The Secure Email Gateway (SEG) proxy server is a separate server installed in-line with your existing email server to proxy all email traffic going to mobile devices. Based on the settings you define in the AirWatch Console, the SEG Proxy server allows or blocks every mobile device it manages.


The SEG Proxy server filters all communication requests to the corporate email server and relays traffic only from approved devices. This relay protects the corporate email server from communicating with any devices.

Install the SEG server in your network so that it is in-line with the email traffic of the corporation. You can also install it in a Demilitarized Zone (DMZ) or behind a reverse proxy. You must host the SEG server in your data center, regardless of whether your AirWatch MDM server is in the cloud or on premises.

SEG Cloud_On Prem Architecture

For more information on how to set up the SEG Proxy model, see SEG Architecture