As @JoeAndreini mentioned gathering the ASN numbers is likely going to be the easiest way to build something like this out. However, may I ask why you are looking to whitelist all of their IPs in the first place?
If you are simply hosting origins you should be able to get the actual CIDR blocks that they will be using to contact your origin using SiteShield and the LCC.
If you are just looking to whitelist all Akamai traffic for some other reason the ASN numbers that you would need to do so is currently the following (assuming that you are located in the US, I don't keep track of other countries).
AS36183, AS35994, AS35993, AS30675, AS23455, AS23454, AS22207, AS20189, AS18717, AS18680, AS17334, AS16702, AS16625, AS12222
Im yet to search further as this was the first post I came across, however, keen to know if anyone using Akamai's site shield (SS) has a working method to update their SS IP Ranges ( and update permit ACL's ) between a Palo 3020 and their API...........
Im no developer, I work in infrastructure and am familiar with some automation, but keen to hear of any success stories..
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!