New WSS Point of Presence - Johannesburg (GZAJB1)

The scheduled maintenance has been completed.

Scheduled maintenance is currently in progress. We will provide updates as necessary.

Reminder

As communicated on April 16, 2021, JNB2 in Johannesburg, South Africa will be decommissioned on May 15, 2021 and replaced by GZAJB1. The IP addresses for JNB2 will be retired when it is decommissioned on May 15, 2021 and will no longer be used by WSS in any way.

Please carefully review the information here to avoid disruption of service.

Required Action

Customers with IPsec tunnels, or any other explicitly defined redirection method pointing to the JNB2 IP address, must update their configurations to point to GZAJB1 before May 15, 2021 to avoid loss of service. WSS Agent and SEP Agent users will be automatically redirected to the new POP without any required customer action.

Please also review:

• Firewall rules regulating connectivity to/from your network to WSS should be adjusted to allow traffic to pass to / from the new IP network. • Third party applications that regulate connections by source IP address should be updated to accept connections from the new egress IP network to ensure traffic proxied through WSS can reach the application.

Failure to make these changes could prevent users from connecting to WSS, accessing third party web applications, or authenticating against the service using the Auth Connector (where applicable).

The Symantec Web Security Service team is pleased to announce a new point-of-presence (POP) in Johannesburg, South Africa (GZAJB1), which will replace the existing datacenter (JNB2). JNB2 will be decommissioned on May 15, 2021

Please note that the new POP (GZAJB1) will use new IP addresses. The IP addresses for the existing site (JNB2) will be retired when it is decommissioned on May 15th and will no longer be used by WSS in any way. Please carefully review the information below to avoid disruption of service.

Designation: GZAJB1

General Availability Date: April 29, 2021

Ingress IP Addresses for all Access Methods: • 109.68.58.164 - NEW • 148.64.24.164 - TO BE DECOMMISSIONED MAY 15, 2021

Egress IP Addresses: • 109.68.58.0/24 - NEW • 148.64.24.0/24 - TO BE DECOMMISSIONED MAY 15, 2021

Required Action Prior to the general availability date:

• Firewall rules regulating connectivity to/from your network to WSS should be adjusted to allow traffic to pass to the new IP network listed above. • Third party applications that regulate connections by source IP address should be updated to accept connections from the new egress IP network listed above to ensure traffic proxied through WSS can reach the application.

Failure to make these changes could prevent users from connecting to WSS, accessing third party web applications, or authenticating against the service using the Auth Connector (where applicable).

• IPsec: Customers should update their tunnel configurations to point to the new ingress IP address for the new POP as soon as it is generally available. This must be done before the existing POP is decommissioned on May 15, 2021.

• WSS Agent, SEP Agent, and Unified Agent: Agent traffic will be automatically redirected to the new POP. No action is required.

• Explicit proxy and proxy forwarding: Customers directing traffic to proxy.threatpulse.net will be automatically redirected to the new POP. No action is required.

Please visit these KB articles for a full list of IP networks used by WSS:

Worldwide POP IP addresses: https://knowledge.broadcom.com/external/article?legacyId=TECH242979

Authentication IP addresses: https://knowledge.broadcom.com/external/article?legacyId=TECH240889

Reporting Problems Experiencing issues? Contact technical support by visiting: https://support.broadcom.com/security.

For service status and maintenance updates visit and subscribe to Broadcom Service Status: https://wss.status.broadcom.com.