diff --git a/src/containerapp/HISTORY.rst b/src/containerapp/HISTORY.rst
index 0ce871a675d..68227e988fa 100644
--- a/src/containerapp/HISTORY.rst
+++ b/src/containerapp/HISTORY.rst
@@ -5,6 +5,7 @@ Release History
 0.3.21
 ++++++
 * Fix the PermissionError caused for the Temporary files while running `az containerapp up` command on Windows
+* Fix the empty IP Restrictions object caused running `az containerapp update` command on Windows with a pre existing .yaml file
 
 0.3.20
 ++++++
diff --git a/src/containerapp/azext_containerapp/_models.py b/src/containerapp/azext_containerapp/_models.py
index 15c685b33b7..9dbfbaa09c3 100644
--- a/src/containerapp/azext_containerapp/_models.py
+++ b/src/containerapp/azext_containerapp/_models.py
@@ -152,7 +152,8 @@
     "transport": None,  # 'auto', 'http', 'http2', 'tcp'
     "exposedPort": None,
     "traffic": None,  # TrafficWeight
-    "customDomains": None  # [CustomDomain]
+    "customDomains": None,  # [CustomDomain]
+    "ipSecurityRestrictions": None  # [IPSecurityRestrictions]
 }
 
 RegistryCredentials = {
diff --git a/src/containerapp/azext_containerapp/_sdk_models.py b/src/containerapp/azext_containerapp/_sdk_models.py
index dd93bfce7c2..5a37854a966 100644
--- a/src/containerapp/azext_containerapp/_sdk_models.py
+++ b/src/containerapp/azext_containerapp/_sdk_models.py
@@ -1315,6 +1315,35 @@ def __init__(self, **kwargs):
         self.certificate_id = kwargs.get('certificate_id', None)
 
 
+class IPSecurityRestrictions(Model):
+    """IP Restrictions of a Container App.
+
+    :param name: ipAddressRange
+    :type name: str
+    :param name: action
+    :type name: str
+    :param name: name
+    :type name: str
+    :param name: description
+    :type name: str
+
+    """
+
+    _attribute_map = {
+        'name': {'key': 'name', 'type': 'str'},
+        'ipAddressRange': {'key': 'ipAddressRange', 'type': 'str'},
+        'action': {'key': 'action', 'type': 'str'},
+        'description': {'key': 'description', 'type': 'str'},
+    }
+
+    def __init__(self, **kwargs):
+        super(IPSecurityRestrictions, self).__init__(**kwargs)
+        self.name = kwargs.get('name', None)
+        self.ipAddressRange = kwargs.get('ipAddressRange', None)
+        self.action = kwargs.get('action', None)
+        self.description = kwargs.get('description', None)
+
+
 class CustomHostnameAnalysisResult(ProxyResource):
     """Custom domain analysis.
 
@@ -2071,6 +2100,7 @@ class Ingress(Model):
         'traffic': {'key': 'traffic', 'type': '[TrafficWeight]'},
         'custom_domains': {'key': 'customDomains', 'type': '[CustomDomain]'},
         'allow_insecure': {'key': 'allowInsecure', 'type': 'bool'},
+        'ipSecurityRestrictions': {'key': 'ipSecurityRestrictions', 'type': '[IPSecurityRestrictions]'},
     }
 
     def __init__(self, **kwargs):
@@ -2082,6 +2112,7 @@ def __init__(self, **kwargs):
         self.traffic = kwargs.get('traffic', None)
         self.custom_domains = kwargs.get('custom_domains', None)
         self.allow_insecure = kwargs.get('allow_insecure', None)
+        self.ipSecurityRestrictions = kwargs.get('ipSecurityRestrictions', None)
 
 
 class LegacyMicrosoftAccount(Model):
diff --git a/src/containerapp/setup.py b/src/containerapp/setup.py
index 9f25d5e6bd4..16a134707b4 100644
--- a/src/containerapp/setup.py
+++ b/src/containerapp/setup.py
@@ -17,7 +17,7 @@
 # TODO: Confirm this is the right version number you want and it matches your
 # HISTORY.rst entry.
 
-VERSION = '0.3.20'
+VERSION = '0.3.21'
 
 # The full list of classifiers is available at
 # https://pypi.python.org/pypi?%3Aaction=list_classifiers