Cloud SWG: Action Required for Auth Connector Users

Saturday, 23 December 15 minutes
Complete
Complete

The maintenance is now complete. Thanks for your patience.

Underway

The scheduled maintenance is now underway. We'll keep you updated on our progress.

Scheduled

Beginning January 15th we will initiate a series of maintenance events that will result in the removal of the following protocols and ciphers to improve the security posture of connections made by the Auth Connector:

  • SSL/TLS versions older than TLS v1.2
  • AES128-SHA
  • AES128-SHA256
  • AES256-SHA
  • AES256-SHA256
  • CAMELLIA128-SHA
  • CAMELLIA256-SHA
  • ECDHE-RSA-AES128-SHA
  • ECDHE-RSA-AES128-SHA256
  • ECDHE-RSA-AES256-SHA
  • ECDHE-RSA-AES256-SHA384

Required Action

If you are dependent on any of the affected protocols or ciphers you must upgrade your Auth Connector(s) to version 2.5.11006.280360 and upgrade Windows Server to version 2012 or greater with the most recent Microsoft security patches.

For details, see Cloud SWG Auth Connector Integration.

Impact

  • Auth connectors must have access to modern ciphers and protocols (TLS v1.2 and higher) to connect to the cloud service.
  • Please note that updating the Auth Connector or Windows Server requires a system restart.

Support

Questions? Contact technical support by visiting: https://support.broadcom.com/security.

For service status and maintenance updates visit and subscribe to Broadcom Service Status: https://status.broadcom.com

Began at:

Affected components