The VMware Cloud Web Security (CWS) Web Proxy feature is designed to activate the standalone use of the Cloud Web Security service without the need for VMware SD-WAN or VMware Secure Access (SA). Any device with a modern browser that can support a network proxy configuration, either manually or automatically through a proxy auto-configured (PAC) file can have its Web traffic redirected to the VMware Cloud Web Security service for security inspection.
The Web Proxy Service is hosted by a
VMware SASE Point of Presence (PoP) and activated using the
VMware Cloud Orchestrator. When users activate the Web Proxy functionality in CWS:
- A unique proxy URL is generated for the tenant
- A CWS policy is associated with the Web proxy service
- A default PAC file is generated by the system
- Custom PAC files can be created
- Orchestrator instructs the PoP to listen for proxied connections
- Proxy connections are service chained to CWS for inspection