Web Security Service Announcement Helsinki (GFIHE) Maintenance February 23, 2021

The scheduled maintenance has been completed.

Scheduled maintenance is currently in progress. We will provide updates as necessary.

Maintenance will begin as scheduled in 60 minutes.

Update: Please be advised that the date/time for this maintenance has been changed. The impact however remains unchanged. Here is the updated schedule:

Updated Schedule • Start Date: February 23, 2021, at 16:00 UTC • End Date: February 24, 2021, at 04:00 UTC

The Helsinki (GFIHE) WSS site will undergo maintenance beginning on February 23, 2021 starting at 17:00 UTC, lasting for a duration of up to 12 hours.

• Expect the site to be completely unavailable during the maintenance window. • No IP address changes will occur with this maintenance. • Carefully review the information below to avoid disruption of service.

Ingress IP Addresses The IP addresses you forward traffic to for filtering.

All access methods:

• 168.149.149.164 - NO CHANGE

Egress IP Addresses The IP addresses WSS will use to access content on your behalf and to deliver filtered content to your users. If you use application or firewall access control lists, update those lists prior to the maintenance.

• 168.149.149.0/24 - NO CHANGE

Impact Expect the site to be completely unavailable during the maintenance window.

Required Action by Connection Method • IPsec: Switch to your secondary tunnel prior to the maintenance window. • WSS Agent and Unified Agent: User traffic will be automatically redirected by the service to the nearest alternate site during the maintenance window. • SEP Agent: User traffic will be automatically redirected by the service to the nearest alternate site during the maintenance window. • Explicit proxy and proxy forwarding: Customers directing traffic to proxy.threatpulse.net will be automatically redirected by the service to the nearest alternate site during the maintenance window.

WARNING: Any customer, regardless of connection method, with a configuration pointing to a specific site or IP address must manually failover to a secondary site during the migration window to avoid an outage. Explicit redirection should never point to an IP address. Only IPsec connections should be directed to IP addresses.

Support Questions? Contact technical support by visiting: https://support.broadcom.com/security.

For service status and maintenance updates visit and subscribe to Broadcom Service Status: https://wss.status.broadcom.com.