Cloud SWG: General Product Maintenance (Multiple APAC POPs) February 10 - 14, 2025

Broadcom will perform general maintenance to the Cloud SWG POPs in Seoul, South Korea (GKRSE), Hong Kong (GCNHK), Taipei, Taiwan (GTWTA), Auckland, New Zealand (GNZAU), Jakarta, Indonesia (GIDJK) and Manila, Philippines (GPHMA) on February 10, 2025, starting at 12:00 UTC and completing on February 14, 2025 at 18:00 UTC. This maintenance includes the addition of IPv6 egress addresses to the sites. Please refer to the details below for location-specific information.

Ingress IP Address:

• Seoul, South Korea (GKRSE) : 168.149.154.164 - NO CHANGE
• Hong Kong (GCNHK) : 103.246.38.164 - NO CHANGE
• Taipei, Taiwan (GTWTA) : 168.149.155.164 - NO CHANGE
• Auckland, New Zealand (GNZAU) : 168.149.170.164 - NO CHANGE
• Jakarta, Indonesia (GIDJK) : 168.149.180.164 - NO CHANGE
• Manila, Philippines (GPHMA) : 168.149.180.164 - NO CHANGE

Egress IP Addresses:

• Seoul, South Korea (GKRSE)
  • 168.149.154.0/24 - NO CHANGE
  • 2604:b040:0013:0500:0000:0000:0000:0000/80 - NEW on February 10, 2025
• Hong Kong (GCNHK)
  • 103.246.38.0/24 - NO CHANGE
  • 2604:b040:0013:0200:0000:0000:0000:0000/80 - NEW on February 11, 2025
• Taipei, Taiwan (GTWTA)
  • 168.149.155.0/24 - NO CHANGE
  • 2604:b040:0013:0100:0000:0000:0000:0000/80 - NEW on February 12, 2025
• Auckland, New Zealand (GNZAU)
  • 168.149.170.0/24 - NO CHANGE
  • 2604:b040:0013:0a00:0001:0000:0000:0000/80 - NEW on February 13, 2025
• Jakarta, Indonesia (GIDJK)
  • 168.149.180.0/24 - NO CHANGE
  • 2604:b040:0013:0900:0000:0000:0000:0000/80- NEW on February 14, 2025
• Manila, Philippines (GPHMA)
  • 168.149.181.0/25 - NO CHANGE
  • 2604:b040:0013:0900:0000:0000:0000:0000/80 - NEW on February 14, 2025

Impact

Expect the site to be completely unavailable during the maintenance window.

Following this maintenance, the new IPv6 addresses will be available to Cloud SWG proxies to communicate with content providers when the following conditions are true:

• The content provider serves content over IPv6 ONLY (not IPv4/IPv6 dual stack)
• The content is accessed by the client via explicit proxy using the hostname (not IPv6 address)

Please note: Cloud SWG prefers IPv4 when it encounters dual-stack (IPv4 and IPv6) content sources. Broader IPv6 capabilities will be introduced in future releases.

IP address maintenance will be performed as part of this maintenance. If you have restrictive access policies based on our network ranges and you will access IPv6-only contents, you should update your access policies to include the new IPv6 egress ranges. Please review our best practices and published network ranges in this article.

Timing

• Seoul, South Korea (GKRSE) : February 10, 2025, 12:00 UTC to 18:00 UTC
• Hong Kong (GCNHK) : February 11, 2025, 12:00 UTC to 18:00 UTC
• Taipei, Taiwan (GTWTA): February 12, 2025 12:00, UTC to 18:00 UTC
• Auckland, New Zealand (GNZAU) : February 13, 2025, 12:00 UTC to 18:00 UTC
• Jakarta, Indonesia (GIDJK) : February 14, 2025, 12:00 UTC to 18:00 UTC
• Manila, Philippines (GPHMA) : February 14, 2025, 12:00 UTC to 18:00 UTC

Required Action

Prior to the maintenance date:

• Firewall rules regulating connectivity to/from your network to Cloud SWG should be adjusted to allow traffic to pass to the NEW IP networks listed above.
• Third party applications that regulate connections by source IP address should be updated to accept connections from the IP networks listed above to ensure traffic proxied through Cloud SWG can reach the applications.
• Auth Connector must be able to communicate with the egress range listed above on TCP 443, where applicable.

Failure to make these changes could prevent users from connecting to Cloud SWG, accessing third party web applications, or authenticating against the service using the Auth Connector (where applicable).

• IPsec: Switch to your secondary tunnel prior to the maintenance window.
• Explicit proxy and proxy forwarding: Customers directing traffic to proxy.threatpulse.net will be automatically redirected by the service to the nearest alternate site during the maintenance window.
• Agent: no actions required.

Technical Support

Experiencing issues? Contact technical support by visiting here.

For service status and maintenance updates visit and subscribe to Broadcom Service Status.