Requirements for SWG in single leg proxy deployment