Allow Resource Connector Traffic to Secure Access

Your firewall must allow your resource connectors to reach the destinations that are listed on this page.

All connections are outbound from your network.

Region-Specific Destinations

Allow traffic to the applicable regional destination FQDNs or addresses, on these ports and protocols:

  • UDP/443 (DTLS)
  • TCP/443 (TLS)
RegionFQDNResolves To
US (Virginia)prod.use1.acgw.sse.cisco.com151.186.199.0/24
US (Pacific Northwest)prod.usw2.acgw.sse.cisco.com151.186.192.0/24
Canada (Central)prod.cac1.acgw.sse.cisco.com151.186.206.0/24
Europe (Germany)prod.euc1.acgw.sse.cisco.com151.186.197.0/24
Switzerland (Zurich)prod.euc2.acgw.sse.cisco.com151.186.207.0/24
United Kingdomprod.euw2.acgw.sse.cisco.com151.186.198.0/24
Asia Pacific (Jakarta)prod.apse3.acgw.sse.cisco.com151.186.205.0/24
Asia Pacific (Tokyo)prod.apne1.acgw.sse.cisco.com151.186.193.0/24
Asia Pacific (Singapore)prod.apse2.acgw.sse.cisco.com151.186.195.0/24
Australia (Sydney)prod.aps1.acgw.sse.cisco.com151.186.196.0/24
India (West)prod.apse1.acgw.sse.cisco.com151.186.194.0/24
Israel (Tel Aviv)prod.ilc1.acgw.sse.cisco.com151.186.203.0/24
Brazilprod.sae1.acgw.sse.cisco.com151.186.168.0/24

Destinations For All Regions

Allow outbound traffic to all of the following destinations:

FQDNResolves ToPort and Protocol
us.repo.acgw.sse.cisco.com44.219.201.178
3.216.0.64
52.25.242.148
52.43.27.33
TCP/443
eu.repo.acgw.sse.cisco.com3.69.139.181
3.65.114.4
13.43.63.69
18.132.151.163
TCP/443
ap.repo.acgw.sse.cisco.com13.114.55.164
57.181.78.26
52.64.179.81
52.65.178.47
TCP/443
us.controller.acgw.sse.cisco.com54.188.111.4
35.165.184.17
54.152.122.37
3.211.159.37
TCP/443
eu.controller.acgw.sse.cisco.com35.156.127.26
52.57.119.242
18.135.181.212
18.135.254.39
TCP/443
ap.controller.acgw.sse.cisco.com3.105.121.195
13.211.184.71
54.199.90.120
18.178.227.126
TCP/443
api.sse.cisco.com146.112.59.20TCP/443
prod.acme.sse.cisco.comTCP/443
ssepki.cryptosvcs.cisco.comTCP/80

Requirements and Prerequisites for Resource Connectors and Connector Groups < Allow Resource Connector Traffic to Secure Access > Add Resource Connector Groups