Extended FQDN migration from McAfee to Skyhigh for SCP

Last updated
Save as PDF

Overview

This is with regards to the usage of McAfee FQDNs as part of Skyhigh Client Proxy (SCP) Policies.

By September 30, 2024, the old McAfee FQDN (mcafee-cloud.com) existing in your Skyhigh Client Proxy policies will go offline.

This change might result in the end-user client connectivity issues. Hence, if you are using the Skyhigh Client Proxy (SCP) product & fall under any of the below mentioned categories, we strongly urge you to replace the McAfee FQDNs with Skyhigh FQDNs that are part of the policies at the earliest.

Below is the list of scenarios & the corresponding action items for customers against each.

Scenario 1

Client Management: Trellix ePO
Policy Management: Trellix ePO
Skyhigh Client Proxy Version: Any
Condition: If the customer is using SSE Cloud Proxy with mcafee-cloud.com domain
Action Items for Customers: Customer needs to:
- Check the SCP policy in SSE (“Settings > Infrastructure > Client Proxy Management > Gateway List") and update the gateway hostname to wgcs.skyhigh.cloud domain from wgcs.mcafee-cloud.com in the SCP policy
- Ensure all affected clients are updated with this policy using SCP Status or About Window.

Scenario 2

Client Management: Trellix ePO / MDM Solutions
Policy Management: SSE
Skyhigh Client Proxy Version: < 4.5.2 (Customer is running an SCP version which is older than version 4.5.2)
Condition: Any
Action Items for Customers: Customers need to:
- Upgrade all affected clients to SCP 4.5.2 or later (recommended version - SCP 4.8.1 or later).
- also, see condition and action for clients running 4.5.2 or later below to check if there's further impact.

Scenario 3

Client Management: Trellix ePO / MDM Solutions
Policy Management: SSE
Skyhigh Client Proxy Version: >= 4.5.2 (Customer is running an SCP version which is either 4.5.2 or newer)
Condition: If SCP Status or About window shows mcafee-cloud.com domain OR If SCP clients are running version of SCP policy from SSE older than May '23
Action Items for Customers: Customers need to:
- Check SCP policy in SSE to ensure Gateway Hostname for SSE Cloud proxy configured under
  
  “Settings > Infrastructure > Client Proxy Management > Gateway List" in SCP policy shows wgcs.skyhigh.cloud domain instead of wgcs.mcafee-cloud.com
- Publish the SCP policy as a new version and ensure affected clients are updated with the latest policy.
- Verify clients are updated using "SCP Status" or "About Window"