNS lookup for canva.com returns different IP addresses at different times.
- This is expected behavior, as large-scale web services like Canva use multiple servers and content delivery networks (CDNs) to distribute traffic.
- These IPs may belong to:
- Canva’s primary infrastructure
- Subdomains or backend services
- Third-party or region-specific CDN providers
-
Due to this dynamic resolution, some of the returned IP addresses are currently geolocated to Australia, which leads to blocking when Geo-IP filtering policies restrict that region.
Impact Explanation
- Due to this change, Canva domain resolution now returns IP addresses that are geolocated to Australia.
- This behavior is consistent across:
- SonicWALL Geo-IP lookup
- Public IP geolocation tools
- As a result, environments with Geo-IP filtering configured to block Australia will unintentionally block access to Canva.
Resolution / Workaround
To restore access to Canva.com:
- Option 1: Exclude the affected IP range (103.169.142.0/24) from Geo-IP filtering
KB: https://www.sonicwall.com/support/knowledge-base/custom-geo-ip-list-to-exclude-a-website-from-geo-ip-filter/kA1VN0000000Niz0AE - Option 2: Modify the Geo-IP filter policy to allow traffic to Australia
KB: https://www.sonicwall.com/support/technical-documentation/docs/sonicos-7-0-0-0-security_services/Content/Geo_IP_Filter/geo_ip-settings.htm - Option 3: Use Custom list to override the IP range to one of the allowed countries. For eg. US
KB: https://www.sonicwall.com/support/knowledge-base/custom-geo-ip-list-to-exclude-a-website-from-geo-ip-filter/kA1VN0000000Niz0AE
