General Product Maintenance: Dammam (GSADA), Doha (GQADO), Dubai (GAEDX) March 10, 2026

Broadcom will perform general maintenance to the Cloud SWG POP in Dammam (GSADA) and Localization Zones* Doha (GQADO) and Dubai (GAEDX) on March 10, 2026 at 17:00 UTC and complete on March 10,2026 at 22:00 UTC. This maintenance provisions additional ingress addresses to the site. Carefully review the information below to avoid disruption of service.

Impact

Expect the sites to be available during the maintenance window. IP addresses will be changed with this maintenance.

Ingress IP Addresses:

• Dammam (GSADA):

  • 109.68.63.0/24 - NEW March 9, 2026
  • 109.68.63.164 - NEW March 9, 2026 FOR IPSEC TUNNELS
  • 148.64.17.0/24 - TO BE RETIRED on April 9, 2026
  • 34.166.201.32/28 - NO CHANGE

• Doha (GQADO):

  • Same as for Dammam

• Dubai (GAEDX):

  • Same as for Dammam

Egress IP Addresses:

• Dammam (GSADA):

  • 109.68.63.0/24 - NEW March 9,2026
  • 148.64.17.0/24 - TO BE RETIRED on April 9, 2026
  • 2604:b040:13:1600::/80 - NO CHANGE

• Doha (GQADO):

  • 148.64.14.0/28 - NEW March 9,2026
  • 199.19.254.144/28 - TO BE RETIRED on April 9, 2026
  • 2604:b040:13:1600::/80 - NO CHANGE

• Dubai (GAEDX):

  • 148.64.14.16/28 - NEW March 9,2026
  • 199.19.254.192/28 - TO BE RETIRED on April 9, 2026
  • 2604:b040:13:1600::/80 - NO CHANGE

Required Action by Connection Method prior to March 10, 2026

• Firewall rules regulating connectivity to/from your network to Cloud SWG should be adjusted to allow traffic to pass to the NEW IP network listed above.
• Third party applications that regulate connections by source IP address should be updated to accept connections from the NEW egress IP networks listed above to ensure traffic proxied through Cloud SWG can reach the application.
• Auth Connector must be able to communicate with all egress ranges listed above on TCP 443, where applicable.

Failure to make these changes could prevent users from connecting to Cloud SWG, accessing third party web applications, or authenticating against the service using the Auth Connector (where applicable).

• IPsec: Customers must update their tunnel configurations to point to the NEW ingress IP address before April 9, 2026. This change can be made after March 10, 2026.
• WSS Agent, SEP Agent: Agent traffic will be automatically redirected to the new POP. No customer action is required.
• Explicit proxy and proxy forwarding: Customers directing traffic to proxy.threatpulse.net will be automatically redirected to the new POP. No customer action is required.
• Regardless of the connection method, any configuration pointing to a specific POP hostname or IP address (not recommended) must be manually switched to the new POP prior to the decommissioning date to avoid an outage.

What are Localization Zones?

Localization Zones allow Cloud SWG to request web content using IP addresses that match the country of the end user, even when there is no Cloud SWG point of presence (POP) in the end user’s country. This enables content to be properly localized resulting in a better end user experience. Please note that content providers, not Symantec, choose whether or not to localize their content and what localizations they support.

Please visit this KB article for a full list of IP networks used by Cloud SWG: https://knowledge.broadcom.com/external/article?legacyId=TECH242979

Technical Support

Experiencing issues? Contact technical support by visiting: https://support.broadcom.com/security.

For service status and maintenance updates visit and subscribe to Broadcom Service Status: https://status.broadcom.com.