From February 9, 2026 onward, additional Global Threat Intelligence (GTI) IP addresses will be available. This is an important notice for customers who add IP addresses for GTI to their allow-lists. As GTI is hosted as a global cloud service, all IP addresses should be added to the allow-list.
The following Thrive Knowledge Base article is updated with the full list of GTI IP addresses:
Connecting to Global Threat Intelligence
If you have strict outbound traffic security rules in place, allow the GTI traffic using the destination host name. However, if allowing the traffic by destination host name is not possible owing to technical constraints, allow access to all the following Public Cloud resource IPv4 addresses and IPv6 CIDR blocks. The article referenced above includes all the GTI IP addresses that need to be allowed.
The article also references Public Cloud IPv4 addresses that have been decommissioned by GTI and are no longer used.
Note: To receive information about product updates, sign up for the Support Notification Service.
For instructions, see the Thrive Portal User Guide and navigate to Profile and Settings > My Settings > Manage Support Notification Services (SNS) subscription preferences.