Secure Web
Gateway (SWG)
Policy-based Secure Web Gateway (SWG) to control and protect for your users’ internet and SaaS traffic, applied wherever they work and operated as a managed service.
What is Secure Internet Access?
Secure Internet Access is Cloud Gateway’s managed Secure Web Gateway: a cloud-delivered control point for outbound internet and SaaS traffic. It inspects and applies policy to where users go and what they can reach, with threat protection applied in the path, regardless of whether the user is in an office, at home or on the move.
It replaces the model where internet traffic was inspected by an appliance in the office that remote users never pass through. Because the control point is cloud-delivered rather than tied to a location, the same policy and the same protection follow every user, on every connection.
Secure Internet Access is one of two access patterns in Cloud Gateway’s Secure Access family. SIA secures the way users reach the internet and SaaS, delivered via Secure Web Gateway technology; Secure Private Access secures the way they reach your private applications, also known as Zero Trust Network Access. They share one service model and one operating approach, and can be taken together or separately.
Cloud Gateway designs the policy with you, integrates the platform with your identity and routing, and operates it: handling incidents, changes, configuration and vendor coordination, so your team doesn’t run the platform day to day.
For an explanation of how a secure web gateway works as a technology, you can find our SWG guide in the Knowledge Centre. This page covers what Cloud Gateway delivers.
Benefits of Secure Internet Access
Control and protection applied to internet and SaaS traffic wherever the user is, office, home or mobile, rather than only when they’re behind the office firewall.
Cloud Gateway designs the policy, integrates the platform and operates it: incidents, changes, configuration and vendor coordination handled as a service, so you don’t need to staff the platform.
Malicious and inappropriate destinations are filtered and inspected as traffic flows, reducing the exposure that comes from unfiltered direct-to-internet access.
Take SIA alongside Secure Private Access under one service model and one operating approach, rather than two separate tools with two separate operating models.
Standard gives you a clean, supportable operational baseline you can stand up without unnecessary complexity, and build on as your needs grow.
Designed, integrated and operated by Cloud Gateway, with vendor support coordinated on your behalf.
What's included
Cloud Gateway delivers Secure Web Gateway as a managed service: we agree the technical design and policy baseline during onboarding, integrate the platform with your identity and traffic routing, and operate it against an agreed support model.
Standard service activity includes onboarding and activation; incident management for the in-scope service; service request handling within an agreed catalogue; change enablement through a governed change process; configuration management of the managed service; review of vendor advisories where they materially affect the service; operational monitoring of service availability and health; and a standard operational report at an agreed cadence.
Standard is the operational baseline of the Secure Access family. It is a managed access service, not a SOC, SIEM or managed detection and response service; continuous security alert triage and threat hunting sit outside it. Advanced governance, custom reporting and customer self-service or co-management are higher-tier options.
Our case studies
Organisations
we’ve helped
Common questions about Secure Internet Access
What is a Secure Web Gateway (SWG)?
A secure web gateway is a cloud-delivered control point that inspects and applies policy to users’ outbound internet and SaaS traffic, wherever they are. It typically covers web filtering, policy enforcement and threat protection. Cloud Gateway’s Secure Internet Access is a managed SWG: we operate it for you rather than handing you a console to run.
How is SWG different from a firewall?
A firewall controls traffic at a network boundary, typically a site or data centre. SWG controls and protects users’ internet and SaaS traffic wherever they connect from, including off-network. Many organisations run both: Managed Firewall at the boundary, SIA for the mobile workforce. They can be operated together under one platform.
Does SWG work for remote and hybrid workers?
Yes. Because the control point is cloud-delivered rather than tied to an office, the same policy and protection apply whether a user is in the office, at home or travelling. This is the main reason organisations move from an on-premise proxy to a cloud SWG.
Is SWG a security monitoring or SOC service?
No. SWG is a managed access solution that controls and protects internet and SaaS traffic. The Standard service provides operational monitoring of service health, not continuous security alert triage, SOC monitoring or managed detection and response. Those are separate capabilities.
What's the difference between Secure Internet Access and Secure Private Access?
Secure Internet Access is our product name for a Secure Web Gateway solution. It secures how users reach the internet and SaaS. Secure Private Access is our Zero trust Network Access solution. It secures how users reach your private applications. Both are part of the Secure Access family and share one service model. For how security fits across the wider platform, see Protect.
Related reading
Control where your users go,
wherever they work
An office proxy protects the users who aren’t in the office least of all. Cloud Gateway delivers internet and SaaS control that follows every user, designs the policy with you and operates it as a service, so protection is consistent and your team isn’t running another platform. One platform, one UK team, one point of accountability.