Cloud SWG: General Product Maintenance April 30, 2026 [ACTION REQUIRED]

Broadcom will perform scheduled maintenance on the Cloud SWG Service in Portland (GUSPO). All services will remain operational throughout the maintenance window; however, a behavior change might occur with PBR and Dedicated IPs policies. Review the Behavior Changes section below to ensure continued service and to avoid potential disruption.

Timing

The Maintenance work will occur on April 30, 2026 between 18:00 and 06:00 local data center time.

Impact

During this maintenance event, all services will remain operational and available. The following describes what happens to connected clients, depending on the access method used. No action is required.

• Explicit Proxy / WSS Agent / Endpoint Security Agent / Proxy Forwarding: Connections are automatically rerouted to active data pods within the same datacenter (site) or region.
• IPSec: A brief failover delay might occur while the load balancer switches traffic to another active data pod.

Behavior Changes

If you are using PBR, Dedicated IPs and CASB Copilot, be aware that this maintenance introduces two changes to how traffic is handled when multiple rules match the same connection.

• Change 1: PBR and CASB WebSocket

Before: If both a Policy-Based Routing (PBR) rule with Shared IPs and a CASB WebSocket rule matched, and PBR decided to egress traffic locally, the traffic bypassed PBR entirely. CASB WebSocket processing was also skipped.

After: Traffic now follows this logic: Non-local egress decision: Traffic is forwarded through PBR as normal. Local egress decision: Traffic is forwarded to the nearest PBR site instead of egressing locally. This change might affect in-country egress behavior in some configurations.

To revert to the previous behavior, please contact Broadcom Technical Support at https://support.broadcom.com/security

• Change 2: Dedicated IPs and CASB WebSocket

Before: If both a Dedicated IPs rule and a CASB WebSocket rule matched, traffic was routed through Dedicated IPs. CASB WebSocket processing was skipped.

After: CASB WebSocket processing takes priority. Dedicated IP policy is not enforced for those matching domains.

To revert to the previous behavior, please contact Broadcom Technical Support at https://support.broadcom.com/security

Technical Support

Having issues? Reach Broadcom Technical Support at: https://support.broadcom.com/security

For live service status and maintenance updates, subscribe to Broadcom Service Status: https://status.broadcom.com/services/cloud-secure-web-gateway