SSEDOCS-874 - Addresses That Never Use Zero Trust Access

Traffic to destinations on this page will never be handled using Zero Trust Access. These addresses are in addition to any system-provided exceptions and exclusions that appear in a ZTA Profile, and they cannot be modified or removed.

IPv6

::1/128 Loopback Address [RFC4291]
::/128 Unspecified Address [RFC4291]
64:ff9b::/96 IPv4-IPv6 Translat. [RFC6052]
64:ff9b:1::/48 IPv4-IPv6 Translat. [RFC8215]
100::/64 Discard-Only Address Block [RFC6666]
2001::/23 IETF Protocol Assignments [RFC2928]
2001::/32 TEREDO [RFC4380] [RFC8190]
2001:1::1/128 Port Control Protocol Anycast [RFC7723]
2001:1::2/128 Traversal Using Relays around NAT Anycast [RFC8155]
2001:1::3/128 DNS-SD Service Registration Protocol Anycast [RFC-ietf-dnssd-srp-25]
2001:2::/48 Benchmarking [RFC5180][RFC Errata 1752]
2001:3::/32 AMT [RFC7450]
2001:4:112::/48 AS112-v6 [RFC7535]
2001:10::/28 Deprecated (previously ORCHID) [RFC4843]
2001:20::/28 ORCHIDv2 [RFC7343]
2001:30::/28 Drone Remote ID Protocol Entity Tags (DETs) Prefix [RFC9374]
2001:db8::/32 Documentation [RFC3849]
2002::/16 [3] 6to4 [RFC3056]
2620:4f:8000::/48 Direct Delegation AS112 Service [RFC7534]
3fff::/20 Documentation [RFC9637]
5f00::/16 Segment Routing (SRv6) SIDs [RFC9602]
fc00::/7 Unique-Local [RFC4193] [RFC8190]
fe80::/10 Link-Local Unicast [RFC4291]
ff00::/8 Multicast Address Block

IPv4

127.0.0.0/8 Loopback Address Block
169.254.0.0/16 Link-local Address Block
224.0.0.0/4 Multicast Address Block
255.255.255.255 Broadcast Address

7.128.0.0/9 Synthetic range

---

Traffic Steering for ZTA Connections to Internet and SaaS Destination < Addresses That Never Use Zero Trust Access > Trusted Networks for Zero Trust Access Connections