Updating Legacy Proxy Domains and IP Address Ranges for PoPs and Backend Infrastructure
Skyhigh Security will retire legacy proxy domains used under Security Service Edge (SSE, formerly: Unified Cloud Edge, UCE, and Web Gateway Cloud Service, WGCS) and introduce IP address ranges for new Points of Presence (PoPs) and backend infrastructure to improve performance and user experience.
Review these changes in the tables provided below and make sure you update your proxy domains and IP address ranges in time.
The time schedule is as follows:
| Infrastructure items | Update to be completed by ... |
|---|---|
| Legacy proxy domains | December, 31, 2022 |
| IP address ranges for Points of Presence (PoPs) | November, 1, 2022 |
| IP address ranges for backend infrastructure | December, 1, 2022 |
The sections below include tables with information for updating these items.
Updating Legacy Proxy Domains
Skyhigh Security will retire the mcafee-cloud.com legacy proxy domains used under Security Service Edge (SSE) and replace them with the new skyhigh.cloud domain.
This will be completed on December, 31, 2022. Make sure you have updated the proxy domains you are using in your SSE products and policies by then.
The domain name syntax is as follows:
| Syntax | Remarks |
|---|---|
| <prefix>.c<customerID>.wgcs.skyhigh.cloud | |
| <prefix>.c<customerID>.hybrid.skyhigh.cloud | For WPS2 Hybrid customers using Skyhigh Client Proxy (SCP) |
| Examples | Remarks |
|---|---|
| uk.c12345678.wgcs.skyhigh.cloud | uk is the country prefix for the United Kingdom |
| uk.c12345678.hybrid.skyhigh.cloud | For WPS2 Hybrid customers using Skyhigh Client Proxy (SCP) with uk as the country prefix for the United Kingdom |
For more information about the Hybrid migration, see Migrate from WPS to WPS2 (ePO Managed MCP Agent and Policy).
For country and regional prefixes, see Configure Global Routing Manager Country and Region Prefixes.
Updating IP Address Ranges for Points of Presence (PoPs)
As part of an ongoing program to enlarge the infrastructure for Security Service Edge (SSE), additional Points of Presence (PoPs) will be provided in different regions. See Skyhigh Security Status.
This requires that you update the whitelisting for some IP address ranges in your firewall configuration, specifying the physical locations. These IP address ranges and locations are listed in a KB article, see Web Gateway Cloud Service (WGCS) IP Addresses and Ranges to Allow in Firewall
The introduction of the new Points of Presence (PoPs) will be completed on November, 1, 2022. Make sure you have updated the IP address ranges and locations in your firewall configuration by then.
New Points of Presence (PoPs) will be introduced as follows:
| Physical location | IP address range |
|---|---|
| Americas | 161.69.53.0/24 |
| Americas | 161.69.54.0/24 |
| Americas | 161.69.124.0/24 |
| Americas | 161.69.125.0/24 |
| Asia/Pacific | 161.69.55.0/24 |
| Asia/Pacific | 161.69.56.0/24 |
| Asia/Pacific | 161.69.127.0/24 |
| Europe | 161.69.52.0/24 |
| Africa | 161.69.126.0/24 |
Updating IP Address Ranges for the Backend Infrastructure
As part of an ongoing program, new backend infrastructure will be introduced for Security Service Edge. See Skyhigh Security Status.
This requires that you update the allowlisting for some IP address ranges in your firewall configuration, specifying the physical locations. These IP address ranges and locations are listed in a KB article, see Web Gateway Cloud Service (WGCS) IP Addresses and Ranges to Allow in Firewall
The introduction of new backend infrastructure will be completed on December, 1, 2022. Make sure you have updated the IP address ranges and locations in your firewall configuration by then.
New backend infrastructure will be introduced as follows:
| Physical location | IP address range | Domain name for reporting with country prefix and API name | Port | Purpose |
|---|---|---|---|---|
| US/Oregon | 161.69.8.0/24 | us.logapi.skyhigh.cloud | 443 | Hybrid Sync / Access Logs / |
| Canada | 161.69.9.0/24 | ca.logapi.skyhigh.cloud | 443 | Hybrid Sync / Access Logs / |
| UK/England | 161.69.11.0/24 | gb.logapi.skyhigh.cloud | 443 | Hybrid Sync / Access Logs / |
| EU/Germany | 161.69.12.0/24 | de.logapi.skyhigh.cloud | 443 | Hybrid Sync / Access Logs / |
| Singapore | 161.69.13.0/24 | sg.logapi.skyhigh.cloud | 443 | Hybrid Sync / Access Logs / |
| India | 161.69.14.0/24 | in.logapi.skyhigh.cloud | 443 | Hybrid Sync / Access Logs / |
| Middle East | 161.69.104.0/24 | ae.logapi.skyhigh.cloud | 443 | Hybrid Sync / Access Logs / |
More Information
For more information on related matters, see these KB articles:
-
Redesigned Web Gateway Cloud Service infrastructure changes: Web Gateway Cloud Service (WGCS) IP Addresses and Ranges to Allow in Firewall
-
Web Gateway Cloud Service Point of Presence (PoP) counter goes up and down: See Skyhigh Web Gateway Cloud Service Point of Presence (PoP) Counter
Support
If you have any questions about these updates, contact Skyhigh Support.