Secure Web Gateway 13.0 (LA) Release Notes
Skyhigh releases Secure Web Gateway 13.0 (LA), enhancing performance and security for on-premise users. This version introduces a major architectural change by replacing the operating system, MLOS, with SLOS (Skyhigh Linux OS) version 1.6. SLOS 1.6 is built on AlmaLinux 9.6 and provides a more stable and secure foundation. For more details about SWG 13.0, see About Secure Web Gateway 13.0.
Install SWG 13.0
NOTE: There is no direct upgrade or migration path from SWG 12.x or earlier to 13.x. You must perform a fresh installation to upgrade to 13.x.
To upgrade, download the 13.0 build from the Content & Cloud Security portal and perform a fresh installation. Firstly, back up your policies and configurations from an existing SWG deployment. Next, reinstall your hardware or virtual appliance with SWG 13.0. Finally, restore your backup to an SWG 13.0 hardware or virtual appliance. For details, see Backup and Restore.
NOTE: Policy synchronization to Cloud (Web Hybrid) is currently not supported. Availability is planned, and we will share further updates.
Supported Platforms
- Supported Appliance Models. WBG-5000-E, WBG-5500-E, WBG-4500-E, WBG-5000-F and WBG-5500-F.
- Supported Virtual Platforms. VMware ESXi 8.0, Hyper-V 2025.
Key Capabilities
Network Management
SWG 13.0 replaces the legacy Network Service with the NetworkManager service, which now handles all network connection management. Administrators should use the nmcli command-line tool to configure network interfaces, including assigning DHCP IP addresses. For more details, see Network Management Changes
Return to Sender
Provides support for the Return to Sender feature, enabling controlled handling and routing of outbound traffic based on defined policies. For more details, see Return to Sender.
HSM Integration
Enables integration with supported HSM providers, including Entrust nShield HSM, Thales Luna, and Fortanix DSM, to securely store and manage cryptographic keys, enhancing overall security for encryption and key operations. For more details, see Hardware Security Module.
Supported SSL Versions
SSLv3 has been completely removed from all SSL protocol configurations and settings to enhance security. By default, only TLS 1.2 and TLS 1.3 are enabled, ensuring alignment with modern security standards and best practices. For more details, see View Supported SSL Versions.
Boot Mode
SWG 13.0 utilizes UEFI (Unified Extensible Firmware Interface) mode, an advanced software that replaces traditional BIOS (Basic Input/Output System) firmware, for enhanced performance and security.