IP Address Change for SaaS Access Points in Alibaba Cloud SASE
Dec 30, 2025
Secure Access Service EdgeAffected Time
Change Details
Thank you for your continued support of Alibaba Cloud. The endpoint access feature of the SASE product will undergo a upgrade from February 2, 2026, to February 6, 2026. After the upgrade, the endpoint access functionality will include an expanded pool of access IP addresses.
Impact
To ensure uninterrupted service, you must add the new SASE access IP pool to your allowlist in employee office networks prior to the upgrade. If this action is not completed in time, employees may lose connectivity to the Office Security Platform SASE SaaS access points after the upgrade, consequently preventing access to your internal network.
Scope of Impact
This change affects all users who:
- Access the internal network via SASE SaaS access points while working in office locations, and
- Have IP-based access restrictions configured in their office networks.
The following scenarios are NOT affected:
- Office networks without a public internet access allowlist, or where SASE is not required for internal network connectivity.
- Office networks with a public internet access allowlist that rely solely on SASE access point domain names (without fixed IP configurations).
- Employees using dedicated access points.
Recommended Actions
If your office network enforces IP-based access restrictions, please navigate to [Secure Access Service Edge] > [Internal Network Access] > [Terminal Access] in the console. For each enabled POP location listed on this page, add all corresponding SASE access IP ranges to your office network’s allowlist.
We strongly recommend completing this IP allowlisting update before the scheduled upgrade window to avoid any service disruption.
Should you have any questions or require assistance, please feel free to contact us via a support ticket or our customer service hotline at any time.