Everything you need to know about secure web gateways

(SWG or Secure Web Gateway)

How does the SWG work?

The secure web gateway is a technology widely adopted by companies seeking a reliable solution to control Internet access on their network. In fact, the SWG blocks web traffic and malware identified as threats in order to protect organizations from cybersecurity attacks and data breaches.

The secure web gateway acts as a filter between user requests and resources on the internet.

The SWG is based on a two-step process:
  1. For each request, the SWG authenticates the user and analyzes the request. If everything checks out, the gateway authorizes the request. If, however, the request violates the company’s security policy, it may be rejected by the secure web gateway.

  2. Incoming data on the network is also analyzed by the SWG: users can only view it if it is deemed safe.

What features does the secure web gateway include?

The The secure web gateway offers a suite of features designed to ensure the security of a company’s data and its users by filtering web traffic, as well as cloud applications and all other necessary resources. Some of these features are essential, such as the filtering proxy, in-line antivirus, and SSL/TLS decryption.

The filtering proxy

The filtering proxy examines the content of websites before allowing users to access them. The aim here is to prevent users from accessing malicious or inappropriate content that could jeopardize sensitive data hosted on the company's network, but also to avoid the company incurring legal liability.

To block access to suspicious URLs, the filtering proxy has a database. At Olfeo, our database consists of more than 20 million domains, or hundreds of millions of URLs. Comprehensive and updated in real time, this database is extremely valuable, as it enables the proxy to determine whether content is legitimate or not. For security reasons, the proxy blocks known and unknown threats: anything analyzed as suspicious by the secure web gateway is blocked, and the user's request is then denied for security reasons.

Stream antivirus

The filtering solution is combined with a stream antivirus to improve system security. This antivirus uses high-performance detection methods to identify worms, malware, cryptolockers, and all other threats hidden in web traffic. (but also applications in the cloud or used locally on the network), including those unknown in traditional antiviral databases.

To detect these threats, the web-based antivirus developed by Olfeo scans web traffic, as well as emails, Office documents, and all applications (whether hosted in the cloud—in the case of a SaaS solution—or not) that may be used internally within the company.

SSL/TLS decryption

Encrypted traffic must also be inspected by the secure web gateway, and this is precisely what the SSL/TLS decryption feature allows. Its operation is simple:
  • The tool decrypts the content using the sender's public key;
  • Then, he analyzes it;
  • Then it re-encrypts the content before sending it back to the sender.

What are the benefits of the secure web gateway?

The secure web gateway offers numerous benefits for companies wishing to maximize the security of their employees' Internet access, both on-site and when mobile (visiting a customer or service provider, teleworking):
  • The SWG drastically limits potential threat vectors;
  • It adapts to new ways of working in companies, particularly in situations involving mobility.
  • It provides users with secure access to the Internet, SaaS applications in the cloud, and all the online resources they need, which has a positive impact on their productivity.
  • It protects the information system and network, and therefore the sensitive data of the company and its employees.

How to choose the right secure web gateway?

Is your company looking to invest in a secure web gateway solution to ensure optimal content filtering? If you’re deciding between Olfeo and other services, here’s what you need to know to protect your company’s IT network from threats.

To ensure optimal cybersecurity, the SWG must meet certain criteria:
  • A comprehensive and up-to-date database;
  • A stream antivirus that detects malware, worms, cryptolockers, and anything else that can infect the system;
  • Decryption of HTTPS traffic;
  • Optimal web protection on site, but also when traveling and working remotely, without employees having to install a VPN;
  • The ability to customize the filtering policy (for example, based on user profiles);
  • The ability to generate reports to better understand the organization's weaknesses and how to avoid new threats in the future;
  • An optimal user experience for smooth and secure Internet use.
Of course, these are only basic criteria for choosing the right secure web gateway.

Are you unsure which solution to choose and want to learn more about Olfeo On-Premise Secure Web Gateway? Contact one of our advisors today to find out how our secure web gateway can help you optimize the protection of your IT infrastructure.