Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

About Migrating from WPS to WPS2 and from WGCS to SWG Cloud

WPS and WGCS End of Life

Skyhigh Security announced the End of Life (EOL) for Web Protection Suite (WPS) and Web Gateway Cloud Service (WGCS) to happen on December 31, 2022.
The EOL process includes the following:

  • Migrate from Web Protection Suite (WPS) to Web Protection Suite 2 (WPS2)
  • Migrate from Web Gateway Cloud Service (WGCS) to Secure Web Gateway Cloud (SWG Cloud)

NOTE: If you have not received an email notification that your account has been migrated, contact Skyhigh Security Support. For information about some important procedures to use when dealing with support, see About Skyhigh Security Support.

If you do not complete the migration as outlined in this document, you will lose management access and functionalities such as the following:

  • Changing admin logons
  • Setting shared secrets for hybrid policy synchronization
  • Rolling out Skyhigh Client Proxy (SCP) versions
  • Updating the Skyhigh Client Proxy (SCP) policy, including shared secrets
  • Dashboard and report access

Use the information provided in this document to complete your migration once you have received an email notification from Skyhigh Security as a Final Migration Note.

Documentation about How to Complete the Migration

Depending upon which product you want to migrate, refer to one of the following two documentation pages (topics):

Current Product

New Product


Web Protection Suite (WPS) WPS2 Migrate from WPS to WPS2 (ePO-managed SCP Agent and Policy)
Web Gateway Cloud Service (WGCS) SWG Cloud Migrate from WGCS to SWG Cloud (ePO-Cloud-managed SCP Agent and Policy)

There is additional documentation about how to reconfigure IP authentication and IPSec tunnels, as well as SAML authentication:

All customers have received a new entitlement on Skyhigh Security Cloud for the new SKUs that are offered. If you have not received an email notification with details, contact Skyhigh Security Support



Q: We currently manage the Skyhigh Client Proxy (MCP) via one of the two legacy cloud platforms. How will we be able to manage MCP Policy and Agent Deployment?

A: WPS2 or Skyhigh SWG (MVW) do not contain any ePO as a service. Please reach out to your account manager or Support. 
Technically, You can manage MCP Policy using either Trellix On-Prem ePO, Trellix ePO, or Skyhigh Security Cloud. Client Proxy management and deployment can be done using either ePO on-premises or Trellix ePO, or a software distribution tool of your choice.

Q: We currently create Web Usage Reports through Cloud ePO (not Trellix ePO). What happens to those reports?

A. Historical data for the analytics will be available in Skyhigh Security Cloud and remain accessible through Content Security Reporter (CSR) on premises, or ePO Cloud, or the API directly for download. (Historical data will only be available through ePO cloud until the end of December.) Custom reports must be recreated using the reporting and analytics features within Skyhigh Security Cloud.

Q: Will I be able to manage my SWG policy from the cloud?

A. WPS2 is a replacement for customers running in hybrid mode. With that, Skyhigh Security Cloud will not provide an SWG policy or other features of the SSE platform. Policy management needs to happen from the appliances as previously done in a hybrid deployment. Skyhigh SWG does include both, the option to deploy in hybrid while keeping a cloud policy in parallel.


IMPORTANT: SAML on port 8084 is not supported with Security Service Edge Web Hybrid.

Video Walkthrough


  • Was this article helpful?