Cisco Secure Web Gateway review
A cloud full proxy with filtering, inspection, malware scanning, and broad endpoint support.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Cisco Secure Web Gateway is a cloud-delivered secure web gateway and full proxy for organizations that need to inspect, filter, and control internet traffic. It supports web, Windows, macOS, Linux, iOS, and Android environments. Traffic can be forwarded through IPsec tunnels, PAC files, or proxy chaining, while SAML-based authentication connects access control to identity providers. It is designed for teams that need centralized web filtering across a broad mix of endpoints.
Its strongest area is the depth of web traffic inspection. The gateway performs full-proxy inspection of HTTP and HTTPS traffic, including TLS decryption and HTTPS inspection. URL and category-based filtering controls access to web content, while granular application activity controls add policy detail. Downloaded-file malware scanning and sandboxing for unknown files extend protection beyond basic URL blocking. Integrations with SAML identity providers, Cisco Duo, and Cisco Catalyst SD-WAN support identity and network workflows around the proxy.
Cisco Secure Web Gateway uses contact-sales pricing rather than published plan tiers, so organizations should expect a sales-led evaluation. The product remains focused on cloud web gateway functions and HTTP/HTTPS forwarding, making it a fit for teams prioritizing web inspection, filtering, and endpoint coverage. Organizations already working with Cisco identity or networking products may find the ecosystem alignment useful. Cisco is transitioning Umbrella SIG capabilities to Cisco Secure Access, with existing Umbrella subscriptions renewable through January 2028 and support continuing through January 2029. Choose it for centralized cloud web control; consider another option if your primary requirement sits outside HTTP/HTTPS proxy security.
Cisco Secure Web Gateway pros and cons
- Where it wins
- Full-proxy HTTP/HTTPS inspection with TLS decryption
- Malware scanning and sandboxing for downloaded and unknown files
- Supports web, desktop, and mobile platforms with multiple forwarding options
- Where it doesn't
- Pricing is handled through contact sales
- Deployment is centered on HTTP/HTTPS web traffic
- Umbrella SIG capabilities are transitioning to Cisco Secure Access
Cisco Secure Web Gateway fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. How we rank.
Last updated · How we research and update