Protected traffic is tunneled through the Symantec Web Security Service (WSS).
The egress IP address that is seen by web servers is no longer the egress IP address of my own network.
How do vendors know what IP address our traffic is coming from?
Here is a list of the egress IP addresses for the following locations as of March 5, 2019.
(NOTE: If egress IP addresses are used for identification or security, or a vendor requires an IP address for security, remember that any customer that uses the Web Security Service (WSS) can use the same egress IP address as your traffic. If IP addresses are used as a security measure, please consider bypassing of the WSS service when visiting those secure sites.)
Link to egress IP addresses for Americas
Link to egress IP addresses for EMEA
|IP address range**||IP subnet||Start||End|
|Data Center||Egress IP Address Subnet(s)||Start||End|
|Auckland, New Zealand (GNZAU)||126.96.36.199/24||188.8.131.52||184.108.40.206|
|Beijing, China (PEK1)||220.127.116.11/23||18.104.22.168||22.214.171.124|
|Chennai, India (GINCH)||
|Hong Kong (GCNHK)||126.96.36.199/24||188.8.131.52||184.108.40.206|
|Mumbai, India (GINMU)||
|Osaka, Japan (GJPOS)||220.127.116.11/24
|Seoul, South Korea (GKRSE)||18.104.22.168/24||22.214.171.124||126.96.36.199|
|Shanghai, China (SHA1)||188.8.131.52/23||184.108.40.206||220.127.116.11|
|Sydney, Australia (GAUSY)||18.104.22.168/24
|Taipei, Taiwan (GTWTA)||22.214.171.124/24||126.96.36.199||188.8.131.52|
Tokyo, Japan (GJPTK)
|Wellington, New Zealand (GNZWL)||184.108.40.206/24||220.127.116.11||18.104.22.168|
• Web Isolation infrastructure is deployed globally.
• Customer Web Isolation traffic will be sent to a regional location based on latency and location
• Traffic in Asia Pacific from Web Isolation will egress using the following egress IPs:
|Asia Pacific (Singapore)||22.214.171.124
|Asia Pacific (Tokyo)||126.96.36.199
|Asia Pacific (Sydney)||188.8.131.52
*Please see https://wss.status.broadcom.com for further details.
**Symantec owns this IP address space and can be allocated to any data center globally at any time, as needed.
***This egress IP is not on production yet.