1. Overview

Prisma™ Cloud uses the following NAT gateway IP addresses. To ensure that you can access Prisma Cloud and the API for any integrations that you enabled between Prisma Cloud and your incidence response workflows, or for your Prisma Cloud Defenders to communicate with the Prisma Cloud Compute Console, review the list and update the IP addresses in your allow lists.

2. Tenant mappings

The tables below are detailed by the stack in which your Prisma Cloud tenant is deployed. To recognize your Prisma Cloud app stack / Tenant region, check the URL in browser when logging into your Prisma Cloud tenant.

Example: https://app3.prismacloud.io/ The "app3" in address indicates your Prisma Cloud tenant region.

To recognize your Compute Console region, find the region in the URL for Path to Console under Manage > System > Downloads tab in Compute Console.

Example: https://us-west1.cloud.twistlock.com/us-xxxxxx The "us-west1" indicates your Compute Console region.

2.1. App

Prisma Cloud Tenant Region (AWS) Prisma Cloud Source IP NAT Compute SaaS Console Region (GCP) Console Egress Connections
(Ex: From Defenders to Console)
Console Ingress Connections
(Ex: From Console into your environment for alerts)

us-east-1 (N. Virginia)

3.217.51.44
3.218.144.244
34.199.10.120
34.205.176.82
34.228.96.118
52.201.19.205

us-east1 (South Carolina)

34.75.54.101

34.74.84.51

2.2. App2

Prisma Cloud Tenant Region (AWS) Prisma Cloud Source IP NAT Compute SaaS Console Region (GCP) Console Egress Connections
(Ex: From Defenders to Console)
Console Ingress Connections
(Ex: From Console into your environment for alerts)

us-east-2 (Ohio)

3.16.7.30
13.59.164.228
18.191.115.70
18.218.243.39
18.221.72.80
18.223.141.221

us-east1 (South Carolina)

34.75.54.101

34.74.84.51

2.3. App3

Prisma Cloud Tenant Region (AWS) Prisma Cloud Source IP NAT Compute SaaS Console Region (GCP) Console Egress Connections
(Ex: From Defenders to Console)
Console Ingress Connections
(Ex: From Console into your environment for alerts)

us-west-2 (Oregon)

34.208.190.79
52.24.59.168
52.39.60.41
52.26.142.61
54.213.143.171
54.218.131.166

us-west1 (Oregon)

34.82.51.12

104.198.109.73

2.4. App4

Prisma Cloud Tenant Region (AWS) Prisma Cloud Source IP NAT Compute SaaS Console Region (GCP) Console Egress Connections
(Ex: From Defenders to Console)
Console Ingress Connections
(Ex: From Console into your environment for alerts)

us-west-1 (N. California)

13.52.27.189
13.52.105.217
13.52.157.154
13.52.175.228
52.52.50.152
52.52.110.223

us-west1 (Oregon)

34.82.51.12

104.198.109.73

2.5. App5

Prisma Cloud Tenant Region (AWS) Prisma Cloud Source IP NAT Compute SaaS Console Region (GCP) Console Egress Connections
(Ex: From Defenders to Console)
Console Ingress Connections
(Ex: From Console into your environment for alerts)

us-east-2 (Ohio)

3.128.141.242
3.129.241.104
3.130.104.173
3.136.191.187
13.59.109.178
18.190.115.80

us-east1 (South Carolina)

34.75.54.101

34.74.84.51

2.6. App.eu

Prisma Cloud Tenant Region (AWS) Prisma Cloud Source IP NAT Compute SaaS Console Region (GCP) Console Egress Connections
(Ex: From Defenders to Console)
Console Ingress Connections
(Ex: From Console into your environment for alerts)

eu-central-1 (Frankfurt)

3.121.64.255
3.121.248.165
3.121.107.154
18.184.105.224
18.185.81.104
52.29.141.235

europe-west3 (Frankfurt, Germany)

34.107.65.220

34.107.91.105

2.7. App2.eu

Prisma Cloud Tenant Region (AWS) Prisma Cloud Source IP NAT Compute SaaS Console Region (GCP) Console Egress Connections
(Ex: From Defenders to Console)
Console Ingress Connections
(Ex: From Console into your environment for alerts)

eu-west-1 (Ireland)

18.200.200.125
3.248.26.245
99.81.226.57
52.208.244.121
18.200.207.86
63.32.161.197

europe-west3 (Frankfurt, Germany)

34.107.65.220

34.107.91.105

2.8. App.anz

Prisma Cloud Tenant Region (AWS) Prisma Cloud Source IP NAT Compute SaaS Console Region (GCP) Console Egress Connections
(Ex: From Defenders to Console)
Console Ingress Connections
(Ex: From Console into your environment for alerts)

ap-southeast-2 (Sydney)

3.104.252.91
13.210.254.18
13.239.110.68
52.62.75.140
52.62.194.176
54.66.215.148

asia-northeast1 (Tokya, Japan)
OR
australia-southeast1 (Sydney, Australia)

35.194.113.255
OR
35.244.121.190

35.200.123.236
OR
35.189.44.184

2.9. App.gov

Prisma Cloud Tenant Region (AWS) Prisma Cloud Source IP NAT Compute SaaS Console Region (GCP) Console Egress Connections
(Ex: From Defenders to Console)
Console Ingress Connections
(Ex: From Console into your environment for alerts)

us-gov-west-1 (AWS GovCloud US-West)

15.200.20.182
15.200.89.211
52.222.38.70
52.61.207.0
15.200.68.21
15.200.146.166

us-west1 (Oregon)

34.82.51.12

104.198.109.73

2.10. App.PrismaCloud.cn

Prisma Cloud Tenant Region (AWS) Prisma Cloud Source IP NAT Compute SaaS Console Region (GCP) Console Egress Connections
(Ex: From Defenders to Console)
Console Ingress Connections
(Ex: From Console into your environment for alerts)

cn-northwest-1 (Ningxia)

52.82.89.61
52.82.102.153
52.82.104.173
52.83.179.1
52.83.70.13
52.83.77.73

Compute SaaS not supported

N/A

N/A

2.11. App.ca

Prisma Cloud Tenant Region (AWS) Prisma Cloud Source IP NAT Compute SaaS Console Region (GCP) Console Egress Connections
(Ex: From Defenders to Console)
Console Ingress Connections
(Ex: From Console into your environment for alerts)

ca-central-1 (Canada - Central)

15.223.59.158
15.223.96.201
15.223.127.111
52.60.127.179
99.79.30.121
35.182.209.121

northamerica-northeast1 (Montréal, Québec)

35.203.59.190

35.203.31.67

2.12. App.sg

Prisma Cloud Tenant Region (AWS) Prisma Cloud Source IP NAT Compute SaaS Console Region (GCP) Console Egress Connections
(Ex: From Defenders to Console)
Console Ingress Connections
(Ex: From Console into your environment for alerts)

ap-southeast-1 (Singapore)

13.250.248.219
18.139.183.196
52.76.28.40
52.76.70.227
52.221.36.124
52.221.157.53

asia-southeast1 (Singapore)

35.198.194.238

34.87.137.141

2.13. App.uk

Prisma Cloud Tenant Region (AWS) Prisma Cloud Source IP NAT Compute SaaS Console Region (GCP) Console Egress Connections
(Ex: From Defenders to Console)
Console Ingress Connections
(Ex: From Console into your environment for alerts)

eu-west2 (London)

35.176.57.39
18.133.126.85
18.168.9.241
18.168.51.89
3.9.200.0
18.134.251.157

europe-west2 (London)

34.105.197.208

34.89.87.128