Rollout update: Agent Traffic Manager

The maintenance is now complete. Thanks for your patience.

The scheduled maintenance is now underway. We'll keep you updated on our progress.

Reminder

Broadcom will enable the Agent Traffic Manager for all Cloud SWG tenants on July 21, 2024. Agent Traffic Manager improves the granularity of agent intercept policies. For example, Agent Traffic Manager can reduce the risk associated with adopting new capabilities like ZTNA by limiting which agents receive the ZTNA intercept policy. In addition, Agent Traffic Manager introduces DNS Proxy functionality.

For more information, see the Agent Traffic Manager documentation.

Impact

• Agent intercept capabilities are configurable in the new Connectivity > Agent Traffic Manager page.
• DNS Proxy exemptions are configurable in the new Connectivity > DNS Proxy Exemptions page.
• On the Agent Settings page, the Cloud Firewall forwarding ports selection is removed. Cloud Firewall intercept is now controlled in the Agent Traffic Manager page.
• In Locations, the Selective intercept setting is removed. Equivalent capabilities are implemented in the Agent Traffic Manager page.
• During the maintenance period, administrators may need to re-authenticate to the Cloud Management Portal. Logged in users will be logged out automatically.
• Expect intermittent portal availability and existing authenticated portal sessions to be ended.

Required Action

Beginning July 22, 2024, you should validate your policy configurations to ensure they are structured as expected.

If you previously specified certain agent and location settings, the configuration is migrated to the Agent Traffic Manager policy rule model automatically. Verify that the Agent Traffic Manager rules retain the previous configuration for ports, DNS proxy, and agents.

Support

Questions? Contact technical support by visiting: https://support.broadcom.com/security.

For service status and maintenance updates visit and subscribe to Broadcom Service Status: https://status.broadcom.com

Broadcom will enable the Agent Traffic Manager for all Cloud SWG tenants on July 21, 2024. Agent Traffic Manager improves the granularity of agent intercept policies. For example, Agent Traffic Manager can reduce the risk associated with adopting new capabilities like ZTNA by limiting which agents receive the ZTNA intercept policy. In addition, Agent Traffic Manager introduces DNS Proxy functionality.

For more information, see the Agent Traffic Manager documentation.

Impact

• Agent intercept capabilities are configurable in the new Connectivity > Agent Traffic Manager page.
• DNS Proxy exemptions are configurable in the new Connectivity > DNS Proxy Exemptions page.
• On the Agent Settings page, the Cloud Firewall forwarding ports selection is removed. Cloud Firewall intercept is now controlled in the Agent Traffic Manager page.
• In Locations, the Selective intercept setting is removed. Equivalent capabilities are implemented in the Agent Traffic Manager page.

Required Action

Beginning July 22, 2024, you should validate your policy configurations to ensure they are structured as expected.

If you previously specified certain agent and location settings, the configuration is migrated to the Agent Traffic Manager policy rule model automatically. Verify that the Agent Traffic Manager rules retain the previous configuration for ports, dns proxy, and agents.

Support

Questions? Contact technical support by visiting: https://support.broadcom.com/security.

For service status and maintenance updates visit and subscribe to Broadcom Service Status: https://status.broadcom.com