Cloud SWG: Beijing, China (ACNBJ) POP Maintenance May 26, 2026 [ACTION REQUIRED]

Broadcom will perform general maintenance to the Cloud SWG service in Beijing, China (ACNBJ) POP. The maintenance window will run on May 26, 2026 between 18:00 and 06:00 local POP time. Carefully review the information below to avoid disruption of service. It is imperative to ensure access control lists are configured appropriately for Cloud SWG Agents (WSS Agent and ESA Cloud SWG) traffic’s ingress IP addresses, as Agent VIP will change. Any firewall rules regulating Cloud SWG Agents’ connectivity with Cloud SWG need to cover the Egress / Ingress IP Address ranges listed below.

Egress / Ingress IP Addresses

• 52.131.103.144/28
• 52.131.113.48/28
• 52.131.113.80/28
• 52.131.113.128/28
• 52.131.113.144/28
• 52.131.113.176/28
• 52.131.113.192/28
• 52.131.113.208/28
• 52.131.113.224/28
• 52.131.113.240/28
• 52.131.114.0/28

For a full list of IP networks used by WSS, please visit:

https://knowledge.broadcom.com/external/article?legacyId=TECH242979

Impact

During this maintenance event all services will remain operational and available. Agent traffic will be automatically redirected by the service to the nearest active data pods within the same site.

Required Action

WSS Agent, ESA: To maintain agent connectivity from mainland China, update any firewall rules regulating connectivity with Cloud SWG to allow traffic to pass to/from the IP networks listed above. Failure to make these changes could prevent users from connecting to Cloud SWG, or authenticating against the service using the Auth Connector (where applicable) after the maintenance.

Customers with no presence in mainland China are not directly impacted. It's always advisable to maintain the list of IP networks up to date with the latest changes. The current IP ranges are always available at https://servicepoints.threatpulse.com/api/v2/full and https://knowledge.broadcom.com/external/article?legacyId=TECH242979

Known Issues

Due to a technical issue, UDP-based connections for the WSS Agent / Enterprise Single Agent destined for datacenters within Mainland China are temporarily disabled. Both agents will automatically fall back to TCP, so user impact is expected to be minimal. We are actively investigating and will provide updates as more information becomes available. At this time, we do not have an estimated timeline for resolution.

Additionally, as a result of this maintenance, pod.threatpulse.com may report UNK for its datacenter connection. This should be resolved a couple of days after the maintenance.

Technical Support

Experiencing issues? Contact technical support by visiting here or on the main Cloud SWG Portal page.

For service status and maintenance updates, visit and subscribe to Broadcom Service Status.