To create an IPsec tunnel, you must connect to one of the following Umbrella head-end IP addresses. Automatic failover provides redundancy for a single tunnel configuration; however, we recommend configuring two tunnels, one to each DC in a region, with unique IPsec tunnel IDs per tunnel.
The data centers listed here are only for IPsec connections to the Umbrella SWG and CDFW. Cisco Umbrella has additional data centers for non-IPsec connections to SWG. For a list of Umbrella data centers, see Global data centers.
In further sample configurations on docs.umbrella.com, <*umbrella_dc_ip*> refers to these IP addresses.
US-1
Los Angeles, CA
146.112.67.8
US-1
Santa Clara (Palo Alto), CA
146.112.66.8
US-2
New York, NY
146.112.83.8
US-2
Ashburn, VA
146.112.82.8
US-3
Miami, FL
146.112.84.8
US-3
Atlanta, GA
146.112.85.8
US-4
Dallas–Fort Worth, TX
146.112.72.8
US-4
Denver, CO
146.112.73.8
EU-1
London, UK
146.112.97.8
EU-1
Frankfurt, DE
146.112.96.8
EU-2
Paris, FR
146.112.102.8
EU-2
Prague, CZ
146.112.103.8
EU-3
Copenhagen, DK
146.112.100.8
EU-3
Stockholm, SE
146.112.101.8
EU-4
Milan, IT
146.112.107.8
EU-4
Madrid, ES
146.112.106.8
AF-1
Johannesburg, ZA
146.112.108.8
AF-1
Cape Town, ZA
146.112.109.8
AS-1
Singapore, SG
146.112.113.8
AS-1
Tokyo, JP
146.112.112.8
AS-2
Mumbai, IN
146.112.117.8
AS-2
Hong Kong*
146.112.116.8
AU-1
Sydney, AU
146.112.118.8
AU-1
Melbourne, AU
146.112.119.8
CA-1
Toronto, CA
146.112.65.8
CA-1
Vancouver, CA
146.112.64.8
BR-1
Rio de Janeiro, BR
146.112.93.8
BR-1
São Paulo, BR
146.112.92.8
LA-1
Querétaro, MX
146.112.94.8
LA-1
Miami, FL**
146.112.84.8
*Hong Kong and 146.112.116.8 will be replaced by a second DC in India in the future. Hong Kong will be assigned a new region and IP at that time.
**Miami will be replaced by a second Latin America DC in the future with its own IP address. Customers can use Miami for automatic failover, or manually configure another data center for backup tunnels.
IPSec Failover
Cisco Umbrella implements automatic failover of IPsec tunnels when a data center is unavailable. When this occurs, tunnels automatically move from one data center in a region to the other. For more information see IPsec Tunnel Failover.
Previously, Umbrella supported automatic, tertiary failover (DR) for all regions. It is no longer available for US, Canada, Brazil, or Latin America regions, and will be removed in the future for remaining regions. Customers can optionally setup their own tertiary failover as a third tunnel to another region.
EU-1
Amsterdam, NL
EU-2
Amsterdam, NL
EU-3
Amsterdam, NL
EU-4
Amsterdam, NL
AF-1
Amsterdam, NL
AS-1
Osaka, JP
AS-2
Osaka, JP
AU-1
Osaka, JP
Change a Firewall Priority < Connect to Cisco Umbrella Through Tunnel > Monitor Hit Count
Updated 10 days ago