Cloud SWG: Reminder of GAEDX Decommission
The maintenance is now complete. Thanks for your patience.
The scheduled maintenance is now underway. We'll keep you updated on our progress.
On November 11, 2024, the Localization Zone (LZ) for Dubai, UAE (GAEDX), has been relocated from Zurich to the new Cloud SWG compute-POP in Dammam, Saudi Arabia (GSADA).
This is a reminder that the decommission of GAEDX in Zurich is scheduled for December 09, 2024. The change will start at 15:00 UTC and will complete on December 09 at 21:00 UTC.
As announced on October 23, 2024, this upgrade requires some IP changes, please carefully review the information below to avoid disruption of service.
Ingress IP addresses
- 148.64.17.164 (GSADA) - TO BE USED for IPSEC connections after November 11, 2024
- 34.65.98.164 - TO BE RETIRED on December 09, 2024
Egress IP ranges
- 148.64.17.0/24 (GSADA) - EXISTING - PLEASE ENSURE THIS RANGE IS TRUSTED
- 199.19.254.192/28 (GAEDX) - NEW on November 11, 2024
- 34.65.98.0/24 - TO BE RETIRED on December 09, 2024
Required Action
Prior to the relocation date:
- Firewall rules regulating connectivity to/from your network to Cloud SWG should be adjusted to allow traffic to pass to the egress IP networks listed above
- For all locations in the UAE, make sure the location country in WSS Portal is UAE. For more information, please review this communication
- Third party applications that regulate connections by source IP address should be updated to accept connections from the egress IP networks listed above to ensure traffic proxied through Cloud SWG can reach the application
Failure to make these changes could prevent users from connecting to Cloud SWG, accessing third party web applications, or authenticating against the service using the Auth Connector (where applicable).
IPsec: Customers must update their tunnel configurations to point to the GSADA ingress IP address before December 09, 2024. This change can be made after November 11, 2024
WSS Agent, Symantec Enterprise Agent: Agent traffic will be automatically redirected to the replacement POP. No customer action is required
Explicit proxy and proxy forwarding: Customers directing traffic to proxy.threatpulse.net will be automatically redirected to the replacement POP. No customer action is required for the on-prem proxies or the client PAC files
Regardless of connection method, any configuration pointing to a specific POP hostname or IP address (not recommended) must be manually switched to the replacement POP prior to the decommissioning date to avoid an outage
Please visit this KB Article for a full list of IP networks used by Cloud SWG.
Technical Support
Experiencing issues? Contact technical support by visiting: https://support.broadcom.com/security.
For service status and maintenance updates visit and subscribe to Broadcom Service Status.
-
Cloud Secure Web Gateway
-
Point of Presence (POP) - Europe And The Middle East
- Dubai, UAE (GAEDX)
-
Point of Presence (POP) - Europe And The Middle East
Find Your Subscription
We’ll find your subscription and send you a link to login to manage your preferences.
Check Your Inbox
We’ve found your existing subscription and have emailed you a secure link to manage your preferences.
Subscribe to Status Updates
We’ll use your email to save your preferences so you can update them later.
-
Email{{ value }}
-
Text Message{{ value }}
-
Slack
-
Microsoft Teams{{ value }}
-
Google Chat
Subscribe to other services using the bell icon on the subscribe button on the status page.
Unsubscribe Completely?
You’ll no long receive any status updates from Broadcom Service Status, are you sure?
{{ error }}
You’re Unsubscribed!
We’ll no longer send you any status updates about Broadcom Service Status.