Knowledge Center

Web Gateway download servers
Technical Articles ID:   KB65496
Last Modified:  3/9/2018


McAfee Web Gateway (MWG) 7.x


MWG needs to access several download servers to get all required files for engine, definition, and product updates. If access is blocked by an outbound firewall, MWG might not be able to retrieve all needed data, which can lead to failing updates or missing the latest available security signatures.

The following data is retrieved from the download servers:

  • URL Filter/TrustedSource
  • AV Engines (all)
  • Application Control Signature Sets
  • DLP
  • New product versions
  • Operating system upgrades
Download server maintenance/down time

The download server infrastructure for MWG is a worldwide cluster with multiple servers. When McAfee must perform regular maintenance tasks on any of the download servers, they are taken out of the pool of available servers to prevent any impact on your local MWG appliances. Your appliance automatically picks another available download server.

If MWG is already pointing at the server that is being taken offline for maintenance, you might see a "red alert" in your Alerts Dashboard about a failed update. MWG immediately tries the next available download server in the list to ensure that your appliance stays up to date.

You can verify that the "red alert" can be ignored due to maintenance by filtering your Alerts Dashboard for the word Updater. If you see a green/success message immediately following the red/failure message, your update succeeded and there is no reason for concern.


Ensure that MWG can contact the following download servers using HTTPS (TCP/443).
MWG versions released after March 2013:

tau.mcafee.com              ,,





appliance.webwasher.com (US)
appliance1.webwasher.com (Germany)
appliance2.webwasher.com (Japan)

mwg-update.mcafee.com        multiple IP addresses (Content Delivery Network)
MWG versions released before March 2013:
wpm.webwasher.com   ,,




appliance.webwasher.com (US)
appliance1.webwasher.com (Germany)
appliance2.webwasher.com (Japan)

mwg-update.mcafee.com        multiple IP addresses (Content Delivery Network)

IMPORTANT: The IP addresses are subject to change. This article might not contain the latest updates. McAfee strongly recommends that you not configure the download server IP addresses manually because IP address changes might prevent MWG from being able to retrieve all needed files.

As a best practice, allow MWG to communicate to HTTPS services (TCP/443) for any destination. Or, it is possible to use a next-hop proxy in your network, which allows MWG to contact the download servers.


The content of this article originated in English. If there are differences between the English content and its translation, the English content is always the most accurate. Some of this content has been provided using Machine Translation translated by Microsoft.

Rate this document

Did this article resolve your issue?

Please provide any comments below

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms

 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.