Web Security Service Announcement - Argentina (GARBA) IP Network

The scheduled maintenance has been completed.

Scheduled maintenance is currently in progress. We will provide updates as necessary.

As part of the previously announced migration to Google Cloud Platform (GCP), the Symantec Web Security Service Team is pleased to announce a new data center in Argentina (designated “GARBA”) which will replace the current Buenos Aires (AEP1) data center. This new data center is available now.

The new ingress IP address for Argentina (GARBA) is: 34.95.226.164

The new IP egress network is: 34.95.226.0/24

Customer Action The required action depends on the method used to connect to the service: IPSec: Customers must migrate their tunnel(s) to the new data center ingress IP address by April 30, 2020.

Unified Agent and WSS Agent: No customer action is required. Customer traffic will be automatically migrated by Symantec to the new data center on April 8, 2020.

Symantec Endpoint Protection Web Traffic Redirector (SEP-WTR): No customer action is required. Customer traffic will be automatically migrated by Symantec to the new data center on April 8, 2020.

Explicit proxy and proxy forwarding: No customer action is required. Customers directing traffic to proxy.threatpulse.net will be automatically migrated by Symantec to the new data center on April 8, 2020.

Explicit over IPSec (“trans-proxy”): Customers that use explicit proxy through IPSec to ep.threatpulse.net should take the same action as IPSec customers and migrate their tunnel(s) to the new data center ingress IP address by April 30, 2020. The underlying IP address for ep.threatpulse.net will not change as part of this migration.

Others:Any customer, regardless of connection method, with a configuration pointing to a specific site or IP address must manually migrate to the new data center prior to April 30, 2020.

Additional Action If connectivity from your network to the Web Security Service is regulated by firewall rules, these rules must be adjusted to allow traffic to pass from your network to the new ingress IP address.

In addition, please ensure that any source-based access controls applied by you or your vendors to traffic originating from WSS are updated to reflect the new source IP network (34.95.226.0/24) to ensure WSS traffic can pass unencumbered.

All customers should continue to trust the existing Buenos Aires (AEP1) data center IP network, because it will continue to be utilized by WSS services through April 30.

Please visit these KB articles for a full list of IP networks used by WSS: