* [Blog](https://www2.paloaltonetworks.com/blog)
* [SASE](https://www2.paloaltonetworks.com/blog/sase/)
* [Cloud-delivered Security](https://www2.paloaltonetworks.com/blog/sase/category/cloud-delivered-security/)
* Unleashing the Benefits o...

# Unleashing the Benefits of Cloud SWG with Agent-Based Proxy

[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2Fsase%2Funleashing-the-benefits-of-cloud-swg-with-agent-based-proxy%2F)  
[](https://twitter.com/share?text=Unleashing+the+Benefits+of+Cloud+SWG+with+Agent-Based+Proxy&url=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2Fsase%2Funleashing-the-benefits-of-cloud-swg-with-agent-based-proxy%2F)  
[](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2Fsase%2Funleashing-the-benefits-of-cloud-swg-with-agent-based-proxy%2F&title=Unleashing+the+Benefits+of+Cloud+SWG+with+Agent-Based+Proxy&summary=&source=)  
[](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www2.paloaltonetworks.com/blog/sase/unleashing-the-benefits-of-cloud-swg-with-agent-based-proxy/&ts=markdown)  
\[\](mailto:?subject=Unleashing the Benefits of Cloud SWG with Agent-Based Proxy)  
Link copied  
By [Charles Choe](https://www.paloaltonetworks.com/blog/author/charles-choe/?ts=markdown "Posts by Charles Choe")  
Jul 11, 2023  
4 minutes  
[Cloud-delivered Security](https://www.paloaltonetworks.com/blog/sase/category/cloud-delivered-security/?ts=markdown)  
[Product Features](https://www.paloaltonetworks.com/blog/sase/category/product-features/?ts=markdown)  
[Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown)  
[Remote Workforce](https://www.paloaltonetworks.com/blog/category/remote-workforce/?ts=markdown)  
[Use-Cases](https://www.paloaltonetworks.com/blog/sase/category/use-cases/?ts=markdown)  
[Web Security](https://www.paloaltonetworks.com/blog/category/web-security/?ts=markdown)  
[Cloud SWG](https://www.paloaltonetworks.com/blog/tag/cloud-swg/?ts=markdown)  
[Prisma Access](https://www.paloaltonetworks.com/blog/tag/prisma-access/?ts=markdown)  
[SSE](https://www.paloaltonetworks.com/blog/tag/sse/?ts=markdown)  
[SWG](https://www.paloaltonetworks.com/blog/tag/swg/?ts=markdown)

![](https://www.paloaltonetworks.com/blog/wp-content/uploads/2023/07/word-image-298208-1.jpeg)

Organizations must navigate a complex web of networking and security challenges in today's digital landscape. To improve application and user experience while simultaneously reducing the internet-facing attack surface, many enterprises are adopting cloud-delivered [secure web gateways](https://www.paloaltonetworks.com/cyberpedia/what-is-secure-web-gateway) (SWG) to protect their distributed workforce, networks, and sensitive data.

[Prisma Access Cloud SWG](https://www.paloaltonetworks.com/sase/secure-web-gateway) with agent-based proxy unleashes new capabilities that stand out for its unparalleled benefits. This blog will delve into the advantages of this approach, shedding light on how it enhances web security, performance, and user experience.

## Always-on internet security powered by AI

One of the foremost advantages of Prisma Access agent-based proxy lies in its ability to enforce always-on internet security.

Continuous visibility and control over remote users' internet and SaaS traffic is challenging but can be realized via the single, unified [GlobalProtect](https://www.paloaltonetworks.com/sase/globalprotect) agent. When GlobalProtect is placed in proxy-mode, it makes always-on and pervasive web security possible even if/when users disable VPNs.

Unlike traditional on-premise SWG proxies that rely on VPNs to route web traffic to a centralized data center for inspection, GlobalProtect in proxy-mode is VPN-agnostic to enable autonomous web security, all while meeting networking and compliance needs for [proxy](https://www.paloaltonetworks.com/cyberpedia/what-is-a-proxy-server) and encrypted user traffic.

![](https://www.paloaltonetworks.com/blog/wp-content/uploads/2023/07/word-image-298208-2.jpeg)

Prisma Access Cloud SWG then uses advanced artificial intelligence (AI) and machine learning (ML) to detect and stop the most evasive web threats inline and in real time. By actively monitoring web traffic, it accurately identifies malicious activities and blocks content or websites before they pose a threat to the network.

AI-powered Cloud SWG significantly reduces the risk of a data breach, malware infection, and other web intrusions by stopping known and unknown threats, including [attacks hosted on legitimate SaaS platforms/domains, Man-in-the-Middle (MiTM) phishing attacks, and even hacker toolkits](https://www.paloaltonetworks.com/blog/sase/reduce-your-odds-of-getting-snared-in-the-phishing-net/).

Prisma Access also provides visibility into sanctioned and shadow SaaS applications to secure data at rest and in motion via inline scanning to protect applications, users, and data holistically.

## A cloud proxy that's easy to deploy and use

Today, many organizations are under mounting pressure to manage rising hardware maintenance costs, eliminate high-effort capacity planning, and optimize bandwidth consumption and response times.

GlobalProtect in proxy-mode offers substantial performance and cost advantages over traditional on-premise proxy deployments since it routes web traffic direct-to-cloud from the endpoint. This enables elastic scalability and eliminates latency from backhauling web traffic to centralized hardware appliances.

Moreover, GlobalProtect in proxy-mode can coexist with 3rd-party VPN agents so organizations can start their cyber transformation journey in phases (e.g., first modernizing SWG proxy without replacing existing VPNs). While agent-based proxy will meet most architectural requirements, Prisma Access supports various connectivity options, including agentless, proxy auto-configuration (PAC) files, SD-WAN, and IPsec site-to-site tunnels.

Today, organizations must adopt a solution that deploys easily and is simple to operate. Preconfigured web security policies, guided workflows, and unified policies across all services can be managed from a centralized console to maximize operational and business value.

## Raising UX with fast (and secure) connections

Lastly, a positive user experience is crucial for employee productivity and satisfaction, particularly for today's remote workforce. The agent-based proxy offers several features that enhance the user experience (UX) with faster load times and smoother web browsing.

For instance, GlobalProtect can be placed in hybrid-mode to route all internet-bound proxy traffic to Prisma Access while access to private/local apps can be directly routed to the next-generation firewall ([NGFW](https://www.paloaltonetworks.com/network-security/next-generation-firewall)).

![](https://www.paloaltonetworks.com/blog/wp-content/uploads/2023/07/word-image-298208-3.png)

*Figure 1: Direct access to local applications via hybrid-mode to avoid backhauling to the cloud for private apps.*

Since select Palo Alto Networks hardware and virtual appliances can be deployed as a proxy, NGFW, or both, organizations can optimize deployment for the fastest path without compromising security. Companies can further customize the web experience for different employee groups by tailoring access permissions, routing options, and bandwidth allocation so they can perform their roles effectively.

## A modern architecture includes Cloud SWG with agent-based proxy

As a digital business, organizations must rethink their approach to secure web gateways and consider the evolving threat landscape, the need for operational simplicity, and the user experience. Agent-based proxy capabilities coupled with cloud-delivered SWG will modernize your architecture to protect apps, users, and data with industry-leading internet security, all without overhauling your current environment. Empower your network security teams to harness the power and scalability of cloud-delivered SWG to protect what matters most: your company's digital way of work and life.

[Prisma Access](https://www.paloaltonetworks.com/sase/access) is a security service edge ([SSE](https://start.paloaltonetworks.com/gartner-sse-mq-leader-2023)) solution that delivers best-in-class cloud SWG by coordinating intelligence across all attack vectors to [stop exploits and unknown threats](https://www.paloaltonetworks.com/resources/ebooks/defending-against-modern-web-based-threats), including malware, fileless attacks, phishing, malicious URLs, as well as DNS-based attacks. Organizations with proxy-based architectures can easily transition to Prisma Access with minimal networking changes to operationalize next-generation internet security. To learn about Prisma Access Cloud SWG, visit our [webpage](https://www.paloaltonetworks.com/sase/secure-web-gateway) or [contact](https://www.paloaltonetworks.com/company/contact-sales) your Palo Alto Networks representative.

*** ** * ** ***

## Related Blogs

### [Cloud-delivered Security](https://www.paloaltonetworks.com/blog/sase/category/cloud-delivered-security/?ts=markdown), [Mobile Users](https://www.paloaltonetworks.com/blog/sase/category/mobile-users/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Remote Workforce](https://www.paloaltonetworks.com/blog/category/remote-workforce/?ts=markdown), [Threat Prevention](https://www.paloaltonetworks.com/blog/category/threat-prevention-2/?ts=markdown), [Use-Cases](https://www.paloaltonetworks.com/blog/sase/category/use-cases/?ts=markdown), [Web Security](https://www.paloaltonetworks.com/blog/category/web-security/?ts=markdown)

[#### Five Misconceptions About Secure Web Gateways](https://www2.paloaltonetworks.com/blog/sase/five-misconceptions-about-secure-web-gateways/)

### [Cloud-delivered Security](https://www.paloaltonetworks.com/blog/sase/category/cloud-delivered-security/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/sase/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Use-Cases](https://www.paloaltonetworks.com/blog/sase/category/use-cases/?ts=markdown), [Web Security](https://www.paloaltonetworks.com/blog/category/web-security/?ts=markdown)

[#### Your Secure Web Gateway Needs a Cloud Makeover](https://www2.paloaltonetworks.com/blog/sase/your-secure-web-gateway-needs-a-cloud-makeover/)

### [Cloud-delivered Security](https://www.paloaltonetworks.com/blog/sase/category/cloud-delivered-security/?ts=markdown), [Mobile Users](https://www.paloaltonetworks.com/blog/sase/category/mobile-users/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/sase/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Web Security](https://www.paloaltonetworks.com/blog/category/web-security/?ts=markdown)

[#### Reduce Your Odds of Getting Snared in the Phishing Net](https://www2.paloaltonetworks.com/blog/sase/reduce-your-odds-of-getting-snared-in-the-phishing-net/)

### [Mobile Users](https://www.paloaltonetworks.com/blog/sase/category/mobile-users/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/sase/category/product-features/?ts=markdown), [Use-Cases](https://www.paloaltonetworks.com/blog/sase/category/use-cases/?ts=markdown), [Web Security](https://www.paloaltonetworks.com/blog/category/web-security/?ts=markdown)

[#### Use Cloud SWG to Simplify Remote Workforce Security](https://www2.paloaltonetworks.com/blog/sase/use-cloud-swg-simplify-remote-workforce-security/)

### [Cloud-delivered Security](https://www.paloaltonetworks.com/blog/sase/category/cloud-delivered-security/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/sase/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown)

[#### On-Premises? Making the Case for Cloud SWG](https://www2.paloaltonetworks.com/blog/sase/on-premises-making-the-case-cloud-swg/)

### [Cloud-delivered Security](https://www.paloaltonetworks.com/blog/sase/category/cloud-delivered-security/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/sase/category/product-features/?ts=markdown), [Use-Cases](https://www.paloaltonetworks.com/blog/sase/category/use-cases/?ts=markdown)

[#### Cloud SWG Inoculates Network Security for Pharmaceutical Firm](https://www2.paloaltonetworks.com/blog/sase/cloud-swg-inoculates-network-security-pharmaceutical-firm/)

### Subscribe to Sase Blogs!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
![spinner](https://www2.paloaltonetworks.com/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up  
Please enter a valid email.  
By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.  
This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply.  
{#footer} {#footer}

## Products and Services

* [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown)

* [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown)

* [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown)

* [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown)

* [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown)

* [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown)

* [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown)

* [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown)

* [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown)

* [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown)

* [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown)

* [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown)

* [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown)

* [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown)

* [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown)

* [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown)

* [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown)

* [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown)

* [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown)

* [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown)

* [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown)

* [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown)

* [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)

* [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)

* [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)

* [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown)

* [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)

* [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)

* [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)

* [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)

* [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)

* [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)

* [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown)

* [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown)

* [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown)

* [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown)

* [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown)

## Company

* [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown)
* [Careers](https://jobs.paloaltonetworks.com/en/)
* [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)
* [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown)
* [Customers](https://www.paloaltonetworks.com/customers?ts=markdown)
* [Investor Relations](https://investors.paloaltonetworks.com/)
* [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown)
* [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown)

## Popular Links

* [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown)
* [Communities](https://www.paloaltonetworks.com/communities?ts=markdown)
* [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown)
* [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
* [Event Center](https://events.paloaltonetworks.com/)
* [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center)
* [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown)
* [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown)
* [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown)
* [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown)
* [Tech Docs](https://docs.paloaltonetworks.com/)
* [Unit 42](https://unit42.paloaltonetworks.com/)
* [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd)
  ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)
* [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown)
* [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown)
* [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown)
* [Documents](https://www.paloaltonetworks.com/legal?ts=markdown)

Copyright © 2026 Palo Alto Networks. All Rights Reserved

* [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks)
* [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown)
* [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/)
* [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks)
* [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks)
* EN  
  Select your language