Description

Dear IBM Planning Analytics Customers, We are announcing the deprecation of our Dedicated Secure Gateway services in Amsterdam and Washington by **September 30th, 2023** Over the next few months, we will be transitioning customers still using the dedicated Secure Gateway instances globally, to our IBM Cloud Public Secure Gateway service. This is required to continue to provide you secure data transfer between your local site on your cloud-based Planning Analytics service. **Duration**: The process will take approximately 2 hours to complete. **Impact**: Secure Gateway connections configured to use the Dedicated Secure Gateway service will be interrupted, and Planning Analytics Administration will be briefly unavailable when we restart the related service. Customers based out of Singapore or Sydney are unaffected. Please see 'first steps' below to identify if you are still using the Dedicated Secure Gateway service. **To initiate the process we will be engaging Subscription Administrators via IBM Support to aid us in this transition** and ensure a seamless migration to the public service. If you have active Dedicated Secure Gateway connections some action(s) will be required to enable new endpoints for your service. This is detailed in the sections below (First Steps, Before and Following the Migration: Customer actions). We will be migrating customers to the public service that best serves their region and Planning Analytics on Cloud environment location: - US-East (Washington) - US-South (Dallas/San Jose) - Europe (Frankfurt/Amsterdam) ===First Steps=== **You may identify if you are using the Dedicated Secure Gateway service and determine which region impacts you by visiting the Secure Gateway tab in Planning Analytics Administration.** Edit active connection Data Source properties to note affected 'Cloud host' addresses and match to the following list of endpoints that will be deprecated: **Affected Dedicated Secure Gateway Endpoints** North American Customers - (WDC ) sg-wdc-01.integration.ibmcloud.com (50.22.254.131) - (WDC) sg-wdc-02.integration.ibmcloud.com (50.22.254.135) - (WDC) sgmanagertm1.integration.ibmcloud.com (158.85.15.77, 198.11.253.116) European Customers - (AMS ) tm1-eu-sg-01.integration.ibmcloud.com (169.50.176.77) - (AMS) tm1-eu-sg-02.integration.ibmcloud.com (169.50.176.78) - (AMS) sgmanagertm1ams.integration.ibmcloud.com (169.51.45.77, 169.51.45.90) ===Before the Migration (Customer Action)=== 1) In preparation, customers will be required to update their local network and firewall rules according to their closest region in advance to facilitate the migration. Customers should only make changes to accommodate the region they will be moved to. If you’re not sure, our Site Reliability Engineering (SRE) team will advise you when we initiate the process via IBM Support case. a) Open Ports 443 Outbound to the following hosts for your region: US-East (Washington) - sgmanager.us-east.securegateway.cloud.ibm.com (52.116.108.23, 169.55.76.119) US-South (Dallas) - sgmanager.us-south.securegateway.cloud.ibm.com (169.53.46.119, 169.54.215.104) Europe (Frankfurt) - sgmanager.eu-de.securegateway.cloud.ibm.com (158.177.100.228, 169.50.45.166) b) Open Ports 9000 Outbound to the following hosts for your region: US-East - cap-us-east-prd-sg-bm-01.securegateway.appdomain.cloud (169.47.15.238) - cap-us-east-prd-sg-bm-02.securegateway.appdomain.cloud (169.47.15.254) - cap-us-east-prd-sg-bm-03.securegateway.appdomain.cloud (169.47.15.253) - cap-us-east-prd-sg-bm-04.securegateway.appdomain.cloud (169.47.15.249) - cap-us-east-prd-sg-bm-05.securegateway.appdomain.cloud (169.47.15.239) US-South - cap-sg-prd-1.securegateway.appdomain.cloud (169.55.54.176) - cap-sg-prd-2.securegateway.appdomain.cloud (169.55.54.188) - cap-sg-prd-3.securegateway.appdomain.cloud (169.54.229.7) - cap-sg-prd-4.securegateway.appdomain.cloud (169.54.229.5) - cap-sg-prd-5.securegateway.appdomain.cloud (169.55.54.178) Europe - cap-eu-de-prd-sg-bm-01.securegateway.appdomain.cloud (159.122.71.68) - cap-eu-de-prd-sg-bm-02.securegateway.appdomain.cloud (159.122.71.73) - cap-eu-de-prd-sg-bm-03.securegateway.appdomain.cloud (159.122.71.74) - cap-eu-de-prd-sg-bm-04.securegateway.appdomain.cloud (159.122.71.75) - cap-eu-de-prd-sg-bm-05.securegateway.appdomain.cloud (159.122.71.77) 2) Ensure none of your Secure Gateway instances are invalid or will expire prior to the agreed upon migration date. We are unable to migrate expired instances as well as instances with zero working data source connection established. For instructions on how to renew the Secure Gateway Token, please see: https://www.ibm.com/support/pages/planning-analytics-cloud-how-renew-secure-gateway-sg-security-token 3) Test existing connections to ensure they are in working order prior to the migration. **Delete data sources and gateway instances that are no longer used (clean-up).** 4) Customers who are not presently using Dedicated Secure Gateway connections, but are still configured to use the Dedicated Secure Gateway service will be <u>automatically migrated</u> during the March Maintenance window. Invalid or expired connections will not be migrated and all future connections you create will be made using our Public Secure Gateway service. ===Following the Migration (Customer Action)=== 1) After IBM performs the migration, update your Secure Gateway Client Gateway_ID and SECTOKEN fields as they appear in the Secure Gateway section of Planning Analytics Administration. Customer security tokens will be regenerated by IBM and expire 90 days from your migration date. 2) Once the Migration is complete you may remove the following IP ranges from your local firewall rules: - sg-wdc-01.integration.ibmcloud.com (50.22.254.131) - sg-wdc-02.integration.ibmcloud.com (50.22.254.135) - sgmanagertm1.integration.ibmcloud.com (158.85.15.77, 198.11.253.116) - tm1-eu-sg-01.integration.ibmcloud.com (169.50.176.77) - tm1-eu-sg-02.integration.ibmcloud.com (169.50.176.78) - sgmanagertm1ams.integration.ibmcloud.com (169.51.45.77, 169.51.45.90) 3) Test your connection. If you experience problems please log an IBM Support case for assistance.

Components

Planning Analytics - Dedicated Secure Gateway

Locations

USA - sgmanagertm1.integration.ibmcloud.com, EUROPE - sgmanagertm1ams.integration.ibmcloud.com

Schedule

March 6, 2023 00:00 - September 30, 2023 00:00 UTC