Web Security Service Announcement - Denver (GUSDV) Site

The scheduled maintenance has been completed.

Scheduled maintenance is currently in progress. We will provide updates as necessary.

As part of the previously announced migration to Google Cloud Platform (GCP), the Symantec Web Security Service Team is pleased to announce a new data center in Denver (designated GUSDV) which will replace the current Denver, Colorado (DEN3) data center. This new data center is available now.

The new ingress IP address for Denver (GUSDV) is: 148.64.31.164

The new IP egress network is: 148.64.31.0/24

Customer Action The required action depends on the method used to connect to the service:

IPSec: Customers must migrate their tunnel(s) to the new data center ingress IP address by April 30, 2020.

Unified Agent and WSS Agent: No customer action is required. Customer traffic will be automatically migrated by Symantec to the new data center by April 30, 2020.

Symantec Endpoint Protection Web Traffic Redirector (SEP-WTR): No customer action is required. Customer traffic will be automatically migrated by Symantec to the new data center by April 30, 2020.

Explicit proxy and proxy forwarding: No customer action is required. Customers directing traffic to proxy.threatpulse.net will be automatically migrated by Symantec to the new data center by April 30, 2020.

Explicit over IPSec (“trans-proxy”): Customers that use explicit proxy through IPSec to ep.threatpulse.net should take the same action as IPSec customers and migrate their tunnel(s) to the new data center ingress IP address by April 30, 2020. The underlying IP address for ep.threatpulse.net will not change as part of this migration.

Others: Any customer, regardless of connection method, with a configuration pointing to a specific site or IP address must manually migrate to the new data center prior to April 30, 2020.

Additional Action If connectivity from your network to the Web Security Service is regulated by firewall rules, these rules must be adjusted to allow traffic to pass from your network to the new ingress IP address.

In addition, please ensure that any source-based access controls applied by you or your vendors to traffic originating from WSS are updated to reflect the new source IP network (148.64.31.0/24) to ensure WSS traffic can pass unencumbered.

All customers should continue to trust the existing Denver, Colorado (DEN3) data center IP network, because it will continue to be utilized by WSS services through April 30.

Please visit these KB articles for a full list of IP networks used by WSS: Worldwide data center IP addresses: https://knowledge.broadcom.com/external/article?legacyId=TECH242979 Authentication IP addresses: https://knowledge.broadcom.com/external/article?legacyId=TECH240889

Questions? Please visit this KB article for additional details on the Web Security Service Migration to Google Cloud Platform: https://knowledge.broadcom.com/external/article?legacyId=tech257356

If you have further questions regarding this announcement, contact Technical Support. Support information is located at: https://support.broadcom.com/security

For real time updates and status visit and subscribe to Broadcom Service Status: https://wss.status.broadcom.com