Definition

ProxySG is the on-premise web proxy appliance line originally developed by Blue Coat, acquired by Symantec in 2016, and now owned by Broadcom. ProxySG was the dominant enterprise web proxy of the 2010s, deployed at branch perimeters and WAN aggregation points for URL filtering, SSL inspection, and policy enforcement. Most ProxySG hardware has reached end-of-sale; existing deployments continue to work but new capacity must go to Cloud SWG / WSS. The migration from ProxySG to Cloud SWG is the second-most-common Symantec project of 2026, after SEPM-to-SES Complete endpoint migration. Policy translation from CPL (ProxySG's policy language) to Cloud SWG's JSON-based model is the main work - direct migration rarely works cleanly.

Symantec products that implement this

  • Symantec Cloud Secure Web Gateway - Cloud-delivered web security with SSL inspection, URL filtering, sandboxing, content disarm, and CASB integration. The cloud successor to the ProxySG appliance.

Related terms

  • SWG (Secure Web Gateway) - Security service that inspects web traffic for malware, enforces URL policy, and applies content controls - historically on-prem, now cloud-delivered.
  • WSS (Web Security Service) - Symantec's cloud-delivered SWG product (now also marketed as Cloud SWG).

Deep-dives on ProxySG