Web Security Service egress IP addresses for APAC

book

Article ID: 168148

calendar_today

Updated On:

Products

Web Security Service - WSS

Issue/Introduction

Protected traffic is tunneled through the Symantec Web Security Service (WSS).
The egress IP address that is seen by web servers is no longer the egress IP address of my own network.
How do vendors know what IP address our traffic is coming from?

Resolution

Here is a list of the egress IP addresses for the following locations as of March 5, 2019.  

(NOTE:  If egress IP addresses are used for identification or security, or a vendor requires an IP address for security, remember that any customer that uses the Web Security Service (WSS) can use the same egress IP address as your traffic. If IP addresses are used as a security measure, please consider bypassing of the WSS service when visiting those secure sites.)

Link to egress IP addresses for Americas
Link to egress IP addresses for EMEA

APAC

IP address range** IP subnet Start End
148.64.0.0/21** 148.64.0.0/21 148.64.0.1 148.64.7.254

 

Data Center Egress IP Address Subnet(s) Start End
Auckland, New Zealand (GNZAU) 168.149.170.0/24 168.149.170.1 168.149.170.254
Beijing, China (PEK1) 119.161.180.0/23 119.161.180.1 119.161.181.254
Chennai, India (GINCH)

148.64.6.0/24
148.64.7.0/24
34.93.96.0/24
34.93.163.0/24
34.87.172.0/24
34.93.99.0/24
34.93.130.0/24

148.64.6.1
148.64.7.1
34.93.96.1
34.93.163.1
34.87.172.1
34.93.99.1
34.93.130.1

148.64.6.254
148.64.7.254
34.93.96.254
34.93.163.254
34.87.172.254
34.93.99.254
34.93.130.254

Hong Kong (GCNHK) 103.246.38.0/24 103.246.38.1 103.246.38.254
Mumbai, India (GINMU)

148.64.4.0/24
148.64.5.0/24
34.93.162.0/24
34.93.66.0/24
34.93.160.0/24
34.93.226.0/24

148.64.4.1
148.64.5.1
34.93.162.1
34.93.66.1
34.93.160.1
34.93.226.1

148.64.4.254
148.64.5.254
34.93.162.254
34.93.66.254
34.93.160.254
34.93.226.254

Osaka, Japan (GJPOS) 98.158.245.0/24
98.158.246.0/23
98.158.245.1
98.158.246.1
98.158.245.254
98.158.247.254
Seoul, South Korea (GKRSE)  168.149.154.0/24 168.149.154.1 168.149.154.254
Shanghai, China (SHA1) 222.126.180.0/23 222.126.180.1 222.126.181.254
Singapore (GSGRS) 103.246.37.0/24
148.64.3.0/24
103.246.37.1
148.64.3.1
103.246.37.254
148.64.3.254
Sydney, Australia (GAUSY) 103.246.36.0/24
170.176.245.0/24
148.64.2.0/24
103.246.36.1
170.176.245.1
148.64.2.1
103.246.36.254
170.176.245.254
148.64.2.254
Taipei, Taiwan (GTWTA)  168.149.155.0/24 168.149.155.1 168.149.155.254

Tokyo, Japan (GJPTK)

223.29.216.0/22
170.176.244.0/24

223.29.216.1
170.176.244.1

223.29.219.254
170.176.244.254

Wellington, New Zealand (GNZWL) 168.149.171.0/24 168.149.171.1 168.149.171.254

 

Web Isolation - Amazon Web Services

  • Amazon Web Services will be decommissioned on March 1, 2021 after migration to Google Cloud Platform is complete.
  • Web Isolation infrastructure is deployed globally.
  • Customer Web Isolation traffic will be sent to a regional location based on latency and locations
  • Traffic in Asia Pacific from Web Isolation will egress using the following egress IPs:

 

Region IPs
Asia Pacific (Singapore) 13.251.86.255
13.251.66.137
Asia Pacific (Tokyo) 52.194.113.172
52.194.100.64
Asia Pacific (Sydney) 3.105.109.92
3.105.197.139

Web Isolation - Google Cloud Platform

  • Migration to Google Cloud Platform (GCP) begins in November 2020. Maintenance notifications will be posted on the Web Security Status page and on the Web Isolation Status page
  • Customer Web Isolation traffic will be sent to a regional location based on latency and locations
  • Traffic in Asia Pacific from Web Isolation will egress using the following egress IP ranges:
Region IP Range
Asia Pacific (Hong Kong) 34.96.224.96/27
Asia Pacific (Mumbai) 34.93.178.192/26
Asia Pacific (Seoul) 34.64.150.64/27
Aisa Pacific (Singapore) 34.87.130.0/24
Asia Pacific (Sydney) 34.87.246.64/27
Asia Pacific (Tokyo) 34.84.38.0/25

 

*Please see https://wss.status.broadcom.com for further details.
**Symantec owns this IP address space and can be allocated to any data center globally at any time, as needed.
***This egress IP is not on production yet.