Cloud SWG: Localization Migration to Different GCP Region

The maintenance is now complete. Thanks for your patience.

The scheduled maintenance is now underway. We'll keep you updated on our progress.

We are pleased to announce that Algeria, Malta and Tunisia Localization Zones will be moved to europe-west8 on March 04, 2024. This will be available to all customers at no extra cost. WSS Agent 7.4.2 or higher is required to take advantage of the new capability.

What are Localization Zones?

Localization Zones allow WSS to request content using IP addresses that match the country of the end user. This gives content providers the ability to return content in the optimal language for the user, better matching their native web experience. It’s important to note that content providers choose whether or not to localize their content and what localizations they support. Additional Localization Zones will be announced in the near future.

How to Benefit From Localization Zones

WSS Agent 7.4.2 has been promoted to Maintenance Release status on August 27, 2021 and is required to take advantage of Localization Zones.

Please carefully review the information below to avoid disruption of service.

Please note that the new Localization Zones in Europe will use the following new egress IP addresses:

• Algeria

  • 34.154.250.192/27 - NEW March 4,2024
  • 46.235.156.0/27 - TO BE RETIRED March 18, 2024

• Malta

  • 34.154.50.128/27 - NEW March 4,2024
  • 46.235.156.160/27 - TO BE RETIRED March 18, 2024

• Tunisia

  • 34.154.50.192/27 - NEW March 4,2024
  • 46.235.157.192/27 -TO BE RETIRED March 18, 2024

Required Action

Prior to the decommission date:

• Firewall rules regulating connectivity to/from your network to Cloud SWG should be adjusted to allow traffic to pass to the NEW IP network listed above.
• Third party applications that regulate connections by source IP address should be updated to accept connections from the NEW egress IP networks listed above to ensure traffic proxied through Cloud SWG can reach the application.
• Auth Connector must be able to communicate with all egress ranges listed above on TCP 443, where applicable.

Failure to make these changes could prevent users from connecting to Cloud SWG, accessing third party web applications, or authenticating against the service using the Auth Connector (where applicable).

• WSS Agent, SEP Agent: Agent traffic will be automatically redirected to the new POP. No customer action is required.

Please visit this KB article for a full list of IP networks used by Cloud SWG:

https://knowledge.broadcom.com/external/article?legacyId=TECH242979

Technical Support

Experiencing issues? Contact technical support by visiting: https://support.broadcom.com/security.

For service status and maintenance updates visit and subscribe to Broadcom Service Status: https://status.broadcom.com.