Updates to Critical WebPulse Service Endpoint

book

Article ID: 188494

calendar_today

Updated On:

Products

WebPulse Intelligence Services WebFilter

Issue/Introduction

On April 24th, 2020 at 0:00 UTC, all WebPulse Services will be migrating from Symantec/NortonLifelock hosted infrastructure to Broadcom infrastructure. While many service endpoints will remain the same, there will be many new service endpoints added and several others retired. While these infrastructure changes are expected to have minimal customer impact it is advised to work with your respective network/IT teams to accommodate these changes.

Cause

Impact Start Date:

  • April 24th, 2020 at 0:00 UTC


Impact:

  • Networks that rely on white-listing WebPulse service endpoints may experience interruption to database downloads, dynamic real-time ratings, pattern updates, and other WebPulse related services


Impacted WebPulse Products:

  • Symantec Intelligence Services (Formerly known as Blue Coat Intelligence Services “BCIS”)
  • Symantec WebFilter (Formerly known as Blue Coat WebFilter “BCWF”)
  • File Reputation Service “FRS”

Resolution

Recommended Action:

  • Ensure that your network/IT systems allow for the service endpoints listed under “New and Existing Service Endpoints”
  • While it will not impact service, it is recommended that any service endpoints listed under “Retiring Service Endpoints” are removed from your network/IT white-list


New and Existing Service Endpoints

NPP Service Host  Broadcom IP address (new)  Status

Various Services

35.245.3.224/27

35.227.139.224/27

34.76.82.64/28

34.87.94.80/28

168.149.132.0/24

New

WebPulse

3.9.152.5

3.9.209.230

3.9.230.10

18.144.141.120

52.8.155.230

54.153.2.235

New

File Reputation Service

52.211.169.197

3.137.67.240

3.21.85.55

52.76.10.94

New

File Reputation Service

34.240.126.133

Existing

WebPulse

18.195.189.47

3.121.119.187

197.96.129.181

197.96.129.182

3.18.147.17

3.0.75.107

54.233.145.171

54.207.85.173

52.64.80.74

13.54.6.129

13.114.129.165

13.114.137.119

35.157.189.75

197.96.129.185

52.15.201.165

3.0.107.1

54.207.87.150

52.65.118.140

54.64.46.133

Existing

Retiring Service Endpoints:

NPP Service

Retired IP

ProxyAV Updates


46.235.158.208

8.28.16.208

199.116.169.248

199.247.40.247

103.246.38.208

199.19.249.208

BCWF


8.28.16.206

199.116.173.206

46.235.158.206

185.2.196.206

199.19.249.206

103.246.38.206

199.247.40.246

199.247.43.246

199.116.169.246

CDA

8.28.16.235

File Reputation Service

199.19.249.205

103.246.38.204

8.28.16.233

185.2.196.204

199.116.169.233

Intelligence Services

46.235.158.204

8.28.16.243

199.247.40.244

199.247.43.244

199.116.169.243

Security Labs

8.28.16.7

WebPulse


199.116.173.201

199.116.173.203

46.235.158.201

46.235.158.203

148.64.5.249

148.64.5.250

199.19.249.201

199.19.249.203

199.116.173.215

46.235.158.215

148.64.5.253

199.19.249.211

199.116.169.244

103.246.38.201

103.246.38.203

103.246.38.202

180.179.142.109

180.179.142.110

180.179.142.115

8.28.16.201

8.28.16.203

185.2.196.201

185.2.196.203

199.116.169.245

8.28.16.202

185.2.196.215

199.116.169.242

Malware Analysis


8.28.16.239

199.116.169.239

8.28.16.237

199.116.169.237