GSA egress IP ranges
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 6b5a7d2 · +22 −0 lines · also on GitHub
The file is new at this commit, or was moved here from another path: every line shows as added.
1
+---
2
+title: Global Secure Access egress IP ranges
3
+description: Reference list of the egress IP ranges that Global Secure Access uses for outbound internet traffic, so you can allowlist them on target services.
4
+author: kenwith
5
+ms.author: kenwith
6
+manager: dougeby
7
+ms.topic: reference
8
+ms.date: 08/28/2025
9
+ms.service: global-secure-access
10
+ms.custom: references_regions
11
+ai-usage: ai-assisted
12
+---
13
+# Global Secure Access egress IP ranges
14
+
15
+Outbound Internet traffic that is acquired by Global Secure Access, including traffic to Microsoft services, will egress from Global Secure Access instances. If the target service uses IP restrictions and access controls, you may need to configure the target service to allow IP connections from Global Secure Access subnets:
16
+
17
+- `128.94.0.0/19`
18
+- `151.206.0.0/16`
19
+
20
+## Related content
21
+
22
+- [Global Secure Access points of presence and IP addresses](reference-points-of-presence.md)
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 17:01 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.