---
title: Cloud Secure Web Gateway
url: https://www.broadcom.com/products/cybersecurity/network/web-protection/cloud-secure-web-gateway
description: Symantec Web Security Service - cloud delivered secure web gateway service and web security solution with advanced proxy architecture, web access control, web security analysis, threat prevention and DLP.
---

# Cloud Secure Web Gateway

## A comprehensive and flexible Secure Web Gateway built for the modern enterprise

Cloud-delivered solution to enforce consistent web security, protect users and ensure compliance.

[Read the Brief](https://docs.broadcom.com/docs/web-security-service-at-a-glance-en)

Increasing web use, rapid cloud adoption, and greater numbers of remote users are exposing your network to additional risk. Symantec Cloud Secure Web Gateway (formerly Web Security Service) is an indispensable line of defense against modern-day cyber threats. A critical capability of Symantec SSE, it enables enterprises to control access, protects users from threats, and secures their sensitive data.

## Unified Agent for Superior Cloud SWG and Endpoint Security

The integration of the Symantec Endpoint Security (SES) Agent with Symantec Cloud Secure Web Gateway (SWG) delivers significant advantages across security, operations, and user experience. This combined solution ensures comprehensive, consistent protection and policy enforcement for your users, regardless of their location, all without the need to install an additional agent. 

- Enforce consistent security policies everywhere, eliminating security gaps and enabling deep, full-proxy inspection of all web traffic.
- Simplify management and reduce tool sprawl with a unified agent and a single cloud console to define all endpoint and network security policies globally.
- Ensure optimized, low-latency access for the distributed workforce by intelligently steering traffic to Symantec SWG.

[Read the Solution Brief to see the benefits of a unified agent for endpoint and web security](https://docs.broadcom.com/docs/unified-endpoint-agent-and-cloud-swg)

## Protect users from threats hiding in encrypted Web and cloud traffic. Advanced proxy architecture delivers SWG and Advanced Threat Protection capabilities

Symantec Cloud SWG protects your organization from cyber attacks using an advanced proxy architecture that terminates, inspects, and controls high volumes of web and cloud traffic, even when it's SSL/TLS encrypted. Our proxy architecture combats advanced threats, secures your information, and protects your users wherever they go. It's built to meet the challenges of the Cloud Generation.

- **Advanced proxy architecture**—Enforce granular threat inspection policies for encrypted web traffic and traffic from cloud apps such as Box and Office 365.
- **Browsing threat prevention/web isolation**—Use isolation to combat the latest generation of threats targeting users' email and web browsing.
- **File threat prevention**—Block high-risk and advanced threats with multilayer file inspection and customizable sandboxing.
- **Threat Risk Levels**—Set web access policies based on a URL’s relative level of threat risk.

[Read the Brief](https://docs.broadcom.com/docs/web-security-service-at-a-glance-en)

## Symantec Cloud SWG Express: Start seeing Web traffic for an additional layer of protection

Designed for resource-strapped organizations that have traditionally relied on endpoint security and firewalls, this low-cost, agent-based solution delivers industry-leading web categorization, classification, and security controls to deflect threats away from the browser. Symantec Cloud SWG Express provides the essential Secure Web Gateway component of the new Symantec CBX platform.

- **Close the Visibility Gap**: Eliminate blind spots like Shadow AI and Shadow IT usage, giving administrators newfound clarity and control over all user web browsing activity.
- **Extend Endpoint Protection**: Proactively deflect malicious traffic and web-based threats before they reach the endpoint, leveraging the Symantec Global Intelligence Network for advanced threat intelligence.
- **Enforce Policy and Compliance**: Fully enforce acceptable use policies (AUP) on corporate devices and provide the necessary logs and audit trails to satisfy regulatory and insurance demands.
- **Right-Sized and Simple**: A lightweight, fast, and cost-effective solution built for generalist IT teams that deploys easily with your existing Symantec Endpoint Security Agent (ESA).

Learn how Symantec CBX is [built for this moment](https://www.security.com/feature-stories/built-moment) and how Cloud SWG Express plays a vital role.

- [Read the Brief](https://docs.broadcom.com/docs/cloud-swg-express-pb)

## NGFW security controls for all internet traffic. Cloud Firewall Service extends protection to all internet traffic, covering all ports and protocols

A simple add-on enables customers to manage non-web internet traffic in the cloud for all users, regardless of where they are located. This ensures consistent policies are applied and provides easy-to-access, centralized visibility and reporting on internet use.

Symantec Cloud Firewall Service allows you to:

- Configure policy to block traffic based any TCP/UDP port
- Set policy (allow/deny) based on authenticated User/Groups, as well as Source and/or Destination criteria
- Use dashboards and reports to monitor data connections and traffic volume details (such as applications and protocols)

- [Read the Brief](https://docs.broadcom.com/docs/web-protection-cloud-firewall-service)

## [Your Data and Apps are moving to the cloud – So can your security](https://players.brightcove.net/6415665063001/Vh8ALpkmx_default/index.html?videoId=6328980345112)

### Advanced cloud and web security services to protect applications like Office 365

Moving to the cloud introduces new security and compliance risks, but it also enables tremendous new defensive strategies. Cloud-delivered network security adds flexibility and boosts performance, while protecting users with consistent threat prevention and data compliance policies—wherever they go.

Symantec Cloud Secure Web Gateway (SWG) delivers a broad set of advanced capabilities—including a cloud-hosted proxy, SSL/TLS decryption, advanced threat intelligence, anti-virus scanning, high-risk isolation, cloud reporting and more. As your users directly access the web, you can extend consistent policies that follow your sensitive data wherever it goes.

## SANS Webinar / White Paper

As organizations rely more on cloud platforms for identity, access, and security, downtime and disruption become bigger risks. The challenge isn’t preventing outages—it’s staying operational when they happen.

SANS and Broadcom experts share how to modernize your business continuity and disaster recovery strategy to meet the demands of today’s cloud-first environment.

**Key [Topics](https://www.broadcom.com/topics):**

- Understand the failure points introduced by cloud-based services
- Common security control gaps in cloud deployments
- Why legacy Business Continuity / Disaster Recovery plans no longer suffice
- How to align continuity planning with compliance requirements
- Actionable steps to maintain availability and security during provider disruptions and how Symantec Cloud SWG can help.

- [View the Webinar](https://www.sans.org/webcasts/resiliency-and-business-continuity-in-the-cloud-era/) / [Read the White Paper](https://www.sans.org/white-papers/resiliency-business-continuity-cloud-era/)

## Analyst Reports

### The Role of a Hybrid Approach on the Journey Towards Cloud-delivered Secure Web Gateway

- [Read the Report](https://docs.broadcom.com/docs/The-Role-of-HybridSWG)

### 15 Years Running* — Symantec is a Top Player in the Radicati Corporate Web Security Market Quadrant Report

Top Players in the Radicati Market Quadrant shape the market with their technology and strategic vision. Download a complimentary  

*Previously listed as Blue Coat Systems, acquired by Symantec in 2016

- [Get the Report: Radicati Corporate Web Security Blog](https://symantec-enterprise-blogs.security.com/blogs/product-insights/symantec-named-top-player-radicati-groups-apt-protection-and-corporate-web-security)

## Tolly Group validates Symantec alignment with industry standards

Tolly Group is a leader in providing 3rd-party analysis and validation of IT and security product capabilities and performance. They reviewed the comprehensive SSE solution from Symantec and compared it to the industry's SSE framework to identify alignment.

- [Comparison to Industry Framework](https://docs.broadcom.com/docs/tolly-sase-framework-analyst-report)

## Symantec SASE delivers security, reliability, and optimized performance

Symantec SASE minimizes public Internet routes and prefers Google Cloud's private backbone. Symantec SASE improves throughput and reduces transaction times for both encrypted and unencrypted traffic in every scenario tested while providing integrated security services.

- [Tolly Group validates Symantec SASE performance](https://docs.broadcom.com/docs/symantec-data-centric-sase)

## Consolidate your security stack

Simplify with our cloud-delivered network security service

Don't waste time and effort stitching together point products. Instead, select a complete web and cloud security service that gives you the protection, threat prevention and compliance capabilities your business needs to stay secure. Our full arsenal of cloud-delivered security offers broad and deep protection.

- Broad network security service with SWG, high-risk isolation, anti-virus scanning, and advanced threat intelligence.
- Integrate with cloud sandboxing, comprehensive DLP, CASB, and email security capabilities.
- Innovative threat prevention to block more threats and minimize false positives.
- Strong SSL/TLS inspection capability to find malware hidden in encrypted traffic.
- Shadow IT control for more than 45,000 applications; set proxy policies to govern access to cloud applications, extending to a full CASB service.
- Office 365 security enforces DLP and threat prevention security policies.

## Strong, central Web and cloud access governance. Consistently apply network security policies across web and cloud applications

Protect users with web and cloud security services that connect all devices to distributed, global data centers for reliable, high-performance, local service. Configure and enforce powerful web and cloud application access-control policies.

- Set policies based on website content-based classifications and threat risk levels.
- Classify URLs in 70 categories covering more than 55 languages.
- Authenticate users and enforce user, group, and location-based security controls.
- Control employee access to Shadow IT cloud apps (unsanctioned cloud applications).
- Enable application-level point-to-point connectivity, cloaking all resources from the end-user devices and the internet.

- [Read the Brief](https://docs.broadcom.com/docs/cloudsoc-audit-and-proxysg-wss-integration)

## Related Products

![Secure_Web_Gateway-circle.png](https://www.broadcom.com/media/blt4ac44e0e6c6d8341/bltca5295b1bf30b6a4/604f5d160daa0c1e83c4d24a/sed_secure_web_gateway-circle.png)

### [Edge Secure Web Gateway](https://www.broadcom.com/products/cybersecurity/network/web-protection/proxy-sg-and-advanced-secure-gateway)

Your high-performance secure web gateway can be delivered on-premises on Symantec hardware and virtual appliances, or in private cloud infrastructure such as AWS, Azure or Google Cloud.

![web-isolation-related-card.jpg](https://www.broadcom.com/media/blt4ac44e0e6c6d8341/blt991cbda43fc96e9f/604f5d1fdbfbf461456cc659/sed_web_isolation-circle.png)

### [Web Isolation](https://www.broadcom.com/products/cybersecurity/network/network-protection/web-isolation)

Isolate potentially risky traffic to prevent malware and phishing threats.

![ICON_SED_Content_Analysis-circle.png](https://www.broadcom.com/media/blt4ac44e0e6c6d8341/blt2eeec5a9408f98d6/632a4f9e258fb55f6b217dde/ICON_SED_Content_Analysis-circle.png)

### [Deep File Inspection](https://www.broadcom.com/products/cybersecurity/network/web-protection/deep-file-inspection)

Innovative multi-layered inspection and customizable sandboxing block advanced malware and zero-day threats that elude traditional analysis.

![encrypted-traffic-management-related-card](https://www.broadcom.com/media/blt4ac44e0e6c6d8341/blta85adba0d8a95e7b/6035497b4841d040984aa1a8/encrypted-traffic-management-related-card)

### [Encrypted Traffic Management](https://www.broadcom.com/products/cybersecurity/network/encrypted-traffic-management)

Edge and Cloud Secure Web Gateways can decrypt SSL/TLS encrypted traffic needing security inspection while providing safeguards to maintain privacy compliance.

![webfilter-intelligence-services-related-card.jpg](https://www.broadcom.com/media/blt4ac44e0e6c6d8341/bltd658c49534123250/604f5d1e6a79a820bf6e8563/sed_intelligence_services-circle.png)

### [Intelligence Services](https://www.broadcom.com/products/cybersecurity/network/web-protection/intelligence-services)

Intelligence Services implements a defense-in-depth approach and delivers insight into the latest threat landscape, along with CASB capabilities, such as application visibility and control over 45,000 cloud applications and management of shadow IT.

## Resources

### Solution Briefs
- [Cloud SWG Solution Brief](https://docs.broadcom.com/docs/web-security-service-at-a-glance-en)
- [Cloud SWG Custom Routing Product Brief](https://docs.broadcom.com/docs/SWG-CustomRouting-PB)
- [Six Key Considerations for Responsible Cloud Migration](https://docs.broadcom.com/docs/six-key-considerations-for-responsible-cloud-migration-en)

### White Papers
- [SANS: Resilience and Business Continuity in the Cloud Era](https://docs.broadcom.com/docs/sans-resilience-and-business-continuity-in-the-cloud-era)
- [Securing the Immediate Shift to Remote Work](https://docs.broadcom.com/docs/ESD-Securing-the-Immediate-Shift-to-Remote-Work)
- [Cloud Generation Malware Analysis](https://docs.broadcom.com/docs/cloud-generation-malware-analysis-en)
- [Information Protection in the Web and Cloud Era](https://docs.broadcom.com/docs/information-protection-in-the-web-and-cloud-era-en)
- [Office 365: Network Security & Performance - Simplified](https://docs.broadcom.com/docs/office-365-network-security-and-performance-simplified-en)
- [The Role of a Hybrid Approach on the Journey Towards Cloud-Delivered Secure Web Gateway](https://docs.broadcom.com/docs/The-Role-of-HybridSWG)

### Legal Information
Learn more about legal terms, policies and notices.
- [License and Service Terms Repository](https://www.broadcom.com/company/legal/licensing)

## More

- [Buy via Partner](https://www.broadcom.com/how-to-buy/partner-distributor-lookup)
- [Contact Us](https://engage.broadcom.com/ESG-contact-us)

## Also of Interest

- [Symantec™ Edge Secure Web Gateway (SWG)](https://www.broadcom.com/products/cybersecurity/network/web-protection/proxy-sg-and-advanced-secure-gateway)
- [Symantec™ Network Security Solutions](https://www.broadcom.com/products/cybersecurity/network)
- [Symantec™ WebFilter and Intelligence Services](https://www.broadcom.com/products/cybersecurity/network/web-protection/intelligence-services)