Cloud Secure Web Gateway (Cloud SWG) offers header modifications functionality - for both request and response headers (as mentioned in the Configure Cloud SWG to Modify Headers).
In the Cloud SWG portal however, only "Group A - Request-based" is visible:
Cloud SWG, default configuration with policies managed in the portal.
In order to create response header modification rule, these steps need to be followed: