Most admins test by manually downloading the WARP client and enrolling in your organization's Cloudflare Zero Trust instance.

## Install WARP

1. First, uninstall any existing third-party VPN software if possible. Sometimes products placed in a disconnected or disabled state will still interfere with the WARP client.

2. If you are running third-party firewall or TLS decryption software, verify that it does not inspect or block traffic to these IP addresses:

   * Client orchestration IPs:

     * IPv4 API Endpoints: `162.159.137.105` and `162.159.138.105`
     * IPv6 API Endpoints: `2606:4700:7::a29f:8969` and `2606:4700:7::a29f:8a69`

   * Gateway DoH IPs:

     * IPv4 DoH Addresses: `162.159.36.1` and `162.159.46.1`
     * IPv6 DoH Addresses: `2606:4700:4700::1111` and `2606:4700:4700::1001`

     For more information, refer to [WARP with firewall](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/deployment/firewall/).

3. Manually install WARP on the device.

The WARP client should show as **Connected**. The device can now access private network resources that you have made available via Cloudflare Tunnel.
