Skip to main content
Skyhigh Security

Updating Legacy Proxy Domains and IP Address Ranges for PoPs and Backend Infrastructure

Skyhigh Security will retire legacy proxy domains used under Security Service Edge (SSE, formerly: Unified Cloud Edge, UCE, and Web Gateway Cloud Service, WGCS) and introduce IP address ranges for new Points of Presence (PoPs) and backend infrastructure to improve performance and user experience.

Review these changes in the tables provided below and make sure you update your proxy domains and IP address ranges in time.

The time schedule is as follows:

Infrastructure items Update to be completed by ...
Legacy proxy domains December, 31, 2022
IP address ranges for Points of Presence (PoPs) November, 1, 2022
IP address ranges for backend infrastructure December, 1, 2022

The sections below include tables with information for updating these items.
 

Updating Legacy Proxy Domains

Skyhigh Security will retire the mcafee-cloud.com legacy proxy domains used under Security Service Edge (SSE) and replace them with the new skyhigh.cloud domain.

This will be completed on December, 31, 2022. Make sure you have updated the proxy domains you are using in your SSE products and policies by then.

The domain name syntax is as follows:

Syntax Remarks
<prefix>.c<customerID>.wgcs.skyhigh.cloud  
<prefix>.c<customerID>.hybrid.skyhigh.cloud For WPS2 Hybrid customers using Skyhigh Client Proxy (SCP)
saml.wgcs.skyhigh.cloud the new hostname for SAML authentication for the ACS url to be configured in the IDP. E.g. as https://saml.wgcs.skyhigh.cloud/saml

 

Examples Remarks
uk.c12345678.wgcs.skyhigh.cloud uk is the country prefix for the United Kingdom
uk.c12345678.hybrid.skyhigh.cloud For WPS2 Hybrid customers using Skyhigh Client Proxy (SCP) with uk as the country prefix for the United Kingdom

For more information about the Hybrid migration, see Migrate from WPS to WPS2 (ePO Managed MCP Agent and Policy)

For country and regional prefixes, see https://kcm.trellix.com/corporate/index?page=content&id=KB87631.
 

Updating IP Address Ranges for Points of Presence (PoPs)

As part of an ongoing program to enlarge the infrastructure for Security Service Edge (SSE), additional Points of Presence (PoPs) will be provided in different regions. See Skyhigh Security Status

This requires that you update the whitelisting for some IP address ranges in your firewall configuration, specifying the physical locations. These IP address ranges and locations are listed in a KB article, see https://kcm.trellix.com/corporate/index?page=content&id=KB87232

The introduction of the new Points of Presence (PoPs) will be completed on November, 1, 2022. Make sure you have updated the IP address ranges and locations in your firewall configuration by then.

New Points of Presence (PoPs) will be introduced as follows:

Physical location IP address range
Americas 161.69.53.0/24
Americas 161.69.54.0/24
Americas 161.69.124.0/24
Americas  161.69.125.0/24
Asia/Pacific 161.69.55.0/24
Asia/Pacific 161.69.56.0/24
Asia/Pacific 161.69.127.0/24
Europe 161.69.52.0/24
Africa 161.69.126.0/24

 

Updating IP Address Ranges for the Backend Infrastructure

As part of an ongoing program, new backend infrastructure will be introduced for Security Service Edge. See Skyhigh Security Status.

This requires that you update the allowlisting for some IP address ranges in your firewall configuration, specifying the physical locations. These IP address ranges and locations are listed in a KB article, see https://kcm.trellix.com/corporate/index?page=content&id=KB87232.

The introduction of new backend infrastructure will be completed on December, 1, 2022. Make sure you have updated the IP address ranges and locations in your firewall configuration by then.

New backend infrastructure will be introduced as follows:

Physical location IP address range Domain name for reporting with country prefix and API name Port Purpose
US/Oregon 161.69.8.0/24 us.logapi.skyhigh.cloud 443 Hybrid Sync / Access Logs /
Canada 161.69.9.0/24 ca.logapi.skyhigh.cloud 443 Hybrid Sync / Access Logs /
UK/England 161.69.11.0/24 gb.logapi.skyhigh.cloud 443 Hybrid Sync / Access Logs /
EU/Germany 161.69.12.0/24 de.logapi.skyhigh.cloud 443 Hybrid Sync / Access Logs /
Singapore 161.69.13.0/24 sg.logapi.skyhigh.cloud 443 Hybrid Sync / Access Logs /
India 161.69.14.0/24 in.logapi.skyhigh.cloud 443 Hybrid Sync / Access Logs /
Middle East 161.69.104.0/24 ae.logapi.skyhigh.cloud 443 Hybrid Sync / Access Logs /

More Information

For more information on related matters, see these KB articles:

Support

If you have any questions about these updates, contact Skyhigh Support

  • Was this article helpful?