Cloud SWG Access Methods

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

What are the current Access methods that the Cloud SWG (formerly known as WSS) service has and a brief description of them?

Resolution

Access Methods

1. Explicit Proxy (PAC File Management Service/SEP)
2. WSS Agent (Windows/Mac)
3. iOS and Android (SEP-Mobile)  
4. Proxy Forwarding (ProxySG/ASG/Microsoft)
5. IPsec/VPN/firewall/Explicit over IPsec

To assist you when considering how to send traffic to Cloud SWG (formerly known as WSS), this document discusses the use cases and best practices for each Access Method.

Resources:

• Full Access Methods Web Guide
• Reference Topic: Required ports
• Full documentation resource portal

Authentication/Authorization

Most Access Methods require the installation of the Auth Connector (BCCA), which runs on a Windows AD server (Member Server or Domain Controller), or integration with existing SAML to identify users.

 

Identity Matrix

 

Fixed Location Connectivity:

VPN/IPsec (firewall); Explicit-over-IPsec (aka. TransProxy); Proxy Forwarding; SD-WAN

Connectivity: Fixed Location Methods

Endpoints

WSS Agent (WSSA); SEP (w/Seamless Auth); Cloud Connect Defense (Windows 10 app); Mobile (SEP-Mobile, Android app, ChromeOS). 

Connectivity: Endpoints