Cloud Secure Edge (CSE) Global Edge Network

The Global Edge Network consists of Access Tiers and Filtering Tiers hosted and managed by SonicWall CSE for your organization. We use Google Cloud Platform (GCP), Amazon Web Services (AWS) and Oracle Cloud Infrastructure (OCI) as our edge infrastructure providers, enabling us to use one of their 50+ global regions to provide fast and reliable connections to your users around the world.

Expected Bandwidth for Private Access #

• 1 gbps, given the nodes within a Global Edge Access Tier are provisioned with a 16 Gig link and 2 vCPU quota per Access Tier; this is an estimate, and performance ultimately depends on network conditions and routing.

Global Edge Network Architecture

Overview #

The Global Edge Network contains Access Tiers hosted and managed by Cloud Secure Edge (CSE) for your organization. A high-level architecture diagram is shown below.

The diagram highlights the following concepts:

1. Access Tiers are deployed at locations around the world at our edge infrastructure provider; the specific number of locations vary based on your organization’s deployment strategy and SLA.

2. A Connector is deployed in the customer network, and dials out to establish a secure encrypted tunnel with one or more Access Tiers in the Global Edge Network.

3. CSE allocates a unique Org Domain - of the form {orgname}.banyanops.com - for every organization that is provisioned in the Global Edge Network. The Org Domain resolves via Public DNS (which is configured using geo-proximity routing) to your organization’s Access Tiers managed in the Global Edge Network.

4. Admins publish CSE services for their end users; service domain names will resolve to the network IP address of the nearest Banyan Access Tier.

5. A user or program running on a device will make a request to a service by using its fully qualified domain name, e.g., wiki.exampleorg.banyanops.com.

6. The Access Tiers in the Global Edge Network can address the upstream (aka backend) service instance by IP address or by name, via the encrypted tunnel that has been set up with the Connector.

7. The Access Tiers in the Global Edge Network are connected to the Cloud Command Center to receive the security policy it needs to enforce and to report on access events.

Global Edge Network IP Ranges

Overview #

This doc identifies the IP Ranges used by Cloud Secure Edge’s (CSE) Global Edge Network, which may be useful for allow lists at hosting providers or network firewalls. These IP addresses are updated periodically, and all changes will be reflected here.

Egress IPs #

us-west1 #

• 104.199.123.97/32

• 34.168.118.137/32

us-west2 #

• 34.94.160.149/32

• 35.236.115.75/32

us-west3 #

• 34.106.17.18/32

• 34.106.96.139/32

us-west4 #

• 34.125.111.205/32

• 34.125.114.115/32

us-east1 #

• 35.229.84.184/32

• 34.23.252.95/32

us-east4 #

• 34.48.139.63/32

• 34.48.138.250/32

us-east5 #

• 34.162.30.95/32

• 34.162.172.130/32

us-south1 #

• 34.174.206.134/32

• 34.174.213.147/32

us-central1 #

• 35.223.106.111/32

• 35.192.155.226/32

northamerica-northeast1 #

• 34.118.147.18/32

• 35.203.54.244/32

northamerica-northeast2 #

• 34.130.103.200/32

• 34.124.112.85/32

northamerica-south1 #

• 34.51.39.53/32

• 34.51.12.82/32

asia-south1 #

• 34.93.235.249/32

• 34.93.215.155/32

asia-south2 #

• 34.131.161.10/32

• 34.131.141.60/32

asia-northeast1 #

• 34.84.188.181/32

• 34.84.107.155/32

asia-northeast2 #

• 34.97.57.253/32

• 34.97.46.197/32

asia-northeast3 #

• 34.47.105.76/32

• 34.64.46.24/32

asia-southeast1 #

• 34.143.152.114/32

• 35.197.134.47/32

asia-southeast2 #

• 34.101.157.42/32

• 34.101.101.141/32

asia-east1 #

• 35.201.209.228/32

• 34.81.123.219/32

asia-east2 #

• 34.150.89.62/32

• 34.150.58.56/32

australia-southeast1 #

• 34.87.234.217/32

• 34.40.138.178/32

australia-southeast2 #

• 34.129.130.246/32

• 34.129.67.88/32

southamerica-west1 #

• 34.176.253.49/32

• 34.176.176.212/32

southamerica-east1 #

• 34.39.140.166/32

• 35.247.218.222/32

me-west1 #

• 34.165.103.21/32

• 34.165.235.84/32

me-central1 #

• 34.18.68.17/32

• 34.18.2.162/32

me-central2 #

• 34.166.77.58/32

• 34.166.60.123/32

europe-west1 #

• 34.34.175.18/32

• 34.76.176.187/32

europe-west2 #

• 34.89.13.98/32

• 35.246.83.168/32

europe-west3 #

• 34.159.207.25/32

• 35.234.105.111/32

europe-west4 #

• 35.204.183.246/32

• 34.32.139.115/32

europe-west6 #

• 34.65.204.43/32

• 34.65.222.178/32

europe-west8 #

• 34.154.77.228/32

• 34.154.151.239/32

europe-west9 #

• 34.155.189.89/32

• 34.155.29.118/32

europe-west10 #

• 34.32.83.59/32

• 34.32.17.125/32

europe-west12 #

• 34.17.93.124/32

• 34.17.82.158/32

europe-north1 #

• 34.88.170.208/32

• 35.228.98.228/32

europe-north2 #

• 34.51.174.136/32

• 34.51.176.92/32

europe-central2 #

• 34.118.116.63/32

• 34.116.255.220/32

europe-southwest1 #

• 34.175.148.195/32

• 34.175.20.157/32

africa-south1 #

• 34.35.51.33/32

Ingress IPs #

us-west1 #

• 35.227.136.249/32

• 34.168.44.174/32

• 34.169.80.220/32

• 35.230.123.57/32

us-west2 #

• 34.102.58.236/32

• 34.118.249.25/32

• 34.94.102.86/32

• 35.236.64.220/32

us-west3 #

• 34.106.126.129/32

• 34.106.200.45/32

• 34.106.29.158/32

• 34.106.18.197/32

us-west4 #

• 34.125.187.7/32

• 34.125.126.92/32

• 34.16.156.75/32

• 34.16.161.160/32

us-east1 #

• 34.148.58.59/32

• 34.139.67.83/32

• 34.23.36.249/32

• 34.75.221.132/32

us-east4 #

• 34.48.138.80/32

• 35.245.79.53/32

• 34.48.175.181/32

• 34.48.160.138/32

us-east5 #

• 34.162.70.71/32

• 34.162.208.50/32

• 34.162.135.2/32

• 34.162.151.225/32

us-south1 #

• 34.174.168.241/32

• 34.174.61.183/32

• 34.174.63.127/32

• 34.174.56.67/32

us-central1 #

• 34.133.20.151/32

• 34.70.57.11/32

• 34.30.160.199/32

• 35.224.34.58/32

northamerica-northeast1 #

• 34.47.57.220/32

• 34.47.57.227/32

• 35.203.113.1/32

• 34.47.47.180/32

northamerica-northeast2 #

• 34.130.223.167/32

• 34.130.137.141/32

• 34.130.169.36/32

• 34.130.106.209/32

northamerica-south1 #

• 34.51.37.101/32

• 34.51.11.208/32

• 34.51.42.199/32

• 34.51.29.168/32

asia-south1 #

• 34.93.17.248/32

• 34.100.136.19/32

• 34.93.43.26/32

• 34.100.167.108/32

• 34.35.69.137/32

asia-south2 #

• 34.131.152.68/32

• 34.131.79.52/32

• 34.131.106.148/32

• 34.131.229.209/32

asia-northeast1 #

• 34.146.185.1/32

• 34.146.27.158/32

• 34.84.234.106/32

• 34.84.139.155/32

asia-northeast2 #

• 34.97.23.163/32

• 34.97.237.209/32

• 34.97.131.90/32

• 34.97.233.163/32

asia-northeast3 #

• 34.64.144.28/32

• 34.22.99.53/32

• 34.64.45.228/32

• 34.22.101.175/32

asia-southeast1 #

• 35.240.220.226/32

• 34.87.162.77/32

• 34.143.145.75/32

• 34.87.125.67/32

asia-southeast2 #

• 34.101.193.244/32

• 34.101.100.145/32

• 34.101.101.201/32

• 34.128.121.53/32

asia-east1 #

• 34.80.125.82/32

• 35.236.186.57/32

• 34.80.113.169/32

• 35.201.186.171/32

asia-east2 #

• 34.92.164.239/32

• 34.92.163.91/32

• 34.96.155.120/32

• 34.150.14.202/32

australia-southeast1 #

• 35.189.21.90/32

• 34.40.136.52/32

• 34.87.224.64/32

• 34.40.130.199/32

australia-southeast2 #

• 34.129.118.45/32

• 34.129.171.40/32

• 34.129.175.65/32

• 34.129.64.61/32

europe-central2 #

• 34.118.49.16/32

• 34.116.177.241/32

• 34.118.91.250/32

• 34.118.80.170/32

southamerica-east1 #

• 34.95.160.238/32

• 35.198.5.136/32

• 35.199.68.49/32

• 35.199.94.227/32

southamerica-west1 #

• 34.176.22.218/32

• 34.176.208.54/32

• 34.176.229.213/32

• 34.176.201.216/32

me-west1 #

• 34.165.124.14/32

• 34.165.59.231/32

• 34.165.169.68/32

• 34.165.78.205/32

me-central1 #

• 34.18.57.139/32

• 34.18.105.68/32

• 34.18.42.227/32

• 34.18.97.112/32

me-central2 #

• 34.166.48.124/32

• 34.166.13.175/32

• 34.166.95.42/32

• 34.166.64.171/32

europe-west1 #

• 34.78.213.219/32

• 35.187.31.116/32

• 34.78.252.115/32

• 35.233.53.162/32

europe-west2 #

• 35.246.100.76/32

• 34.142.30.141/32

• 35.197.227.181/32

• 35.197.232.99/32

europe-west3 #

• 35.246.150.13/32

• 35.198.154.159/32

• 34.107.44.99/32

• 34.107.49.81/32

europe-west4 #

• 35.204.242.217/32

• 34.32.136.127/32

• 35.204.119.243/32

• 34.91.159.44/32

europe-west6 #

• 34.65.115.202/32

• 34.65.57.154/32

• 34.65.76.25/32

• 34.65.164.138/32

europe-west8 #

• 34.154.232.172/32

• 34.154.88.83/32

• 34.154.171.22/32

• 34.154.133.111/32

europe-west9 #

• 34.163.213.187/32

• 34.163.187.147/32

• 34.163.95.119/32

• 34.163.129.15/32

europe-west10 #

• 34.32.50.64/32

• 34.32.47.36/32

• 34.32.37.194/32

• 34.32.49.10/32

europe-west12 #

• 34.17.46.233/32

• 34.17.86.194/32

• 34.17.48.199/32

• 34.17.23.133/32

europe-north1 #

• 34.88.229.196/32

• 35.228.96.161/32

• 34.88.39.26/32

• 34.88.48.131/32

europe-north2 #

• 34.51.141.194/32

• 34.51.172.198/32

• 34.51.174.180/32

• 34.51.129.158/32

europe-southwest1 #

• 34.175.4.251/32

• 34.175.29.231/32

• 34.175.125.235/32

• 34.175.220.205/32

africa-south1 #

• 34.35.27.139/32

• 34.35.25.113/32

• 34.35.19.62/32

• 34.35.77.83/32

URL Table of IPs #

A URL that contains a table file of these addresses is available here.

Dedicated IP Addresses #

The Global Edge Network is a multi-tenant global infrastructure, so ingress and egress IPs are shared by all Cloud Secure Edge customers. If you require dedicated IP addresses please review our Edge Deployment Models document for options.

 

Points of Presence (PoPs) used by the Global Edge Network

Overview #

The Cloud Secure Edge (CSE) Global Edge Network is distributed across our edge infrastructure providers, enabling us to use one of their 50+ global regions to provide fast and reliable connections to your users around the world.

SonicWall CSE uses Intelligent Routing to automatically selects the optimal POP location(s) for a user to connect to.

PoP Locations #

CSE’s current POP locations are listed below. POP locations marked with ^ handle Private Access traffic - CIDRs utilized by these POPs are listed in the IP Ranges doc.

North America #

^use1 (S. Carolina)
^usw1 (Oregon)
us-east-1 (N. Virginia)
us-east-2 (Ohio)
us-west-1 (N. California)
us-west-2 (Oregon)
ca-central-1 (Montreal)

Europe #

^euw2 (London)
^euw3 (Frankfurt)
eu-central-1 (Frankfurt)
eu-west-1 (Ireland)
eu-west-2 (London)
eu-west-3 (Paris)
eu-north-1 (Stockholm)

Asia #

^aps1 (Mumbai)
^apn1 (Tokyo)
ap-south-1 (Mumbai)
ap-northeast-3 (Osaka)
ap-northeast-2 (Seoul)
^ap-southeast-1 (Singapore)
^ap-southeast-1 (Sydney)
ap-northeast-1 (Tokyo)

South America #

^sae1 (Sao Paolo)
sa-east-1 (Sao Paulo)