The Following IP address blocks are used by the applications in the federal region. When user traffic to the portal passes through a NAT device on a perimeter firewall, edge router, or VPN gateway, provide the IP address to which NAT translates the users’ original IP addresses. After you submit a support ticket with these addresses to Palo Alto Networks, customer services will create an allow list for the addresses you provided, which will let users log in from these addresses and access the portal. If your enterprise uses allow lists, be sure to add these IP addresses to your allow lists to make sure that Strata Logging Service can receive the logs.