End of Life of VeloCloud SASE Secured by Symantec

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

VeloCloud devices (from Arista) used to send internet traffic into Cloud SWG via IPSEC access method.

Arista has indicated that their 'VeloCloud SASE secured by Symantec' SKUs are no longer for sale.

This setup integrated the Arista POP communication with Cloud SWG POPs for improved performance and security.

In the same communication, Arista indicated that support will continue until June 30, 2026.

"Effective July 1st, 2025, customers will no longer be able to order VeloCloud SASE secured by Symantec SKUs. Customers will continue to receive support from Arista TAC (Technical Assistance Center) for VeloCloud SASE secured by Symantec until June 30th, 2026."

What can a VeloCloud admin do to continue sending traffic into the Cloud SWG service, so that network protection continues?

Environment

VeloCloud.

Arista.

Cloud SWG.

IPSEC tunnels.

Cause

End of life of the 'VeloCloud SASE secured by Symantec' license.

Resolution

It is imperative that the Cloud SWG tenants move off the "PoP-to-PoP" configuration asap and configure standard IPSEC tunnels into Cloud SWG to avoid impact to users. Please work with Arista if any assistance is needed configuring the IPSEC firewall into Cloud SWG"

Additional Information

To determine whether the POP-to-POP integration is enabled, check out out the 'Integration type' in the SSE integration tab as shown below: