This article lists the public IP ranges for the PoP locations in the Cato Cloud and the geo-localized ranges for countries that currently don't have a PoP. For your convenience, you can download the PoP Location and IP Range data attached to this article in a CSV file. Please click Follow to automatically receive email notifications for updates to this article.
Note: The CSV file does not include PoP locations that are limited availability or coming soon.
We recommend that you add the IP ranges owned by Cato Networks to the relevant ACL (see the following section) to allow traffic to the Cato Cloud. You can also choose to add IP ranges to specific PoP locations as detailed below IP Ranges per PoP Location.
Occasionally, specific IP addresses within the IP range are reserved and aren't available.
The PoP location IP ranges are within the following ranges that are owned by Cato Networks:
- 45.62.176.0/20
- 85.255.16.0/20
- 103.203.220.0/22
- 113.30.128.0/20
- 123.253.152.0/22
- 140.82.192.0/20
- 149.20.192.0/20
- 150.195.192.0/20
- 150.195.208.0/20
- 159.117.224.0/19
- 185.114.120.0/22
- 199.27.32.0/19
- 202.75.240.0/21
- 209.206.0.0/19
- 216.194.96.0/20
- 216.205.112.0/20
- 216.252.176.0/20
Cato uses these IP ranges for the following PoP locations:
- 41.137.164.49/29 (Casablanca, MA)
- 116.51.18.152/29 (Singapore, SG)
- 124.105.152.64/29 (Manila, PH)
- 185.127.10.131/32, 185.127.10.132/32 (Tel Aviv, IL)
- 189.206.87.104/29 (Mexico City, MX)
Cato uses these IP ranges for PoP locations in China:
- 43.250.146.128/26
- 101.36.65.64/26
- 103.40.175.32/27
- 103.61.189.0/27
- 103.61.191.0/27
- 103.197.0.32/27
- 103.203.220.0/24
- 106.39.250.192/26
- 111.202.125.0/25
- 114.94.9.0/26
- 114.94.55.192/26
- 119.147.8.0/26
- 123.108.88.32/27
- 123.108.89.32/27
- 124.88.46.0/26
- 140.207.250.192/26
- 202.75.242.0/24
- 203.131.253.208/29
- 211.95.135.128/26
This section lists the IP ranges for each PoP location in the Cato Cloud.
When Cato adds a new PoP location to the Cato Cloud or a new range to an existing PoP location, it will be listed as Coming soon. A comment will be added to this article for coming soon announcements and when the PoP location or range is in production.
The following table lists IP ranges that you can use to configure a 3rd-party solution for geo-location settings for a country, even though there is no Cato PoP there. The Serviced Through column shows which PoP services the traffic. For example, you can use the range 216.194.96.1 - 216.194.96.15 for the localization of the Bahamas, and the traffic uses the Miami PoP.
| IP Location | IP Range | Serviced Through |
|---|---|---|
| Albania | 215.252.183.1 - 215.252.183.15 | Milan |
| The Bahamas |
45.62.191.48 - 45.62.191.63 216.194.96.1 - 216.194.96.15 |
Miami |
| Bahrain | 113.30.129.1 - 113.30.129.31 | Dubai |
| Belize | 216.194.96.64 - 216.194.96.79 | Miami |
| Benin | 85.255.21.209 - 85.255.21.222 | Paris |
| Bosnia and Herzegovina | 209.206.22.128 - 209.206.22.159 | Prague |
| Bulgaria | 209.206.2.1 - 209.206.2.254 | Prague |
| Burkina Faso | 85.255.21.225 - 85.255.21.238 | Paris |
| Cameroon | 85.255.21.177 - 85.255.21.190 | Paris |
| Cayman Islands | 45.62.191.80 - 45.62.191.95 | Miami |
| Côte d'Ivoire | 85.255.21.193 - 85.255.21.206 | Paris |
| Croatia | 209.206.3.1 - 209.206.3.127 | Prague |
| Cyprus | 209.206.4.1 - 209.206.4.254 | Milan |
| Denmark | 209.206.17.128 - 209.206.17.254 | Stockholm |
| Egypt | 216.252.183.32 - 216.252.183.63 | Milan |
| El Salvador | 216.194.96.112 - 216.194.96.127 | Miami |
| Estonia | 159.117.235.32 - 159.117.235.63 | Helsinki |
| Gibraltar | 209.206.9.1 - 209.206.9.254 | Madrid |
| Greece | 209.206.10.1 - 209.206.10.254 | Prague |
| Guatemala | 216.194.96.128 - 216.194.96.143 | Miami |
| Haiti | 216.194.96.176 - 216.194.96.191 | Miami |
| Honduras | 216.194.96.96 - 216.194.96.111 | Miami |
| Hungary | 209.206.11.1 - 209.206.11.254 | Bucharest |
| Iceland | 209.206.12.129 - 209.206.12.250 | Dublin |
| Kazakhstan | 159.117.235.1 - 159.117.235.31 | Helsinki |
| Kuwait | 113.30.129.32 - 113.30.129.63 | Dubai |
| Luxembourg | 209.206.16.1 - 209.206.16.191 | Frankfurt |
| Mali | 85.255.21.113 - 85.255.21.126 | Paris |
| Martinique | 45.62.191.160 - 45.62.191.175 | Miami |
| Nicaragua | 216.194.96.80 - 216.194.96.95 | Miami |
| Niger | 85.255.21.81 - 85.255.21.94 | Paris |
| Nigeria | 85.255.21.145 - 85.255.21.158 | Paris |
| North Macedonia | 209.206.29.96 - 209.206.29.111 | Frankfurt |
| Norway | 209.206.17.1 - 209.206.17.127 | Stockholm |
| Oman | 113.30.129.64 - 113.30.129.95 | Dubai |
| Pakistan | 113.30.129.160 - 113.30.129.191 | Dubai |
| Panama | 216.194.96.48 - 216.194.96.63 | Miami |
| Paraguay | 150.195.192.1 - 150.195.192.15 | Santiago |
| Portugal | 209.206.19.1 - 209.206.19.254 | Madrid |
| Qatar | 113.30.129.96 - 113.30.129.127 | Dubai |
| Russia | 209.206.21.1 - 209.206.21.254 | Stockholm |
| Saudi Arabia | 113.30.129.128 - 113.30.129.159 | Dubai |
| Senegal | 85.255.21.241 - 85.255.21.254 | Paris |
| Serbia | 209.206.29.16 - 209.206.29.31 | Frankfurt |
| Slovakia | 209.206.22.1 - 209.206.22.127 | Prague |
| Slovenia | 209.206.3.128 - 209.206.3.254 | Prague |
| Tunisia | 85.255.21.1 - 85.255.21.14 | Paris |
| Turkey | 209.206.27.1 - 209.206.27.254 | Bucharest |
| Uruguay | 216.205.124.1 - 216.205.124.21 | Sao Paulo |
| Venezuela | 216.194.96.32 - 216.194.96.47 | Miami |
| (British) Virgin Islands | 45.62.191.32 - 45.62.191.47 | Miami |
The file including the Cato public geo-location IP addresses is available to download in CSV format from this link.
117 comments
There appears to be a conflict of IP ranges for Ashburn, VA and Chicago, IL
Ashburn, VA IP 150.195.205.1 - 150.195.205.24
Chicago, IL 150.195.204.1 - 150.195.205.254
Are both of these meant to be /24 networks, 150.194.205.0/24 and 150.195.204.0/24 respectively?
We currently have a user with 150.195.205.54 address and the client indicates this is the Ashburn POP and not Chicago.
Stephen Powell Thank you so much for letting us know about this mistake. They are meant to be 150.194.205.0/24 and 150.195.204.0/24 respectively, as follows:
Ashburn, VA IP 150.195.205.1 - 150.195.205.24
Chicago, IL 150.195.204.1 - 150.195.204.254
I updated the article to reflect the correct information.
Thanks Yaakov Simon Looks like Ashburn needs to be updated to show the /24. Showing 150.195.205.1 - 150.195.205.24 when it looks like it needs to be 150.195.205.1 - 150.195.205.254.
Stephen Powell Thanks again! Done
Added the following range to the Osaka PoP location: 150.195.212.0/24
Removed the following IP range from the Beijing PoP location: 123.59.229.192/26
Updated the China PoP locations and IP ranges, for more information see: Decommissioning of China PoP Locations
Added a new PoP location for Kansas City, US: 216.205.112.0/24
Added the following range to the Tokyo PoP location: 150.195.218.0/24
Can we get the Atlanta POP IP updated? The IP “216.205.113.1 – 216.205.113.254 (coming soon)” is no longer coming soon. It's currently active. We've had a few issues due to this.
Stephen Powell Thanks! We just updated the following PoP locations with new IP ranges
We added the following IP ranges as coming soon to these PoP locations:
Added the following IP range to the Tokyo PoP location: 150.195.219.0/24
The localized IP range for Croatia (serviced through the Prague PoP location) is now 209.206.3.0/25
Updated the ranges in the IP Ranges Used by Cato Networks in China, and relevant China PoP locations.
Added a new localized IP range for Slovenia (serviced through the Prague PoP location) - 209.206.3.128/25
Removed the localized IP range for Colombia (serviced through the Miami PoP location) 216.194.96.16/28. Customers can use the dedicated Bogota PoP location 216.194.111.0/24
It looks like the IP range for the Tokyo, JP PoP now includes 150.195.220.1-254. Can you confirm if that’s right? We noticed that during a Socket connection, it tried to connect to 150.195.220.xx. If that’s correct, could you please update the documentation?
Is there any documentation on manual PoP selection? I've seen in another thread from a year or two ago, that you don't publish the names of your PoPs - is this still the case?
Naoki Kimura Sorry for the delayed response. The Tokyo range 150.195.222.1 - 159.195.222.254 is now listed as Coming Soon. You might notice some traffic for this range, and we will update in the Product Updates when there is a change to the status of this range. Thanks!
Added the following IP range to the Chicago PoP location: 216.205.127.0/24
The new range 199.27.32.0/24 is now available for the Los Angeles PoP location
How do these IPs map to names for manual PoP selection?
Added these new ranges as coming soon to PoP locations:
Bryan Hull Are you referring to manual selection for a site (such as egress Network Rule or Preferred PoP selection) or for the Client?
Added the following ranges to IP Ranges Owned by Cato Networks:
Hey Yaakov,
Yes I'm referring to the manual selection for a site. How do I know what IP to add to the client? Is there a way to know what (for example New York) PoP I am connecting to.
It appears 149.20.197.1 - 149.20.197.254 (coming soon) Ashburn subnet is now in production but it was not added to the CSV file that is published out. I can confirm we've had users getting assigned addresses in this range and was causing issues since we use CSV data to manage access policies. Can we get the CSV updated with the 149.20.197.0/24 subnet?
Adam Osiol The article and CSV are now updated with the 149.20.197.0/24 range. Sorry for the inconvenience. Thanks for your comment!
Please sign in to leave a comment.