Genesys Cloud - Main

Hi,

I see from the Release Notes hat Genesys have announced another CIDR address range expansion.

Now, maybe I am reading it wrong, but the "Am I affected?"section is somewhat ambiguous. There are 4 bullet points listed, what I want to know is, are affected customers those where ANY of the 4 bullets apply, or only those where ALL apply?

Mention is made in one bullet of the Africa (Cape Town) and Asia Pacific (Jakarta) regions. I manage some ORGs based out of US-West, that do not use Global Media Fabric, so does that mean this does not affect them? Or do the other bullets (TURN etc.) mean they will be?

Sorry to appear stupid, but I feel a little more clarity from Genesys is required here!

TIA

#Implementation
#Roadmap/NewFeatures

------------------------------
Paul Simpson
Views expressed are my own and do not necessarily reflect those of my employer.
------------------------------

Hi Paul,

I completely agree with your sentiment on this. I just read it and the first bullet alone, to me, looks like a global coverage with no specified regions:

• • Customers who use firewall policies to restrict outbound connections from Genesys Cloud clients, phones, and Edge devices are affected. Network administrators can view detailed information about affected services, addresses, and ports, and perform the self-readiness checks. For more information, see Cloud media services CIDR IP address range.

But the 2nd bullet throws you off with mention of Cape Town & Jakarta.

TBH, We added this new CIDR range long ago as I don't want to deal with any uncertainties. Also, checking the range showed IP ranges hosted different countries for said CIDR range:

Genesys Cloud IP addresses, domains and public networks (networksdb.io)

------------------------------
Niel Vicente
DAMAC Properties Co. LLC
------------------------------

Hey Paul and Niel,

Thank you for the feedback. I know that sometimes our announcements / documentation can be a little confusing. 

If you would like to have changes made to the Resource Center article, we encourage you to utilize the Was this article helpful? feature at the bottom of the pages. If you select No, you are able to leave feedback that will be sent to the team that manages those articles.

------------------------------
Jason Kleitz
Genesys - Employees
------------------------------

Thanks for the suggestion Jason, will do.

In the meantime, is there anyone here who can advise whether we need to start the ball rolling with Firewall updates?

------------------------------
Paul Simpson
Views expressed are my own and do not necessarily reflect those of my employer.
------------------------------

Original Message:
Sent: 09-10-2024 16:56
From: Jason Kleitz
Subject: Latest CIDR expansion

Hey Paul and Niel,

Thank you for the feedback. I know that sometimes our announcements / documentation can be a little confusing. 

If you would like to have changes made to the Resource Center article, we encourage you to utilize the Was this article helpful? feature at the bottom of the pages. If you select No, you are able to leave feedback that will be sent to the team that manages those articles.

------------------------------
Jason Kleitz
Genesys - Employees
------------------------------

I agree with Vaun it's not you must be all 4 bullets but if any of the bullets apply to you.

You manage Orgs that use only US West Region, don't use Turn or GMF and all traffic is only routed through US west then your customers still need to update their firewall rules for the new range. The CIDR block does apply globally. Except for US Ohio for FedRamp. Don't for get the RTP range expansion as Vaun calls out. 

------------------------------
Steve Alix
EDCi
------------------------------

Original Message:
Sent: 09-10-2024 17:02
From: Paul Simpson
Subject: Latest CIDR expansion

Thanks for the suggestion Jason, will do.

In the meantime, is there anyone here who can advise whether we need to start the ball rolling with Firewall updates?

------------------------------
Paul Simpson
Views expressed are my own and do not necessarily reflect those of my employer.
------------------------------


Original Message:
Sent: 09-10-2024 16:56
From: Jason Kleitz
Subject: Latest CIDR expansion

Hey Paul and Niel,

Thank you for the feedback. I know that sometimes our announcements / documentation can be a little confusing. 

If you would like to have changes made to the Resource Center article, we encourage you to utilize the Was this article helpful? feature at the bottom of the pages. If you select No, you are able to leave feedback that will be sent to the team that manages those articles.

------------------------------
Jason Kleitz
Genesys - Employees

I don't do business in the Africa or Jakarta regions but this is how I interpret this.

This seems to imply that while a lot of other regions were moved to known, Genesys "owned" CIDRs a couple of years ago, Cape Town and Jakarta have been using the larger AWS range of IPs for media traffic.  So there's multiple changes in this release of note:

1. A fourth CIDR range is being added for those regions who have already been using Genesys vs AWS CIDR ranges for the media tier
2. Cape Town and Jakarta are now going to also be using the Genesys CIDRs.  So those regions should make sure the 3 previous and new fourth CIDR are allowed in their firewall.
3. If you use the Force TURN feature, that will also now make use of the Genesys CIDR ranges instead of the previous/current static list.
4. The RTP range is being extended so all commercial regions need to ensure their firewall covers this extended range. All commercial regions includes Cape Town and Jakarta.

I could be wrong so happy to be corrected :)

------------------------------
Vaun McCarthy
------------------------------

Vaun, your reading of the announcement is correct! 

We recently streamlined the announcement for clarity's sake.  The updated article calls out who is affected in a simpler manner, provides the two steps customers affected by any of the conditions should take, and readiness test suggestions per product function.

https://help.mypurecloud.com/articles/2024-genesys-cidr-expansion-commercial/

------------------------------
Alan Lanteigne
Genesys - Employees
------------------------------

Original Message:
Sent: 09-10-2024 17:40
From: Vaun McCarthy
Subject: Latest CIDR expansion

I don't do business in the Africa or Jakarta regions but this is how I interpret this.

This seems to imply that while a lot of other regions were moved to known, Genesys "owned" CIDRs a couple of years ago, Cape Town and Jakarta have been using the larger AWS range of IPs for media traffic.  So there's multiple changes in this release of note:

1. A fourth CIDR range is being added for those regions who have already been using Genesys vs AWS CIDR ranges for the media tier
2. Cape Town and Jakarta are now going to also be using the Genesys CIDRs.  So those regions should make sure the 3 previous and new fourth CIDR are allowed in their firewall.
3. If you use the Force TURN feature, that will also now make use of the Genesys CIDR ranges instead of the previous/current static list.
4. The RTP range is being extended so all commercial regions need to ensure their firewall covers this extended range. All commercial regions includes Cape Town and Jakarta.

I could be wrong so happy to be corrected :)

------------------------------
Vaun McCarthy
------------------------------

Thanks Alan, great update to the article.

------------------------------
Vaun McCarthy
------------------------------

Original Message:
Sent: 09-27-2024 14:20
From: Alan Lanteigne
Subject: Latest CIDR expansion

Vaun, your reading of the announcement is correct! 

We recently streamlined the announcement for clarity's sake.  The updated article calls out who is affected in a simpler manner, provides the two steps customers affected by any of the conditions should take, and readiness test suggestions per product function.

https://help.mypurecloud.com/articles/2024-genesys-cidr-expansion-commercial/

------------------------------
Alan Lanteigne
Genesys - Employees
------------------------------


Original Message:
Sent: 09-10-2024 17:40
From: Vaun McCarthy
Subject: Latest CIDR expansion

I don't do business in the Africa or Jakarta regions but this is how I interpret this.

This seems to imply that while a lot of other regions were moved to known, Genesys "owned" CIDRs a couple of years ago, Cape Town and Jakarta have been using the larger AWS range of IPs for media traffic.  So there's multiple changes in this release of note:

1. A fourth CIDR range is being added for those regions who have already been using Genesys vs AWS CIDR ranges for the media tier
2. Cape Town and Jakarta are now going to also be using the Genesys CIDRs.  So those regions should make sure the 3 previous and new fourth CIDR are allowed in their firewall.
3. If you use the Force TURN feature, that will also now make use of the Genesys CIDR ranges instead of the previous/current static list.
4. The RTP range is being extended so all commercial regions need to ensure their firewall covers this extended range. All commercial regions includes Cape Town and Jakarta.

I could be wrong so happy to be corrected :)

------------------------------
Vaun McCarthy

Hey Paul! The newest Q&A episode covers your post - check it out here. I hope it helps you out.

------------------------------
Nicole Milliken
Genesys - Employees
------------------------------

Thanks, Nicole - I'll have a watch.

As far as this particular question is concerned, the article appears to have been updated to indicate that ANY of the bullet points applying means you are affected (which, TBH, probably means everyone!!!)

------------------------------
Paul Simpson
Views expressed are my own and do not necessarily reflect those of my employer.
------------------------------

Original Message:
Sent: 09-25-2024 10:25
From: Nicole Milliken
Subject: Latest CIDR expansion

Hey Paul! The newest Q&A episode covers your post - check it out here. I hope it helps you out.

------------------------------
Nicole Milliken
Genesys - Employees
------------------------------

Yep, I think Maxim says something about that! 

------------------------------
Nicole Milliken
Genesys - Employees
------------------------------

Original Message:
Sent: 09-25-2024 10:34
From: Paul Simpson
Subject: Latest CIDR expansion

Thanks, Nicole - I'll have a watch.

As far as this particular question is concerned, the article appears to have been updated to indicate that ANY of the bullet points applying means you are affected (which, TBH, probably means everyone!!!)

------------------------------
Paul Simpson
Views expressed are my own and do not necessarily reflect those of my employer.
------------------------------


Original Message:
Sent: 09-25-2024 10:25
From: Nicole Milliken
Subject: Latest CIDR expansion

Hey Paul! The newest Q&A episode covers your post - check it out here. I hope it helps you out.

------------------------------
Nicole Milliken
Genesys - Employees