Secure Web Gateway (SWG)

A Secure Web Gateway (SWG) is a security solution that controls users' web access and protects against web-based threats. An SWG inspects internet traffic, blocks malicious content, enforces usage policies and can detect suspicious downloads, phishing sites or unwanted applications. Modern secure web gateways are frequently provided cloud-based and protect users regardless of whether they work in the office, on the move or from home.

Typical functions include URL filtering, malware protection, SSL inspection, application control, sandboxing and logging. An SWG is particularly important when organizations make intensive use of cloud and SaaS services and web access no longer runs centrally via a classic corporate network. In conjunction with Zero Trust Security, web access is not permitted across the board but assessed on the basis of identity, context and risk.

A secure web gateway supports IT Security by providing an important control layer between users and the open internet. At the same time, it complements SaaS Security, because many business-critical applications are now used browser-based. Organizations benefit particularly when web protection, data control and identity security interact consistently.

See also: Cloud Security and Security Posture.