Cloud SWG: General Product Maintenance Zurich, Switzerland (GCHZU), & Copenhagen, Denmark (GDKCP) February 05 - 07, 2025

Update

Please be advised that the date/time for this maintenance has been changed. The impact however remains unchanged. Here is the updated schedule:

Updated Schedule

• Start time: February 05, 2025, at 18:00 UTC
• End time: February 07, 2025, at 00:00 UTC

Broadcom will perform general maintenance to the Cloud SWG data centers in Zurich, Switzerland (GCHZU) and Copenhagen, Denmark (GDKCP) on February 05, 2025, starting at 18:00 UTC and completing on February 06, 2025 at 23:00 UTC. This maintenance includes the addition of IPv6 egress addresses to the sites. Please refer to the details below for location-specific information.

Ingress IP Address:

• Zurich, Switzerland (GCHZU) : 148.64.11.164 - NO CHANGE
• Copenhagen, Denmark (GDKCP) : 148.64.14.164 - NO CHANGE

Egress IP Addresses:

• Zurich, Switzerland (GCHZU) :

  • 148.64.11/24 - NO CHANGE
  • 2604:b040:0013:1300:0002:0000:0000:0000/80 - NEW on February 05, 2025

• Copenhagen, Denmark (GDKCP) :

  • 148.64.14.0/24 - NO CHANGE
  • 2604:b040:0013:1200:0000:0000:0000:0000/80 - NEW on February 06, 2025

Impact

Expect the site to be completely unavailable during the maintenance window.

Following this maintenance, the new IPv6 addresses will be available to Cloud SWG proxies to communicate with content providers when the following conditions are true:

• The content provider serves content over IPv6 ONLY (not IPv4/IPv6 dual stack)
• The content is accessed by the client via explicit proxy using the hostname (not IPv6 address)

Please note: Cloud SWG prefers IPv4 when it encounters dual-stack (IPv4 and IPv6) content sources. Broader IPv6 capabilities will be introduced in future releases.

IP address maintenance will be performed as part of this maintenance. If you have restrictive access policies based on our network ranges and you will access IPv6-only contents, you should update your access policies to include the new IPv6 egress ranges. Please review our best practices and published network ranges in this article.

Timing

• Zurich, Switzerland (GCHZU) : February 05, 2025 18:00 UTC - February 06, 2025 00:00 UTC
• Copenhagen, Denmark (GDKCP) : February 06, 2025 18:00 UTC - February 07, 2025 00:00 UTC

Required Action

Prior to the maintenance date:

• Firewall rules regulating connectivity to/from your network to Cloud SWG should be adjusted to allow traffic to pass to the NEW IP networks listed above
• Third party applications that regulate connections by source IP address should be updated to accept connections from the IP networks listed above to ensure traffic proxied through Cloud SWG can reach the applications
• Auth Connector must be able to communicate with the egress range listed above on TCP 443, where applicable

Failure to make these changes could prevent users from connecting to Cloud SWG, accessing third party web applications, or authenticating against the service using the Auth Connector (where applicable).

• IPsec: Switch to your secondary tunnel prior to the maintenance window.
• Explicit proxy and proxy forwarding: Customers directing traffic to proxy.threatpulse.net will be automatically redirected by the service to the nearest alternate site during the maintenance window.
• Agent: no actions required.

Technical Support

Experiencing issues? Contact technical support by visiting: https://support.broadcom.com/security.

For service status and maintenance updates visit and subscribe to Broadcom Service Status.