Threat prevention
Secure Web Gateway (SWG)
Safe internet access for every user, whether at a branch, at home or on the road.
A Secure Web Gateway (SWG) inspects web traffic and blocks harmful or unwanted sites. Nexapp SWG applies URL and category filtering, TLS inspection and safe-search enforcement to users everywhere, under the same policy engine as FWaaS, CASB, DLP and ZTNA.
What it does
Many attacks now arrive over the web: a phishing link, a compromised site, a malicious download. Encryption hides much of this from older filters. At the same time, people work from branches, homes and client sites, so a filter in the head office sees only part of the picture. A Secure Web Gateway sits between users and the internet wherever they are. It checks each request against category and reputation rules, decrypts traffic where policy allows, and blocks what is harmful before it reaches the device.
How it works in Nexapp
URL and category filtering
Allow or block by site category, with exceptions for specific users and groups.
TLS inspection
Encrypted web traffic is inspected under policy, and the inspection path itself uses post-quantum TLS 1.3 (X25519MLKEM768).
Safe-search enforcement
Search engines are held in safe-search mode for the groups you choose.
Linked to malware and data controls
Downloads can go through gateway antivirus and sandboxing, and uploads through DLP, all from the same policy.
Where teams use it
Branch banking
Tellers reach only the sites their work needs, and branch staff are kept away from high-risk categories.
Shared store terminals
Store PCs used by many staff are limited to business categories, with safe search enforced.
Field and remote staff
Sales and service teams on the InstaAccess client get the same web policy on home broadband or mobile data as in the office.
Frequently asked questions
Does the SWG inspect HTTPS traffic?
Yes. TLS inspection runs under policy, so you decide which traffic is decrypted and which is left alone.
How is SWG different from web filtering on the edge?
Nexapp edges run web filtering for traffic at a site.
The SWG in Nexapp SSE extends web protection, with TLS inspection, to users wherever they are. Both follow one policy.
Can we report on web use by user?
Yes. Web events appear in platform reports and can be exported to your SIEM over syslog.
Related capabilities
- DNS securityBlock malicious domains, command-and-control callbacks and DNS tunnelling at the first lookup.
- Remote Browser Isolation (RBI)Open risky websites in an isolated cloud browser, so malicious code never reaches the device.
- Malware preventionCatch known malware at the gateway and test unknown files before anyone opens them.
- All capabilitiesEvery capability in the Nexapp SASE platform.
See Secure Web Gateway (SWG) on your own sites.
24×7 NOC in Pune · 75,000+ devices deployed · 400+ enterprise and banking customers since 2014.