Symantec will decommission WSS POPs, GUSDM2 and GUSDM3, on April 15, 2022. These POPs were created in 2020 to facilitate easier migration from the deprecated colo-based data center network to the current Google Cloud network and are now redundant. Traffic from these POPs will be redirected to the remaining Des Moines POP, GUSDM1, which is hosted in the same Google Cloud region as the POPs being decommissioned. Therefore, this change will have no impact on routing or performance.
Carefully review the information below to avoid disruption of service. Decommission Date:
April 15, 2022Ingress IP addresses
• 188.8.131.52 - TO BE RETIRED APRIL 15, 2022
• 184.108.40.206 - TO BE RETIRED APRIL 15, 2022
• 220.127.116.11 - REPLACEMENT (existing GUSDM1 ingress IP address)Egress IP ranges
• 18.104.22.168/24 - TO BE RETIRED APRIL 15, 2022
• 22.214.171.124/24 - TO BE RETIRED APRIL 15, 2022
• 126.96.36.199/24 - REPLACEMENT (existing GUSDM1 egress IP range)
• 188.8.131.52/24 - REPLACEMENT (existing GUSDM1 egress IP range)Required Action
Prior to the decommission date:
• Firewall rules regulating connectivity to/from your network to WSS should be adjusted to allow traffic to pass to the replacement IP network listed above.
• Third party applications that regulate connections by source IP address should be updated to accept connections from the replacement egress IP networks listed above to ensure traffic proxied through WSS can reach the application.
Failure to make these changes could prevent users from connecting to WSS, accessing third party web applications, or authenticating against the service using the Auth Connector (where applicable).
• IPsec: Customers must update their tunnel configurations to point to the replacement ingress IP address before April 15, 2022. This change can be made immediately.
• WSS Agent, SEP Agent: Agent traffic will be automatically redirected to the replacement POP. No customer action is required.
• Explicit proxy and proxy forwarding: Customers directing traffic to proxy.threatpulse.net will be automatically redirected to the replacement POP. No customer action is required.
• Regardless of connection method, any configuration pointing to a specific POP hostname or IP address (not recommended) must be manually switched to the replacement POP prior to the decommissioning date to avoid an outage.
Please visit this KB article for a full list of IP networks used by WSS:https://knowledge.broadcom.com/external/article?legacyId=TECH242979Technical Support
Experiencing issues? Contact technical support by visiting: https://support.broadcom.com/security
For service status and maintenance updates visit and subscribe to Broadcom Service Status: https://wss.status.broadcom.com