Enhancing Qualys Platform Email Delivery: Migration from Proofpoint to OCI Email Delivery Service
Qualys is enhancing the reliability and security of its platform email infrastructure. As part of this initiative, the current Proofpoint-based email delivery service will be migrated to OCI Email Delivery, a native service provided by Oracle Cloud Infrastructure (OCI).
OCI Email Delivery is a secure and scalable cloud service designed for the reliable delivery of high-volume application-generated emails. This migration will streamline our infrastructure while improving visibility, security, and operational efficiency for communications sent from our Qualys Enterprise TruRisk™ Platform.
What is Changing?
System-generated emails from the Qualys Enterprise TruRisk™ Platform, including alerts, notifications, scan results, and service communications, will be delivered via OCI Email Delivery rather than the existing Proofpoint infrastructure.
This change enables Qualys to:
- Improve email delivery reliability and performance
- Strengthen authentication through SPF, DKIM, and DMARC
- Enhance monitoring, logging, and operational visibility
- Leverage native OCI security and scalability capabilities
This update affects only the backend infrastructure used to send system-generated emails and does not impact platform functionality, customer data, or service availability.
Impact on Customers
- Private Cloud Platform (PCP) Customers: There is no impact on the PCP customers. Existing SMTP configurations and custom email gateways will continue to function without any changes.
- SCP customers using their own email domains: Currently, SCP customers using their own email domains do not need to take any action to send emails from the Qualys Enterprise TruRisk™ Platform.
- Shared Cloud Platform (SCP) Customers: Customers using the @qualys.net domain for platform-generated emails should not experience any service interruptions. However, customers who have set their email gateways or security solutions to accept emails exclusively from specific Proofpoint relay IP addresses must update their allowlists. To ensure continued delivery of Qualys Enterprise TruRisk™ Platform emails, refer to the FAQs for the new OCI Email Delivery relay IP ranges to add.
Migration Timeline
The migration will occur in phases for a smooth transition. The rollout will start between April 14, 2026, and May 30, 2026. During this timeframe, customers will continue to receive system-generated emails as usual.
| Qualys Platform | Implementation Date | Implementation Time |
| EU POD 03 | 14-Apr-26 | 3:00 AM – 4:00 AM PST |
| AU POD 01 | 21-Apr-26 | 3:00 AM – 4:00 AM PST |
| UK POD 01 | 23-Apr-26 | 3:00 AM – 4:00 AM PST |
| AE POD 01 | 28-Apr-26 | 3:00 AM – 4:00 AM PST |
| US POD 04 | 30-Apr-26 | 3:00 AM – 4:00 AM PST |
| KSA POD 01 | 5-May-26 | 3:00 AM – 4:00 AM PST |
| IN POD 01 | 7-May-26 | 3:00 AM – 4:00 AM PST |
| CA POD 01 | 12-May-26 | 3:00 AM – 4:00 AM PST |
| EU POD 02 | 14-May-26 | 3:00 AM – 4:00 AM PST |
| EU POD 01 | 19-May-26 | 3:00 AM – 4:00 AM PST |
| US POD 03 | 21-May-26 | 3:00 AM – 4:00 AM PST |
| US POD 02 | 26-May-26 | 3:00 AM – 4:00 AM PST |
| US POD 01 | 28-May-26 | 3:00 AM – 4:00 AM PST |
Customer Action Required
Most customers do not need to take any action. Only customers in Category C (as outlined in the impact on customers) who have implemented IP-based allowlists for the existing Proofpoint email relays should review the new relay IP ranges and update their allowlists accordingly. The updated IP ranges and SPF records are provided in the FAQs that accompany this announcement. All email routing changes will be managed internally by the Qualys Enterprise TruRisk™ Platform teams.
Additional Information
For more technical information, including relay IP ranges and configuration guidance, please refer to the frequently asked questions that accompany this announcement.
We appreciate the ongoing trust and support of our customers as we remain committed to enhancing the reliability and security of the Qualys Enterprise TruRisk™ Platform.
If you have any more questions, please don’t hesitate to contact Qualys Support.
Frequently Asked Questions
What is the Reason for Migrating from Proofpoint to OCI Email Delivery?
We are transitioning from Proofpoint to OCI Email Delivery to enhance the performance, reliability, security, and compliance of the Qualys Enterprise TruRisk™ Platform. The OCI service provides seamless cloud integration, improved deliverability, modern authentication standards, and superior observability.
Will There be Any Downtime?
The migration is intended to be seamless and is not expected to impact your email communication.
Will there be Any Changes to Email Addresses, Domains, or IP Addresses?
Your email addresses will stay the same, but Relay IP address records may change during the migration to OCI infrastructure. We will ensure these IP address records are warmed up and authenticated properly to prevent any deliverability issues.
Will this Migration Affect Me or My Organization?
Only customers who explicitly allowlist the SPF record or IP address in their environment will need to update their allowlist with the new records according to their respective regions.
What Updates are Needed for Each Region?
If your environment strictly allows specific IPs for inbound emails, we are providing OCI IP ranges and SPF records in advance so they can be added.
Customers can refer to the SPF records listed below for their specific pod regions.
- EU Region (as under the SPF for
eu.rp.oracleemaildelivery.com)- 192.29.200.0/25; 138.1.108.0/25; 130.35.116.0/25; 192.29.178.0/25; 129.149.22.0/25; 129.149.118.0/25; 129.149.100.0/25; 129.149.84.0/25; 129.149.68.0/25; 155.248.135.128/25; 155.248.140.0/25; 134.98.248.128/25; 80.225.160.128/25; 84.8.224.128/25; 84.8.192.128/25
- AP Region (as under the SPF for
ap.rp.oracleemaildelivery.com)- 192.29.172.0/25; 192.29.24.0/25; 192.29.232.0/25; 192.29.248.0/25; 192.29.216.0/25; 192.29.44.0/25; 192.29.151.128/25; 129.148.135.0/25; 129.148.148.0/25; 129.148.215.0/25; 129.149.126.0/25; 129.148.180.0/25; 129.149.52.0/25; 159.13.4.0/25; 84.8.68.0/25; 168.110.248.128/25; 136.248.232.128/25; 168.107.248.128/25; 168.110.160.128/25; 149.118.160.128/25
- The Americas (as under the SPF for
rp.oracleemaildelivery.com&1amer.rp.oracleemaildelivery.com)- 129.148.164.0/25; 129.148.215.0/25; 129.149.6.0/25; 129.149.38.0/25; 138.1.170.0/24; 147.154.32.0/25; 147.154.63.0/24; 147.154.126.0/24; 147.154.191.0/24; 162.88.24.0/23; 192.29.72.0/25; 192.29.88.0/25; 192.29.103.128/25; 192.29.134.0/25; 155.248.148.0/25; 131.186.12.0/25; 139.177.108.0/25; 162.88.4.0/23
- 162.88.8.0/24; 162.88.36.0/24; 208.76.62.0/23; 216.146.32.0/23; 207.211.132.0/25; 165.1.100.0/25; 158.247.100.0/25; 136.248.224.128/25; 168.129.248.128/25; 192.22.96.128/25; 168.129.184.128/25; 192.22.160.128/25; 192.22.32.128/25; 157.137.96.128/25; 192.22.224.128/25
When Will the Migration Be Completed?
The migration is planned to take place from April 14, 2026, to May 30, 2026.
How do I identify the Region My Subscription Belongs To?
Refer to the metrics below to understand how your POD subscription maps to the OCI Email Delivery Service regions.
| Qualys Platform | Respective OCI Region Name |
| UK POD 01 | EU Region |
| EU POD 03 | EU Region |
| EU POD 02 | EU Region |
| EU POD 01 | EU Region |
| AU POD 01 | AP Region |
| AE POD 01 | AP Region |
| IN POD 01 | AP Region |
| KSA POD 01 | AP Region |
| US POD 04 | The Americas |
| US POD 03 | The Americas |
| US POD 02 | The Americas |
| US POD 01 | The Americas |
| CA POD 01 | The Americas |
When can I Remove the Existing Proofpoint IP Address from the Allowlist?
Removal is only necessary for customers falling in category C. Once the migration activities across all PODs are completed, which will be after May 30, 2026.
What Should I Do if I Notice an Issue with Email Delivery After the Migration?
You can contact our support team directly through the Qualys Support channel. We will investigate and provide a resolution based on the identified issue.
Will the Support Process Change After the Migration?
Your support channels and escalation paths will remain unchanged.