Do I need to allowlist new Zoho IP ranges for the India, UAE or EU data centres?

Only if your firewall, email gateway or partner systems restrict traffic by IP address. In that case, allowlist the IP ranges Zoho publishes for the data centre your account is hosted in, not only the US ranges. Zoho lists IP ranges per data centre on its help pages, and they change over time, so review them regularly rather than hard-coding an old list.

Zoho runs separate data centres for regions such as the US, EU, India, Australia, Japan, Canada, Saudi Arabia and the UAE. Your organisation is hosted in one of them, usually chosen at sign-up. Traffic from Zoho to your systems, such as webhooks, outgoing mail relays or API calls to your server, comes from that data centre's IP ranges.

You need to act if you run an on-premises firewall that blocks unknown sources, a mail gateway that filters by sender IP, or a third-party system that only accepts calls from listed addresses. In those cases, add the ranges for your data centre. If you send mail through Zoho, also make sure SPF, DKIM and DMARC are set correctly, which matters more than IP lists for deliverability.

Zoho updates its ranges when it adds capacity, so set a reminder to check the official list a few times a year. Where possible, use domain-based rules or authentication tokens instead of IP allowlists, because they need less maintenance. Keep a short note of where each allowlist lives so the next admin can update it.

Written by Flowpeak, a Zoho implementation partner. Zoho pricing and features change, so confirm current details on the official Zoho site. Free checklists | Ask us a question