Cloud SWG: General Product Maintenance (Multiple EMEA POPs) February 10 - 13, 2025

Broadcom will perform general maintenance to the Cloud SWG data centers in Abu Dhabi, UAE (GAEAD), Manama, Bahrain (GBHMA), Ankara, Turkey (GTRAN), Helsinki, Finland (GFIHE), Tallinn, Estonia (GEETA1), Riga, Latvia (GLVRI), Dublin, Ireland (GIEDU), Warsaw, Poland (GPOWA) and Vilnius, Lithuania(GLTVI) on February 10, 2025, starting at 16:00 UTC and completing on February 13, 2025 at 00:00 UTC. This maintenance includes the addition of IPv6 egress addresses to the sites. Please refer to the details below for location-specific information.

Ingress IP Address:

• Abu Dhabi, UAE (GAEAD) : 168.149.175.164 - NO CHANGE
• Manama, Bahrain (GBHMA) : 168.149.175.164 - NO CHANGE
• Ankara, Turkey (GTRAN) : 46.235.158.192 - NO CHANGE
• Helsinki, Finland (GFIHE) : 168.149.149.164 - NO CHANGE
• Tallinn, Estonia (GEETA1) : 168.149.149.164 - NO CHANGE
• Riga, Latvia (GLVRI) : 168.149.149.164 - NO CHANGE
• Dublin, Ireland (GIEDU) : 148.64.15.164 - NO CHANGE
• Warsaw, Poland (GPOWA) : 103.9.99.164 - NO CHANGE
• Vilnius, Lithuania(GLTVI) : 103.9.99.164 - NO CHANGE

Egress IP Addresses:

• Abu Dhabi, UAE (GAEAD)
  • 168.149.175.0/24 - NO CHANGE
  • 2604:b040:0013:0600:0001:0000:0000:0000/80 - NEW on February 10, 2025
• Manama, Bahrain (GBHMA)
  • 148.64.6.64 - NO CHANGE
  • 2604:b040:0013:0600:0001:0000:0000:0000/80 - NEW on February 10, 2025
• Ankara, Turkey (GTRAN)
  • 46.235.158.192/26 - NO CHANGE
  • 2604:b040:0013:1300:0003:0000:0000:0000/80 - NEW on February 11, 2025
• Helsinki, Finland (GFIHE)
  • 168.149.149.0/24 - NO CHANGE
  • 2604:b040:0013:0d00:0001:0000:0000:0000/80 - NEW on February 11, 2025
• Tallinn, Estonia (GEETA1)
  • 199.116.172.224/27 - NO CHANGE
  • 2604:b040:0013:0d00:0001:0000:0000:0000/80 - NEW on February 11, 2025
• Riga, Latvia (GLVRI)
  • 199.116.175.0/27 - NO CHANGE
  • 2604:b040:0013:0d00:0001:0000:0000:0000/80 - NEW on February 11, 2025
• Dublin, Ireland (GIEDU)
  • 148.64.15.0/24 - NO CHANGE
  • 2604:b040:0013:1000:0001:0000:0000:0000/80 - NEW on February 12, 2025
• Warsaw, Poland (GPOWA)
  • 103.9.99.0/24 - NO CHANGE
  • 2604:b040:0013:0c00:0000:0000:0000:0000/80 - NEW on February 12, 2025
• Vilnius, Lithuania(GLTVI)I
  • 199.116.172.192/27 - NO CHANGE
  • 2604:b040:0013:0c00:0000:0000:0000:0000/80 - NEW on February 12, 2025

Impact

Expect the site to be completely unavailable during the maintenance window.

Following this maintenance, the new IPv6 addresses will be available to Cloud SWG proxies to communicate with content providers when the following conditions are true:

• The content provider serves content over IPv6 ONLY (not IPv4/IPv6 dual stack)
• The content is accessed by the client via explicit proxy using the hostname (not IPv6 address)

Please note: Cloud SWG prefers IPv4 when it encounters dual-stack (IPv4 and IPv6) content sources. Broader IPv6 capabilities will be introduced in future releases.

IP address maintenance will be performed as part of this maintenance. If you have restrictive access policies based on our network ranges and you will access IPv6-only content, you should update your access policies to include the new IPv6 egress ranges. Please review our best practices and published network ranges in this article.

Timing

• Abu Dhabi, UAE (GAEAD) : February 10, 2025 16:00 UTC - February 10, 2025 22:00 UTC
• Manama, Bahrain (GBHMA) : February 10, 2025 16:00 UTC - February 10, 2025 22:00 UTC
• Ankara, Turkey (GTRAN) : February 11, 2025 18:00 UTC - February 12, 2025 00:00 UTC
• Helsinki, Finland (GFIHE) : February 11, 2025 20:00 UTC - February 12, 2025 02:00 UTC
• Tallinn, Estonia (GEETA1) : February 11, 2025 20:00 UTC - February 12, 2025 02:00 UTC
• Riga, Latvia (GLVRI) : February 11, 2025 20:00 UTC - February 12, 2025 02:00 UTC
• Dublin, Ireland (GIEDU) : February 12, 2025 19:00 UTC - February 13, 2025 01:00 UTC
• Warsaw, Poland (GPOWA) : February 12, 2025 18:00 UTC - February 13, 2025 00:00 UTC
• Vilnius, Lithuania(GLTVI) : February 12, 2025 18:00 UTC - February 13, 2025 00:00 UTC

Required Action

Prior to the maintenance date:

• Firewall rules regulating connectivity to/from your network to Cloud SWG should be adjusted to allow traffic to pass to the NEW IP networks listed above.
• Third party applications that regulate connections by source IP address should be updated to accept connections from the IP networks listed above to ensure traffic proxied through Cloud SWG can reach the applications.
• Auth Connector must be able to communicate with the egress range listed above on TCP 443, where applicable.

Failure to make these changes could prevent users from connecting to Cloud SWG, accessing third party web applications, or authenticating against the service using the Auth Connector (where applicable).

• IPsec: Switch to your secondary tunnel prior to the maintenance window.
• Explicit proxy and proxy forwarding: Customers directing traffic to proxy.threatpulse.net will be automatically redirected by the service to the nearest alternate site during the maintenance window.
• Agent: no actions required.

Technical Support

Experiencing issues? Contact technical support by visiting here.

For service status and maintenance updates visit and subscribe to Broadcom Service Status.