This article lists the public IP ranges for the PoP locations in the Cato Cloud and the geo-localized ranges for countries that currently don't have a PoP. For your convenience, you can download the PoP Location and IP Range data attached to this article in a CSV file. Please click Follow to automatically receive email notifications for updates to this article.
Note: The CSV file does not include PoP locations that are limited availability or coming soon.
We recommend that you add the IP ranges owned by Cato Networks to the relevant ACL (see the following section) to allow traffic to the Cato Cloud. You can also choose to add IP ranges to specific PoP locations as detailed below IP Ranges per PoP Location.
Occasionally, specific IP addresses within the IP range are reserved and aren't available.
The PoP location IP ranges are within the following ranges that are owned by Cato Networks:
- 45.62.176.0/20
- 85.255.16.0/20
- 103.203.220.0/22
- 113.30.128.0/20
- 123.253.152.0/22
- 140.82.192.0/20
- 149.20.192.0/20
- 150.195.192.0/20
- 150.195.208.0/20
- 159.117.224.0/19
- 185.114.120.0/22
- 199.27.32.0/19
- 202.75.240.0/21
- 209.206.0.0/19
- 216.194.96.0/20
- 216.205.112.0/20
- 216.252.176.0/20
Cato uses these IP ranges for the following PoP locations:
- 41.137.164.49/29 (Casablanca, MA)
- 116.51.18.152/29 (Singapore, SG)
- 124.105.152.64/29 (Manila, PH)
- 185.127.10.131/32, 185.127.10.132/32 (Tel Aviv, IL)
- 189.206.87.104/29 (Mexico City, MX)
Cato uses these IP ranges for PoP locations in China:
- 43.250.146.128/26
- 101.36.65.64/26
- 103.40.175.32/27
- 103.61.189.0/27
- 103.61.191.0/27
- 103.197.0.32/27
- 103.203.220.0/24
- 106.39.250.192/26
- 111.202.125.0/25
- 114.94.9.0/26
- 114.94.55.192/26
- 119.147.8.0/26
- 123.108.88.32/27
- 123.108.89.32/27
- 124.88.46.0/26
- 140.207.250.192/26
- 202.75.242.0/24
- 203.131.253.208/29
- 211.95.135.128/26
This section lists the IP ranges for each PoP location in the Cato Cloud.
When Cato adds a new PoP location to the Cato Cloud or a new range to an existing PoP location, it will be listed as Coming soon. A comment will be added to this article for coming soon announcements and when the PoP location or range is in production.
The following table lists IP ranges that you can use to configure a 3rd-party solution for geo-location settings for a country, even though there is no Cato PoP there. The Serviced Through column shows which PoP services the traffic. For example, you can use the range 216.194.96.1 - 216.194.96.15 for the localization of the Bahamas, and the traffic uses the Miami PoP.
| IP Location | IP Range | Serviced Through |
|---|---|---|
| Albania | 215.252.183.1 - 215.252.183.15 | Milan |
| The Bahamas |
45.62.191.48 - 45.62.191.63 216.194.96.1 - 216.194.96.15 |
Miami |
| Bahrain | 113.30.129.1 - 113.30.129.31 | Dubai |
| Belize | 216.194.96.64 - 216.194.96.79 | Miami |
| Benin | 85.255.21.209 - 85.255.21.222 | Paris |
| Bosnia and Herzegovina | 209.206.22.128 - 209.206.22.159 | Prague |
| Bulgaria | 209.206.2.1 - 209.206.2.254 | Prague |
| Burkina Faso | 85.255.21.225 - 85.255.21.238 | Paris |
| Cameroon | 85.255.21.177 - 85.255.21.190 | Paris |
| Cayman Islands | 45.62.191.80 - 45.62.191.95 | Miami |
| Côte d'Ivoire | 85.255.21.193 - 85.255.21.206 | Paris |
| Croatia | 209.206.3.1 - 209.206.3.127 | Prague |
| Cyprus | 209.206.4.1 - 209.206.4.254 | Milan |
| Denmark | 209.206.17.128 - 209.206.17.254 | Stockholm |
| El Salvador | 216.194.96.112 - 216.194.96.127 | Miami |
| Estonia | 159.117.235.32 - 159.117.235.63 | Helsinki |
| Gibraltar | 209.206.9.1 - 209.206.9.254 | Madrid |
| Greece | 209.206.10.1 - 209.206.10.254 | Prague |
| Guatemala | 216.194.96.128 - 216.194.96.143 | Miami |
| Haiti | 216.194.96.176 - 216.194.96.191 | Miami |
| Honduras | 216.194.96.96 - 216.194.96.111 | Miami |
| Hungary | 209.206.11.1 - 209.206.11.254 | Bucharest |
| Iceland | 209.206.12.129 - 209.206.12.250 | Dublin |
| Kazakhstan | 159.117.235.1 - 159.117.235.31 | Helsinki |
| Kuwait | 113.30.129.32 - 113.30.129.63 | Dubai |
| Luxembourg | 209.206.16.1 - 209.206.16.191 | Frankfurt |
| Mali | 85.255.21.113 - 85.255.21.126 | Paris |
| Nicaragua | 216.194.96.80 - 216.194.96.95 | Miami |
| Niger | 85.255.21.81 - 85.255.21.94 | Paris |
| Nigeria | 85.255.21.145 - 85.255.21.158 | Paris |
| North Macedonia | 209.206.29.96 - 209.206.29.111 | Frankfurt |
| Norway | 209.206.17.1 - 209.206.17.127 | Stockholm |
| Oman | 113.30.129.64 - 113.30.129.95 | Dubai |
| Pakistan | 113.30.129.160 - 113.30.129.191 | Dubai |
| Panama | 216.194.96.48 - 216.194.96.63 | Miami |
| Paraguay | 150.195.192.1 - 150.195.192.15 | Santiago |
| Portugal | 209.206.19.1 - 209.206.19.254 | Madrid |
| Qatar | 113.30.129.96 - 113.30.129.127 | Dubai |
| Russia | 209.206.21.1 - 209.206.21.254 | Stockholm |
| Saudi Arabia | 113.30.129.128 - 113.30.129.159 | Dubai |
| Senegal | 85.255.21.241 - 85.255.21.254 | Paris |
| Serbia | 209.206.29.16 - 209.206.29.31 | Frankfurt |
| Slovakia | 209.206.22.1 - 209.206.22.127 | Prague |
| Slovenia | 209.206.3.128 - 209.206.3.254 | Prague |
| Tunisia | 85.255.21.1 - 85.255.21.14 | Paris |
| Turkey | 209.206.27.1 - 209.206.27.254 | Bucharest |
| Uruguay | 216.205.124.1 - 216.205.124.21 | Sao Paulo |
| Venezuela | 216.194.96.32 - 216.194.96.47 | Miami |
| (British) Virgin Islands | 45.62.191.32 - 45.62.191.47 | Miami |
The file including the Cato public geo-location IP addresses is available to download in CSV format from this link.
116 comments
Added new range to PoP location in Tokyo, JP
Added new range to upgraded PoP location in Montreal, CAN
Updated the IP Locations in Geo-Localized IPs
Added Warsaw, PL as a new PoP Location for Europe, Middle East
Updated the IP ranges for these PoP locations: Shanghai, CN and Frankurt, DE
Updated the IP Locations in Geo-Localized IPs
Updated the IP ranges for these PoP locations: Beijing, CN and Osaka, JP
Added Salt Lake City, USA as a new PoP Location for Americas
Updated the IP ranges for these PoP locations: Ashburn, US and Dubai, UAE
Updated the IP ranges for these PoP locations: Frankfurt, and Paris
Can we depend upon the CSV file linked in the article to be always up to date and keep the same format so that it can be used programmatically, or is there another way (API?) to query for production PoP information?
JM Thanks for the comment! The CSV file and this article are always updated at the same time. In addition, we keep the same format for the CSV file.
Currently, it is not possible to use the Cato API to query for the production PoP information.
We are seeing users using a Vancouver POP, but I don't see one in this document. Could you let us know if we should be seeing this POP and if so, please update the documentation to account for that POP.
Nick Hopkins Thanks for your comment. We updated this article as follows:
Added new PoP location for Asia, Australia, Oceania: Chennai, IN
Added new PoP locations for Americas, Austin, TX and Vancouver, CAN
Added new IP ranges for: Los Angeles, CA and Shenzen, CN
Added new IP range for Osaka, JP
Added new Geo-Localized IP ranges for: Haiti, Paraguay, and Uruguay
Added new IP range for Frankfurt, DE
Added new IP ranges to these PoP locations: Singapore, Ashburn, Chicago, Denver, and Amsterdam
Added 150.195.192.0/20 to IP Ranges Owned by Cato Networks
Uploaded new version of CSV file that included bug fixes
Hi Is it possible to get a list of the actual PoP names to match the ranges as we need to test connections for some users that are travelling
Cato owned IP ranges does not list/include 150.195.192.0/20 (in addition to 150.195.208.0/20) which is used for Los Angeles POP among others. Please update Cato Owned IP Ranges to reflect 150.195.192.0/19 (150.195.192.0-150.195.223.255).
Carter Terry Thanks so much for your comment. 150.195.192.0/20 was removed by mistake, and I added it back.
Paul Harrison An excellent suggestion. We will look into making this enhancement for this article.
Added new IP range for New York, NY
The name of the POP in relation to how it is represented in the SDP client needs to be added to this list.
Paul Harrison and Odis Massey - thanks for the excellent suggestions! We will look into using them to improve this article.
Added Nairobi, KE as a new PoP Location for Europe, Middle East
Added a new IP range for Los Angeles, US
If I want to include all possibilities to a Conditional access rule, is the list under “IP Ranges Owned by Cato Networks” sufficient?
We are planning to do the same, also interested in getting confirmation on this. In addition, we would like to automate the management of the named locations for Cato - it would be convenient if the “ranges that are owned by Cato Networks” could be available as a downloadable file in a predefined format, inside Production_POP_Guide.csv or as a separate download.
Microsoft requires a simple list of one range per line. Having the file(s) in that format would be great. The file upload in the conditional policy is smart enough to just add any new entries. Bonus points if file(s) could be available as a FTP download to script our update.
I agree with the above comments. I already scrape http://geoipfeed.catonetworks.com/cato_ip2geo_feed.csv for information that gets loaded into our firewalls and conditional access policies for Microsoft, but I would much appreciate this list to be in JSON format with service identifiers that I can then use JMESPath to filter the data and manipulate the data.
Please sign in to leave a comment.