---
title: How to Allow Google Services via Zscaler
description: How to Allow Google meet via Zscaler
---

[Skip to content](https://securedynamics.net/kb/allow-googlemeet-via-zscaler#main-content)

English

Show submenu for translations

![SecureDynamics Zscaler Logo](https://securedynamics.net/hs-fs/hubfs/SecureDynamics%20Logo%20Dark-1.png?width=1250&height=296&name=SecureDynamics%20Logo%20Dark-1.png)

Open main navigation

Close main navigation

- English
  
  Show submenu for translations
- Go to securedynamics.net

 Go to securedynamics.net

 Hello. How can we help you?

- There are no suggestions because the search field is empty.

1. [SecureDynamics Knowledge Base](https://securedynamics.net/kb?hsLang=en)
2. [Support](https://securedynamics.net/kb/support?hsLang=en)

# How to Allow Google Services via Zscaler

## How to Allow Google Services via Zscaler (Firewall & Proxy Configuration)

 

---

### **Overview**

To ensure seamless access to Google meet when traffic is routed through a **Zscaler Security service**, specific firewall and proxy configurations must be implemented.  
This article describes the required **allow-listing of ports, domains/URIs, and IP address ranges** to prevent service disruptions and maintain quality of experience. ([Google Help](https://support.google.com/a/answer/1279090?hl=en&utm_source=chatgpt.com))

---

#### **❗Why This Is Required**

Google services use a combination of **web traffic (HTTPS)**, **media traffic (WebRTC/UDP)**, and **specific IP ranges** for real-time features like video and audio. Zscaler’s cloud-based security generally proxies and inspects traffic; however, to avoid issues like blocked connections or degraded meeting quality, administrators must configure rules allowing traffic to Google’s required endpoints. ([Google Help](https://support.google.com/a/answer/1279090?hl=en&utm_source=chatgpt.com))

---

#### **1. Configure Firewall Policy– Ports**

Ensure your firewall and Zscaler proxy allow:

| Traffic Type | Protocol/Ports |
| --- | --- |
| Media traffic (audio/video) | UDP 3478, UDP 19302–19309 |

> Note: If UDP is blocked, traffic will fall back to TCP on port 443, but this may reduce media quality. ([Google Help](https://support.google.com/a/answer/1279090?hl=en&utm_source=chatgpt.com))

---

#### **2. Allow Access to Google URI Patterns**

If filtering or allowlists are enforced, add the following **URI/domain patterns**:

### **Essential Domains for Google Meet**

```
meet.google.com
```

---

#### **3. Allow Google IP Address Ranges**

Google Meet and Workspace media servers may use dynamic IP address ranges for audio and video traffic:

### **Recommended IP Ranges**

| Type | Sample IP Ranges |
| --- | --- |
| Google Workspace / Meet IPv4 | 74.125.250.0/24, 74.125.247.128/32 |
| Google Meet Consumer IPv4 | 142.250.82.0/24 |
| SNI (TLS) | workspace.turns.goog, meet.turns.goog |

> These IPs are subject to change and may vary by region. Always verify against Google’s current published ranges. ([Google Help](https://support.google.com/a/answer/1279090?hl=en))

---

#### **4. Zscaler Proxy / PAC File Considerations**

- If using **Zscaler Client Connector or PAC files**, ensure necessary **bypass or direct access rules** are applied for the domains/IPs above.
- Example PAC rule to bypass Zscaler for Google authentication:

```
if (shExpMatch(host, "meet.google.com")) return "DIRECT";
```

> This helps prevent authentication traffic from being intercepted improperly. ([Zscaler Help Center](https://help.zscaler.com/zia/saml-configuration-guide-google-apps?utm_source=chatgpt.com))

---

 

---

#### **Additional Notes**

✔ Using proxies and deep packet inspection (DPI) may interfere with real-time traffic; where possible, permit direct connections for media traffic. ([Google Help](https://support.google.com/a/answer/1279090?hl=en))  
✔ If your environment inspects TLS traffic (SSL inspection), consider excluding or allowing known Google endpoints to avoid certificate issues. ([Google Help](https://support.google.com/chrome/a/answer/3504945?hl=en&utm_source=chatgpt.com))

---

 

- [FAQs](https://securedynamics.net/kb/faqs?hsLang=en)
- [Troubleshooting](https://securedynamics.net/kb/troubleshooting?hsLang=en#main-content)

    - [Client Connector Portal](https://securedynamics.net/kb/troubleshooting?hsLang=en#client-connector-portal)
    - [Zscaler Client Connector](https://securedynamics.net/kb/troubleshooting?hsLang=en#zscaler-client-connector)
- [Support](https://securedynamics.net/kb/support?hsLang=en)
- [SecureDynamics Internal](https://securedynamics.net/kb/securedynamics-internal?hsLang=en)
- [Licensing](https://securedynamics.net/kb/licensing?hsLang=en#main-content)

    - [ZIA Upgrades](https://securedynamics.net/kb/licensing?hsLang=en#zia-upgrades)
- [Education & Training](https://securedynamics.net/kb/education-training?hsLang=en)
- [Delivery Services](https://securedynamics.net/kb/delivery-services?hsLang=en)
- [Partner Help](https://securedynamics.net/kb/partner-help?hsLang=en)

[![SecureDynamics Zscaler Logo](https://securedynamics.net/hs-fs/hubfs/SecureDynamics%20Logo%20Dark-1.png?width=1250&height=296&name=SecureDynamics%20Logo%20Dark-1.png "SecureDynamics Zscaler Logo")](https://cm360.securedynamics.net?hsLang=en)

securedynamics.net Help Center

Copyright © 2026, SecureDynamics

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://securedynamics.net/#organization",
  "@type" : "Organization",
  "address" : {
    "@type" : "PostalAddress",
    "addressCountry" : "US",
    "addressLocality" : "Santa Clara",
    "addressRegion" : "CA",
    "postalCode" : "95054",
    "streetAddress" : "5201 Great America Pkwy, Suite 320"
  },
  "logo" : {
    "@type" : "ImageObject",
    "url" : "https://securedynamics.net/hubfs/SecureDynamics%20Zscaler%20Logo-1.webp"
  },
  "name" : "SecureDynamics",
  "sameAs" : [ "https://www.linkedin.com/company/3626024/" ],
  "url" : "https://securedynamics.net/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://securedynamics.net/#website",
  "@type" : "WebSite",
  "inLanguage" : "en-US",
  "name" : "SecureDynamics",
  "potentialAction" : {
    "@type" : "SearchAction",
    "query-input" : "required name=search_term_string",
    "target" : {
      "@type" : "EntryPoint",
      "urlTemplate" : "https://securedynamics.net/hs-search-results?q={search_term_string}"
    }
  },
  "publisher" : {
    "@id" : "https://securedynamics.net/#organization"
  },
  "url" : "https://securedynamics.net/"
}
```