Cisco WSA proxy and zoom.

[Oleg Volkov]

Hello!

I have problem with zoom and WSA (freezes and sometimes totaly unreacheble).

I will make ACL for WCCP redirect and deny ZOOMs IPs but I get over 300 IPs.

I make some tools for make ACL row from ZOOM IPs list on ZOOM site:

https://github.com/OlegPowerC/zommaclmaker

May be I can exclude from WCCP only one set of this IPs?

PS:

UPD - I add feature for generate object-group for ASA

My tools output:

10 remark https://assets.zoom.us/docs/ipranges/Zoom.txt
20 permit ip any 3.7.35.0 0.0.0.127
30 permit ip any 3.21.137.128 0.0.0.127
40 permit ip any 3.22.11.0 0.0.0.255
50 permit ip any 3.23.93.0 0.0.0.255
60 permit ip any 3.25.41.128 0.0.0.127
70 permit ip any 3.25.42.0 0.0.0.127
80 permit ip any 3.25.49.0 0.0.0.255
90 permit ip any 3.80.20.128 0.0.0.127
100 permit ip any 3.96.19.0 0.0.0.255
110 permit ip any 3.101.32.128 0.0.0.127
120 permit ip any 3.101.52.0 0.0.0.127
130 permit ip any 3.104.34.128 0.0.0.127
140 permit ip any 3.120.121.0 0.0.0.127
150 permit ip any 3.127.194.128 0.0.0.127
160 permit ip any 3.208.72.0 0.0.0.127
170 permit ip any 3.211.241.0 0.0.0.127
180 permit ip any 3.235.69.0 0.0.0.127
190 permit ip any 3.235.82.0 0.0.1.255
200 permit ip any 3.235.71.128 0.0.0.127
210 permit ip any 3.235.72.128 0.0.0.127
220 permit ip any 3.235.73.0 0.0.0.127
230 permit ip any 3.235.96.0 0.0.1.255
240 permit ip any 3.235.96.60 0.0.0.0
250 permit ip any 3.235.96.61 0.0.0.0
260 permit ip any 3.235.96.62 0.0.0.0
270 permit ip any 3.235.96.63 0.0.0.0
280 permit ip any 3.235.96.97 0.0.0.0
290 permit ip any 3.235.96.96 0.0.0.0
300 permit ip any 3.235.96.95 0.0.0.0
310 permit ip any 3.235.96.94 0.0.0.0
320 permit ip any 4.34.125.128 0.0.0.127
330 permit ip any 4.35.64.128 0.0.0.127
340 permit ip any 8.5.128.0 0.0.1.255
350 permit ip any 13.52.6.128 0.0.0.127
360 permit ip any 13.52.146.0 0.0.0.127
370 permit ip any 18.157.88.0 0.0.0.255
380 permit ip any 18.205.93.128 0.0.0.127
390 permit ip any 50.239.202.0 0.0.1.255
400 permit ip any 50.239.204.0 0.0.0.255
410 permit ip any 52.61.100.128 0.0.0.127
420 permit ip any 52.81.151.128 0.0.0.127
430 permit ip any 52.81.215.0 0.0.0.255
440 permit ip any 52.202.62.192 0.0.0.63
450 permit ip any 52.215.168.0 0.0.0.127
460 permit ip any 64.125.62.0 0.0.0.255
470 permit ip any 64.211.144.0 0.0.0.255
480 permit ip any 65.39.152.0 0.0.0.255
490 permit ip any 69.174.57.0 0.0.0.255
500 permit ip any 69.174.108.0 0.0.3.255
510 permit ip any 99.79.20.0 0.0.0.127
520 permit ip any 101.36.167.0 0.0.0.255
530 permit ip any 103.122.166.0 0.0.1.255
540 permit ip any 111.33.115.0 0.0.0.127
550 permit ip any 111.33.181.0 0.0.0.127
560 permit ip any 115.110.154.192 0.0.0.63
570 permit ip any 115.114.56.192 0.0.0.63
580 permit ip any 115.114.115.0 0.0.0.63
590 permit ip any 115.114.131.0 0.0.0.63
600 permit ip any 120.29.148.0 0.0.0.255
610 permit ip any 129.151.0.0 0.0.15.255
620 permit ip any 129.159.0.0 0.0.15.255
630 permit ip any 130.61.164.0 0.0.3.255
640 permit ip any 134.224.0.0 0.0.255.255
650 permit ip any 140.238.128.0 0.0.0.255
660 permit ip any 140.238.232.0 0.0.3.255
670 permit ip any 144.195.0.0 0.0.255.255
680 permit ip any 147.124.96.0 0.0.31.255
690 permit ip any 149.137.0.0 0.0.127.255
700 permit ip any 149.137.25.0 0.0.0.255
710 permit ip any 149.137.41.0 0.0.0.255
720 permit ip any 152.67.20.0 0.0.0.255
730 permit ip any 152.67.118.0 0.0.0.255
740 permit ip any 152.67.168.0 0.0.3.255
750 permit ip any 152.67.180.0 0.0.0.255
760 permit ip any 152.67.184.0 0.0.3.255
770 permit ip any 152.67.240.0 0.0.7.255
780 permit ip any 158.101.64.0 0.0.0.255
790 permit ip any 160.1.56.128 0.0.0.127
800 permit ip any 161.189.199.0 0.0.0.127
810 permit ip any 161.199.136.0 0.0.3.255
820 permit ip any 162.12.232.0 0.0.3.255
830 permit ip any 162.255.36.0 0.0.3.255
840 permit ip any 165.254.88.0 0.0.1.255
850 permit ip any 168.138.16.0 0.0.3.255
860 permit ip any 168.138.48.0 0.0.0.255
870 permit ip any 168.138.56.0 0.0.7.255
880 permit ip any 168.138.72.0 0.0.0.255
890 permit ip any 168.138.74.0 0.0.0.127
900 permit ip any 168.138.96.0 0.0.3.255
910 permit ip any 168.138.116.0 0.0.3.255
920 permit ip any 168.138.244.0 0.0.0.255
930 permit ip any 170.114.0.0 0.0.255.255
940 permit ip any 173.231.80.0 0.0.15.255
950 permit ip any 173.231.92.0 0.0.0.255
960 permit ip any 173.231.94.0 0.0.0.255
970 permit ip any 192.204.12.0 0.0.3.255
980 permit ip any 193.122.32.0 0.0.3.255
990 permit ip any 193.122.36.0 0.0.3.255
1000 permit ip any 193.122.208.0 0.0.15.255
1010 permit ip any 193.122.224.0 0.0.15.255
1020 permit ip any 193.122.240.0 0.0.15.255
1030 permit ip any 193.123.0.0 0.0.31.255
1040 permit ip any 193.123.40.0 0.0.3.255
1050 permit ip any 193.123.44.0 0.0.3.255
1060 permit ip any 193.123.128.0 0.0.31.255
1070 permit ip any 193.123.168.0 0.0.7.255
1080 permit ip any 193.123.192.0 0.0.31.255
1090 permit ip any 198.251.128.0 0.0.127.255
1100 permit ip any 202.177.207.128 0.0.0.31
1110 permit ip any 204.80.104.0 0.0.7.255
1120 permit ip any 204.141.28.0 0.0.3.255
1130 permit ip any 207.226.132.0 0.0.0.255
1140 permit ip any 209.9.211.0 0.0.0.255
1150 permit ip any 209.9.215.0 0.0.0.255
1160 permit ip any 213.19.144.0 0.0.0.255
1170 permit ip any 213.19.153.0 0.0.0.255
1180 permit ip any 213.244.140.0 0.0.0.255
1190 permit ip any 221.122.88.64 0.0.0.31
1200 permit ip any 221.122.88.128 0.0.0.127
1210 permit ip any 221.122.89.128 0.0.0.127
1220 permit ip any 221.123.139.192 0.0.0.31
1230 remark https://assets.zoom.us/docs/ipranges/ZoomCRC.txt
1240 permit ip any 3.7.35.0 0.0.0.127
1250 permit ip any 3.21.137.128 0.0.0.127
1260 permit ip any 3.22.11.0 0.0.0.255
1270 permit ip any 3.23.93.0 0.0.0.255
1280 permit ip any 3.25.41.128 0.0.0.127
1290 permit ip any 3.25.42.0 0.0.0.127
1300 permit ip any 3.25.49.0 0.0.0.255
1310 permit ip any 3.80.20.128 0.0.0.127
1320 permit ip any 3.96.19.0 0.0.0.255
1330 permit ip any 3.101.32.128 0.0.0.127
1340 permit ip any 3.101.52.0 0.0.0.127
1350 permit ip any 3.104.34.128 0.0.0.127
1360 permit ip any 3.120.121.0 0.0.0.127
1370 permit ip any 3.127.194.128 0.0.0.127
1380 permit ip any 3.208.72.0 0.0.0.127
1390 permit ip any 3.211.241.0 0.0.0.127
1400 permit ip any 3.235.69.0 0.0.0.127
1410 permit ip any 3.235.82.0 0.0.1.255
1420 permit ip any 3.235.71.128 0.0.0.127
1430 permit ip any 3.235.72.128 0.0.0.127
1440 permit ip any 3.235.73.0 0.0.0.127
1450 permit ip any 3.235.96.0 0.0.1.255
1460 permit ip any 4.34.125.128 0.0.0.127
1470 permit ip any 4.35.64.128 0.0.0.127
1480 permit ip any 8.5.128.0 0.0.1.255
1490 permit ip any 13.52.6.128 0.0.0.127
1500 permit ip any 13.52.146.0 0.0.0.127
1510 permit ip any 18.157.88.0 0.0.0.255
1520 permit ip any 18.205.93.128 0.0.0.127
1530 permit ip any 50.239.202.0 0.0.1.255
1540 permit ip any 50.239.204.0 0.0.0.255
1550 permit ip any 52.61.100.128 0.0.0.127
1560 permit ip any 52.81.151.128 0.0.0.127
1570 permit ip any 52.81.215.0 0.0.0.255
1580 permit ip any 52.202.62.192 0.0.0.63
1590 permit ip any 52.215.168.0 0.0.0.127
1600 permit ip any 64.125.62.0 0.0.0.255
1610 permit ip any 64.211.144.0 0.0.0.255
1620 permit ip any 65.39.152.0 0.0.0.255
1630 permit ip any 69.174.57.0 0.0.0.255
1640 permit ip any 69.174.108.0 0.0.3.255
1650 permit ip any 99.79.20.0 0.0.0.127
1660 permit ip any 101.36.167.0 0.0.0.255
1670 permit ip any 103.122.166.0 0.0.1.255
1680 permit ip any 111.33.115.0 0.0.0.127
1690 permit ip any 111.33.181.0 0.0.0.127
1700 permit ip any 115.110.154.192 0.0.0.63
1710 permit ip any 115.114.56.192 0.0.0.63
1720 permit ip any 115.114.115.0 0.0.0.63
1730 permit ip any 115.114.131.0 0.0.0.63
1740 permit ip any 120.29.148.0 0.0.0.255
1750 permit ip any 129.151.0.0 0.0.15.255
1760 permit ip any 129.159.0.0 0.0.15.255
1770 permit ip any 130.61.164.0 0.0.3.255
1780 permit ip any 134.224.0.0 0.0.255.255
1790 permit ip any 140.238.128.0 0.0.0.255
1800 permit ip any 140.238.232.0 0.0.3.255
1810 permit ip any 144.195.0.0 0.0.255.255
1820 permit ip any 147.124.96.0 0.0.31.255
1830 permit ip any 149.137.0.0 0.0.127.255
1840 permit ip any 152.67.20.0 0.0.0.255
1850 permit ip any 152.67.118.0 0.0.0.255
1860 permit ip any 152.67.168.0 0.0.3.255
1870 permit ip any 152.67.180.0 0.0.0.255
1880 permit ip any 152.67.184.0 0.0.3.255
1890 permit ip any 152.67.240.0 0.0.7.255
1900 permit ip any 158.101.64.0 0.0.0.255
1910 permit ip any 160.1.56.128 0.0.0.127
1920 permit ip any 161.189.199.0 0.0.0.127
1930 permit ip any 161.199.136.0 0.0.3.255
1940 permit ip any 162.12.232.0 0.0.3.255
1950 permit ip any 162.255.36.0 0.0.3.255
1960 permit ip any 165.254.88.0 0.0.1.255
1970 permit ip any 168.138.16.0 0.0.3.255
1980 permit ip any 168.138.48.0 0.0.0.255
1990 permit ip any 168.138.56.0 0.0.7.255
2000 permit ip any 168.138.72.0 0.0.0.255
2010 permit ip any 168.138.74.0 0.0.0.127
2020 permit ip any 168.138.96.0 0.0.3.255
2030 permit ip any 168.138.116.0 0.0.3.255
2040 permit ip any 168.138.244.0 0.0.0.255
2050 permit ip any 170.114.0.0 0.0.255.255
2060 permit ip any 173.231.80.0 0.0.15.255
2070 permit ip any 192.204.12.0 0.0.3.255
2080 permit ip any 193.122.32.0 0.0.3.255
2090 permit ip any 193.122.36.0 0.0.3.255
2100 permit ip any 193.122.208.0 0.0.15.255
2110 permit ip any 193.122.224.0 0.0.15.255
2120 permit ip any 193.122.240.0 0.0.15.255
2130 permit ip any 193.123.0.0 0.0.31.255
2140 permit ip any 193.123.40.0 0.0.3.255
2150 permit ip any 193.123.44.0 0.0.3.255
2160 permit ip any 193.123.128.0 0.0.31.255
2170 permit ip any 193.123.168.0 0.0.7.255
2180 permit ip any 193.123.192.0 0.0.31.255
2190 permit ip any 198.251.128.0 0.0.127.255
2200 permit ip any 202.177.207.128 0.0.0.31
2210 permit ip any 204.80.104.0 0.0.7.255
2220 permit ip any 204.141.28.0 0.0.3.255
2230 permit ip any 207.226.132.0 0.0.0.255
2240 permit ip any 209.9.211.0 0.0.0.255
2250 permit ip any 209.9.215.0 0.0.0.255
2260 permit ip any 213.19.144.0 0.0.0.255
2270 permit ip any 213.19.153.0 0.0.0.255
2280 permit ip any 213.244.140.0 0.0.0.255
2290 permit ip any 221.122.88.64 0.0.0.31
2300 permit ip any 221.122.88.128 0.0.0.127
2310 permit ip any 221.122.89.128 0.0.0.127
2320 permit ip any 221.123.139.192 0.0.0.31
2330 remark https://assets.zoom.us/docs/ipranges/ZoomMeetings.txt
2340 permit ip any 3.7.35.0 0.0.0.127
2350 permit ip any 3.21.137.128 0.0.0.127
2360 permit ip any 3.22.11.0 0.0.0.255
2370 permit ip any 3.23.93.0 0.0.0.255
2380 permit ip any 3.25.41.128 0.0.0.127
2390 permit ip any 3.25.42.0 0.0.0.127
2400 permit ip any 3.25.49.0 0.0.0.255
2410 permit ip any 3.80.20.128 0.0.0.127
2420 permit ip any 3.96.19.0 0.0.0.255
2430 permit ip any 3.101.32.128 0.0.0.127
2440 permit ip any 3.101.52.0 0.0.0.127
2450 permit ip any 3.104.34.128 0.0.0.127
2460 permit ip any 3.120.121.0 0.0.0.127
2470 permit ip any 3.127.194.128 0.0.0.127
2480 permit ip any 3.208.72.0 0.0.0.127
2490 permit ip any 3.211.241.0 0.0.0.127
2500 permit ip any 3.235.69.0 0.0.0.127
2510 permit ip any 3.235.82.0 0.0.1.255
2520 permit ip any 3.235.71.128 0.0.0.127
2530 permit ip any 3.235.72.128 0.0.0.127
2540 permit ip any 3.235.73.0 0.0.0.127
2550 permit ip any 3.235.96.0 0.0.1.255
2560 permit ip any 4.34.125.128 0.0.0.127
2570 permit ip any 4.35.64.128 0.0.0.127
2580 permit ip any 8.5.128.0 0.0.1.255
2590 permit ip any 13.52.6.128 0.0.0.127
2600 permit ip any 13.52.146.0 0.0.0.127
2610 permit ip any 18.157.88.0 0.0.0.255
2620 permit ip any 18.205.93.128 0.0.0.127
2630 permit ip any 50.239.202.0 0.0.1.255
2640 permit ip any 50.239.204.0 0.0.0.255
2650 permit ip any 52.61.100.128 0.0.0.127
2660 permit ip any 52.81.151.128 0.0.0.127
2670 permit ip any 52.81.215.0 0.0.0.255
2680 permit ip any 52.202.62.192 0.0.0.63
2690 permit ip any 52.215.168.0 0.0.0.127
2700 permit ip any 64.125.62.0 0.0.0.255
2710 permit ip any 64.211.144.0 0.0.0.255
2720 permit ip any 65.39.152.0 0.0.0.255
2730 permit ip any 69.174.57.0 0.0.0.255
2740 permit ip any 69.174.108.0 0.0.3.255
2750 permit ip any 99.79.20.0 0.0.0.127
2760 permit ip any 101.36.167.0 0.0.0.255
2770 permit ip any 103.122.166.0 0.0.1.255
2780 permit ip any 111.33.115.0 0.0.0.127
2790 permit ip any 111.33.181.0 0.0.0.127
2800 permit ip any 115.110.154.192 0.0.0.63
2810 permit ip any 115.114.56.192 0.0.0.63
2820 permit ip any 115.114.115.0 0.0.0.63
2830 permit ip any 115.114.131.0 0.0.0.63
2840 permit ip any 120.29.148.0 0.0.0.255
2850 permit ip any 129.151.0.0 0.0.15.255
2860 permit ip any 129.159.0.0 0.0.15.255
2870 permit ip any 130.61.164.0 0.0.3.255
2880 permit ip any 134.224.0.0 0.0.255.255
2890 permit ip any 140.238.128.0 0.0.0.255
2900 permit ip any 140.238.232.0 0.0.3.255
2910 permit ip any 144.195.0.0 0.0.255.255
2920 permit ip any 147.124.96.0 0.0.31.255
2930 permit ip any 149.137.0.0 0.0.127.255
2940 permit ip any 152.67.20.0 0.0.0.255
2950 permit ip any 152.67.118.0 0.0.0.255
2960 permit ip any 152.67.168.0 0.0.3.255
2970 permit ip any 152.67.180.0 0.0.0.255
2980 permit ip any 152.67.184.0 0.0.3.255
2990 permit ip any 152.67.240.0 0.0.7.255
3000 permit ip any 158.101.64.0 0.0.0.255
3010 permit ip any 160.1.56.128 0.0.0.127
3020 permit ip any 161.189.199.0 0.0.0.127
3030 permit ip any 161.199.136.0 0.0.3.255
3040 permit ip any 162.12.232.0 0.0.3.255
3050 permit ip any 162.255.36.0 0.0.3.255
3060 permit ip any 165.254.88.0 0.0.1.255
3070 permit ip any 168.138.16.0 0.0.3.255
3080 permit ip any 168.138.48.0 0.0.0.255
3090 permit ip any 168.138.56.0 0.0.7.255
3100 permit ip any 168.138.72.0 0.0.0.255
3110 permit ip any 168.138.74.0 0.0.0.127
3120 permit ip any 168.138.96.0 0.0.3.255
3130 permit ip any 168.138.116.0 0.0.3.255
3140 permit ip any 168.138.244.0 0.0.0.255
3150 permit ip any 170.114.0.0 0.0.255.255
3160 permit ip any 173.231.80.0 0.0.15.255
3170 permit ip any 192.204.12.0 0.0.3.255
3180 permit ip any 193.122.32.0 0.0.3.255
3190 permit ip any 193.122.36.0 0.0.3.255
3200 permit ip any 193.122.208.0 0.0.15.255
3210 permit ip any 193.122.224.0 0.0.15.255
3220 permit ip any 193.122.240.0 0.0.15.255
3230 permit ip any 193.123.0.0 0.0.31.255
3240 permit ip any 193.123.40.0 0.0.3.255
3250 permit ip any 193.123.44.0 0.0.3.255
3260 permit ip any 193.123.128.0 0.0.31.255
3270 permit ip any 193.123.168.0 0.0.7.255
3280 permit ip any 193.123.192.0 0.0.31.255
3290 permit ip any 198.251.128.0 0.0.127.255
3300 permit ip any 202.177.207.128 0.0.0.31
3310 permit ip any 204.80.104.0 0.0.7.255
3320 permit ip any 204.141.28.0 0.0.3.255
3330 permit ip any 207.226.132.0 0.0.0.255
3340 permit ip any 209.9.211.0 0.0.0.255
3350 permit ip any 209.9.215.0 0.0.0.255
3360 permit ip any 213.19.144.0 0.0.0.255
3370 permit ip any 213.19.153.0 0.0.0.255
3380 permit ip any 213.244.140.0 0.0.0.255
3390 permit ip any 221.122.88.64 0.0.0.31
3400 permit ip any 221.122.88.128 0.0.0.127
3410 permit ip any 221.122.89.128 0.0.0.127
3420 permit ip any 221.123.139.192 0.0.0.31
3430 remark https://assets.zoom.us/docs/ipranges/ZoomPhone.txt
3440 permit ip any 3.21.137.128 0.0.0.127
3450 permit ip any 3.235.96.60 0.0.0.0
3460 permit ip any 3.235.96.61 0.0.0.0
3470 permit ip any 3.235.96.62 0.0.0.0
3480 permit ip any 3.235.96.63 0.0.0.0
3490 permit ip any 3.235.96.97 0.0.0.0
3500 permit ip any 3.235.96.96 0.0.0.0
3510 permit ip any 3.235.96.95 0.0.0.0
3520 permit ip any 3.235.96.94 0.0.0.0
3530 permit ip any 8.5.128.0 0.0.0.255
3540 permit ip any 64.211.144.0 0.0.0.255
3550 permit ip any 65.39.152.0 0.0.0.255
3560 permit ip any 69.174.57.0 0.0.0.255
3570 permit ip any 103.122.166.0 0.0.1.255
3580 permit ip any 120.29.148.0 0.0.0.255
3590 permit ip any 147.124.96.0 0.0.31.255
3600 permit ip any 149.137.0.0 0.0.127.255
3610 permit ip any 149.137.25.0 0.0.0.255
3620 permit ip any 149.137.41.0 0.0.0.255
3630 permit ip any 162.12.232.0 0.0.3.255
3640 permit ip any 173.231.92.0 0.0.0.255
3650 permit ip any 173.231.94.0 0.0.0.255
3660 permit ip any 192.204.12.0 0.0.3.255
3670 permit ip any 207.226.132.0 0.0.0.255
3680 permit ip any 209.9.211.0 0.0.0.255
3690 permit ip any 209.9.215.0 0.0.0.255
3700 permit ip any 213.19.144.0 0.0.0.255
3710 permit ip any 213.19.153.0 0.0.0.255
3720 permit ip any 213.244.140.0 0.0.0.255

[balaji.bandi]

what router / FW running WCCP ? you need to check the Limitations.

best is bypass proxy settings for the zoom domain *.zoom.us

[Oleg Volkov]

I have ASA5515-X

How I can bypass proxy if proxy work in explicity mode?

WCCP used for case which user disable auto detect proxy settings

[balaji.bandi]

How I can bypass proxy if proxy work in explicity mode?  -  PAC or WPAD File ?

[Oleg Volkov]

PAC and WPAD exclude only from explicity send traffic to proxy.

But WCCP also need to make except list

[Ken Stieers]

I just put zoom's domains in custom category, and set that category to not decrypt, and not require authentication.