topic CP_default_Office_Mode_addresses_pool in SASE and Remote Access

CP_default_Office_Mode_addresses_pool

m123 — Mon, 12 Jan 2026 12:42:33 GMT

I saw this created on my smart console today
"CP_default_Office_Mode_addresses_pool"

I researched and apparantly it is apool that assign vpn users ip.

My question is can it be deleted as my client sees it a security concern?
What is the actual use of the pool

Re: CP_default_Office_Mode_addresses_pool

Chris_Atkinson — Mon, 12 Jan 2026 14:54:21 GMT

This is the default IP pool for remote access VPN clients.

SmartConsole includes a default object for Office Mode IP addresses, CP_default_Office_Mode_addresses_pool. You can use the default object, or create a new one for your network. It is used here unless you assign an alternate network object.

Re: CP_default_Office_Mode_addresses_pool

the_rock — Mon, 12 Jan 2026 15:14:41 GMT

Chris is 100% right. Technically, you can use that pool, meaning when people connect to VPN with their client, they will get IP from 172.16.10.0/24 pool. You can also extend it to use larger prefix, say /23 if needed or create totally new subnet and use that for OM pool, thats what lots of people may do as well. To answer your question, use of the pool is for those IP addresses to be assigned to remote users.