The "private" range 100.64.0.0/10 won't work over segment application

Products

• Symantec ZTNA

Issue/Introduction

ZTNA setup and integrated with Cloud SWG via segment applications.

ZTNA Admins report no errors or warnings creating all segment based applications.

Users accessing one such application, referencing a server IP address in the range 100.64.0.0/10 (which is used in IPv4 shared address space).

WSS Agent logs indicate traffic enters tunnel into Cloud SWG, but does not make it to ZTNA platform.

 

Environment

Cloud SWG.

ZTNA.

Cause

100.64.0.0/10 IP address is used within Cloud SWG environment already.

Resolution

Do not use this reserved IP address range with segment applications.

Additional Information

Defect has been filled with ZTNA development team to warn ZTNA admins when this IP address range is being used.