Secure Internet Access leverages a secure web gateway (SWG) to enable visibility of all internet-bound traffic. With Secure Internet Access, you can:

• Monitor and control access to websites and risky applications.
• Defend against detected internet-based threats.

• Maximize data protection and application security.

  You can use one of two modes to protect your organization’s web traffic:

• Discover and Core Protection: This mode enables selective Transport Layer Security (TLS) inspection only for high-risk categories such as phishing, malware, file sharing, and gaming.

  In this mode, administrators can discover traffic and apply core phishing and malware protection without the intrusive TLS inspection that can sometimes block applications due to certificate pinning.

• Advanced Protection: This mode enables TLS inspection for all categories. We recommend applying this mode once traffic is visible on the Management Console, and once a user device is discoverable. Administrators need to bypass certificate-pinned apps from TLS inspection.