>
    Strata Copilot
    Allowlist Public NAT Gateways
    Focus
    Focus
    1. Home
    2. Next‑Gen Trust Security
    3. Next-Gen Trust Security
    4. Next-Gen Trust Security Overview
    5. Getting Started
    6. Allowlist Public NAT Gateways
    Next‑Gen Trust Security

    Allowlist Public NAT Gateways

    Table of Contents

    Allowlist Public NAT Gateways

    You might need to allowlist the public NAT gateways used by Next-Gen Trust Security to ensure seamless communication between Next-Gen Trust Security and your internal network.
    For example, if you are using GlobalSign MSSL as your certificate authority (CA), have IP access restrictions with DigiCert CertCentral, or require Next-Gen Trust Security webhooks to interact with internal company resources, you might need to add Next-Gen Trust Security NAT gateways to your allowlist.

    NAT Gateway IPs (US)

    Next-Gen Trust Security routes outbound network traffic through the following NAT gateway IP addresses in the United States:
    • 100.51.207.61
    • 13.219.60.39
    • 34.237.35.202

    NAT Gateway IPs (EU)

    Next-Gen Trust Security routes outbound network traffic through the following NAT gateway IP addresses in Europe:
    • 3.77.245.88
    • 3.74.136.88
    • 18.158.118.133

    NAT Gateway IPs (UK)

    Next-Gen Trust Security routes outbound network traffic through the following NAT gateway IP addresses in the United Kingdom:
    • 13.41.14.245
    • 13.42.230.118
    • 18.133.127.51

    NAT Gateway IPs (Australia)

    Next-Gen Trust Security routes outbound network traffic through the following NAT gateway IP addresses in Australia:
    • 3.105.213.51
    • 54.252.211.174
    • 3.107.219.73

    NAT Gateway IPs (Canada)

    Next-Gen Trust Security routes outbound network traffic through the following NAT gateway IP addresses in Canada:
    • 15.156.234.229
    • 15.157.78.27
    • 3.97.181.190

    NAT Gateway IPs (Singapore)

    Next-Gen Trust Security routes outbound network traffic through the following NAT gateway IP addresses in Singapore:
    • 18.141.73.223
    • 18.142.234.200
    • 54.251.35.19

    Example Use Cases for Using This Information

    1. GlobalSign MSSL users: If you have IP access restrictions, include the above NAT gateway IPs in your allowlist.
    2. DigiCert CertCentral users: Add these IPs to your IP access restrictions settings to ensure seamless interactions with Next-Gen Trust Security.
    3. Webhook configuration: If you wish for Next-Gen Trust Security webhooks to call internal company resources, ensure these IPs are configured to bypass any existing restrictions.
    By adding these NAT gateway IPs to your respective settings, you will facilitate seamless communication between Next-Gen Trust Security and your internal network.

    © 2026 Palo Alto Networks, Inc. All rights reserved.