How do I locate the ZEN IP addresses for my IPsec VPN tunnels?

  1. Go to ips.<your cloud name>.net

    You can find the name of your cloud in the URL your admins use to log into the Zscaler service. For example, if an organization logs into, then that organization's cloud name is Therefore, in this instance, you would go to To learn more, see What is my cloud name?
  2. From the menu on the left, click Cloud Enforcement Node Ranges.
  3. Locate the VPN Host Name of two data centers closest to your organization's location and resolve the hostnames. Choose one data center as the destination for your primary IPsec VPN tunnel, and the other data center as the destination for your secondary IPsec VPN tunnel.

    For example, if you're located in London, you can scroll to the Europe section of the table, then choose (London) as your primary destination and (Amsterdam) as your secondary destination.