Change Details

Thank you for your continued support of Alibaba Cloud. The endpoint access feature of the SASE product will undergo a upgrade at June 16, 2026. After the upgrade, the endpoint access functionality will include an expanded pool of access IP addresses.

Impact

To ensure uninterrupted service, you must add the new SASE access IP pool to your allowlist in employee office networks prior to the upgrade. If this action is not completed in time, employees may lose connectivity to the Office Security Platform SASE SaaS access points after the upgrade, consequently preventing access to your internal network.

Scope of Impact

This change affects all users who:

Access the internal network via SASE SaaS access points while working in office locations, and

Have IP-based access restrictions configured in their office networks.

The following scenarios are NOT affected:

Office networks without a public internet access allowlist, or where SASE is not required for internal network connectivity.

Office networks with a public internet access allowlist that rely solely on SASE access point domain names (without fixed IP configurations).

Employees using dedicated access points.

If your office network enforces IP-based access restrictions, please navigate to [Secure Access Service Edge] > [Internal Network Access] > [Terminal Access] in the console. For each enabled POP location listed on this page, add all corresponding SASE access IP ranges to your office network’s allowlist.

We strongly recommend completing this IP allowlisting update before the scheduled upgrade window to avoid any service disruption.