Cloud SWG vPoP IP addresses
Forcepoint ONE SSE supports Virtual Points of Presence (also known as vPoP) to improve content localization for Cloud SWG customers, using Transparent Proxy (GRE Tunnel and IPsec Tunnel) and Explicit Proxy, without the need of updating firewall rules.
When the Cloud SWG end-user access websites, those websites localize traffic to the country of the Cloud SWG datacenter and not the country where the end-user is located. Forcepoint’s vPoPs will solve this localization issue using patent-pending technology to emulate localization for 110 countries worldwide. Examples of localization of web traffic would include local language, currency, news, weather, and so on.
While creating Sites for transparent proxy or explicit proxy in Forcepoint ONE SSE, you should follow either of following to localize web traffic to the source customer location:
- Select the Identity Location to Automatic, then web content will be localized based on the location of the entered Site IP address.
- If Forcepoint ONE SSE is unable to identify the correct location or did not display the location of the entered Site IP address, then set the Identify
Coordinates to Manual and then select the applicable Localization Country to which your web content should be localized.Note: If the selected localization country is not available, the country of the Cloud SWG datacenter processing the traffic will be used instead.
To know how to create Sites, refer to:
- IPsec and GRE Tunnel - Creating sites with transparent proxy
- Explicit Proxy - Creating sites with explicit proxy
The following ranges will be used as egress IPs (seen by the origin website) to localize traffic in the corresponding AWS regions:
| Address Range | AWS Region | Geographic Theater |
|---|---|---|
| 157.167.224.0/24 | us-east-1 (Virginia) | Americas |
| 157.167.225.0/24 | us-east-2 (Ohio) | |
| 157.167.227.0/24 | us-west-2 (Oregon) | |
| 157.167.234.0/24 | sa-east-1 (Sao Paulo) | |
| 157.167.232.0/24 | ap-southeast-1 (Singapore) | APAC |
| 157.167.233.0/24 | ap-southeast-2 (Sydney) | |
| 157.167.235.0/24 | ap-northeast-1 (Tokyo) | |
| 157.167.236.0/24 | ap-south-1 (Mumbai) | |
| 157.167.228.0/24 | eu-west-1 (Dublin) | EMEA |
| 157.167.229.0/24 | eu-west-2 (London) | |
| 157.167.230.0/24 | eu-central-1 (Frankfurt) | |
| 157.167.237.0/24 | eu-north-1 (Stockholm) | |
| 157.167.238.0/24 | eu-south-2 (Spain) | |
| 157.167.239.0/24 | eu-west-3 (Paris) | |
| 157.167.240.0/24 | me-central-1 (UAE) |
The localized countries/VPoPs are listed in the sections below. Each AWS Region supports all of the VPoPs in the corresponding Geographic Theater. All AWS Regions support VPoPs for India, United Kingdom, and the United States.
For example:
- The Hong Kong VPoP can be accessed in every AWS Region in APAC
- The Belgium VPoP can be accessed in every AWS Region in EMEA
- The United States VPoP can be accessed in all AWS Regions globally