What egress IP addresses does Cloud SWG / CASB / Symantec Endpoint Cloud log streaming feature use?

Products

• Cloud Secure Web Gateway - Cloud SWG
• CASB Gateway
• CASB Gateway Advanced
• Endpoint Protection Cloud

Issue/Introduction

Event streaming enables log streaming in cloud based buckets.

Cloud SWG / CASB / Cloud Endpoint protection admin have enabled Event Streaming into AWS S3 buckets, Azure Blob Storage and Google Cloud Storage.

Want to apply ACLs on this AWS / Azure / GCP service so that only requests from certain IP addresses are allowed.

There are fixed IP Address ranges that the Event Stream is publishing Access logs from, and one can limit the Bucket access from the(se) IP Address ranges.

 

Environment

Cloud SWG Log Streaming.

CASB Log Streaming.

Symantec Endpoint Cloud Streaming.

Resolution

Broadcom uses the following ranges in order to do updates and scaling.

All referenced IPs are owned by Broadcom. 

US - 144.49.132.0/24
EU - 144.49.140.0/26
APJ - 35.190.238.31, 34.146.14.98, 34.146.158.179, 34.84.72.200, 34.84.135.96, 34.146.229.53, 34.146.161.73, 34.146.5.160, 34.85.90.75, 34.84.118.5