for Secure Web Gateway
2025 - 2026 Rolling updates
As part of the initiative to enhance network performance, scalability, and long-term service reliability, we have transitioned to a new IP address range for all Skyhigh Security Points of Presence (PoPs) and selected services. To avoid further disruption in service, we ask that all SSE Cloud Web Gateway customers review and update Firewall Allow Lists and IPSec/GRE Tunnel IP Addresses.
For more information on what’s changed, why it’s important, and details on the global rollout schedule, FAQs, communication methods, and more, please visit the /17 Global Implementation Documentation page.
Documentation>
Microsoft OneDrive and SharePoint DLP (NRT) Migration to Graph APIs
for CASB
As a follow-up to our initial communication, this is a reminder that we have begun the batch-wise migration of all existing Microsoft OneDrive and SharePoint DLP (Near Real-Time) instances to the new Skyhigh Splash NRT pipeline for Graph delta API integrations.
Timeline & Mandatory Action: Microsoft has announced the official deprecation of the SharePoint Add-In framework on April 2, 2026. To avoid any further disruption in DLP monitoring, it is essential to migrate your environment to the new Graph delta API framework ahead of the date.
Why this is critical:
- Support Cut-off: After April 2nd, the SharePoint Add-In Apps will no longer be supported by Microsoft.
- Security Risk: Skyhigh will be unable to provide Near Real-Time (NRT) DLP support for your OneDrive and SharePoint integrations if the migration to the Delta API is not completed.
- Deadline: You are required to confirm your migration window no later than March 2, 2026.
Next Steps: A representative of the Skyhigh team should have already reached out to you. You can also proactively contact your Skyhigh Representative or Skyhigh Support to get your migration scheduled immediately.
Completing the migration early will give your team sufficient time to validate the environment and ensure a seamless transition. Skyhigh encourages you to act promptly to safeguard your security posture. If your migration schedule has already been finalized, please disregard this notification. Documentation: For more details on the migration process and FAQs, see OneDrive and SharePoint Migration Documentation.
Singapore PoP Upgrade
As part of the ongoing initiative to enhance network performance and scalability, the Singapore region Web Gateway PoP will have an extended period of maintenance to enable the EOL of the existing PoP and to deploy a new PoP.
The maintenance window is scheduled 19 Apr 2026, 23:00 - 20 May 2026, 09:00 BST
Traffic will be rerouted within the region to temporary Singapore PoP instances, no customer action or impact is expected and protection remains fully functional.
Please refer to the EOL announcement EOL https://status.skyhighsecurity.com/posts/details/PVMV7UZ
This is to inform you of an essential upgrade to our Email DLP infrastructure within the Spop-sjc region. As part of our commitment to maintaining peak performance and robust security, these services are migrating to a newly optimized Point of Presence (PoP).
This upgrade is designed to provide your organization with enhanced processing speeds, greater scalability, and the latest security patches to protect your sensitive outbound communications.
What is changing and when?
Infrastructure Migration: We are transitioning all Email DLP traffic from our legacy environment to a high-performance architecture specifically tuned for modern inspection workloads.
Date : May 17th 9 AM to 2 PM IST
Decommissioning Date: To ensure a smooth transition, our legacy infrastructure in the Spop-sjc region will be officially decommissioned by June 2026.
Impact on New Instance Creation
While existing services will remain active, please be aware of the following temporary limitation during the maintenance window:
- New Instance Delay: If you create a new Email DLP or CSP instance during the maintenance window, DLP processing for that specific instance will be delayed.
- Duration: This processing delay for new instances will persist for the entire duration of the maintenance window. We recommend postponing the creation of new instances until the migration is complete to ensure immediate service activation.
What does this mean for you?
- Existing Instances: Migration will be handled seamlessly on our backend; no attention or configuration changes are required on your end.
- Performance: Once the migration is complete, you will benefit from improved latency and more robust inspection capabilities.
-
Action Required: None for current configurations. However, please avoid provisioning new DLP or CSP instances during the scheduled maintenance to avoid processing delays.
Scheduled Maintenance for Skyhigh Incident Management (NEW)
This notification is to inform you of upcoming scheduled maintenance for Skyhigh Incident Management Services. This maintenance is essential to ensure the continued security, reliability, and performance of our cloud environment.
Note: No data loss is anticipated as a result of this activity, and there will be no impact on active DLP controls or data protection processing. No customer action is required.
Maintenance Duration: Approximately 12 hours
Service Impact Summary
While DLP Processing will remain fully operational, the Incident Management UI will be inaccessible during the maintenance window. Please take note of the following specific service impacts:
- API Dependencies: All services dependent on the Incidents API, including the Incidents page, automated reports, and email notifications, will be unavailable.
- Scanning Operations: Any On-demand or Config-Audit scans in progress will be paused. These, along with any new queued scans, will resume automatically once maintenance concludes.
- Integrations: Connections to on-premises agents (e.g., Cloud Connector or Trellix ePO) will be suspended. Operations will resume with existing offsets retained once the window closes.
- Dashboard Metrics: Real-time updates for incident metrics will be suspended on the dashboard for the duration of the maintenance.
Maintenance Schedule
The maintenance will be conducted according to the following regional schedule:
- EUProd: 9th May between 2.30am UTC to 2.30pm UTC
- USProd: 23th May between 2.30am UTC to 2.30pm UTC
- GovCloud: June 6th between 2.30am UTC to 2.30pm UTC
Database Maintenance for Skyhigh DSPM Data Explorer (NEW)
Skyhigh Security will be performing essential maintenance on the DSPM Data Explorer as part of ongoing product enhancements.
During the maintenance window, the DSPM Data Explorer database will be taken offline. As a result:
- Data processing will be temporarily paused.
- Any events received during this time will be safely queued and processed once the database is back online.
- The DSPM Data Explorer user interface will be unavailable.
- All other DLP functionality, including the scanning and enforcement of DLP policies, will remain fully operational and unaffected.
To minimize customer impact, this maintenance has been scheduled during periods of low traffic.
Maintenance schedule (UTC):
- GovCloud: Thursday, May 14, 07:00–11:00
- EUProd: Saturday, May 23, 07:00–15:00
- USProd: Saturday, May 30, 07:00–19:00
We appreciate your understanding while we carry out this work to improve the service.