Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Secure Web Gateway 13.0 (LA) Release Notes

Skyhigh releases Secure Web Gateway 13.0 (LA), enhancing performance and security for on-premise users. This version introduces a major architectural change by replacing the operating system, MLOS, with SLOS (Skyhigh Linux OS) version 1.6. SLOS 1.6 is built on AlmaLinux 9.6 and provides a more stable and secure foundation. For more details about SWG 13.0, see About Secure Web Gateway 13.0

Install SWG 13.0 

You can download the build from the Content & Cloud Security Portal. Back up policies and configurations from an existing SWG 12.2.x or earlier deployment and restore them to an SWG 13.0 hardware or virtual appliance. For details, see Backup and Restore

NOTE: Policy synchronization to Cloud (Web Hybrid) is currently not supported. Availability is planned, and we will share further updates.

Supported Platforms
  • Supported Appliance Models. WBG-5000-E, WBG-5500-E, WBG-4500-E, WBG-5000-F and WBG-5500-F.
  • Supported Virtual Platforms. VMware ESXi 8.0, Hyper-V 2025.
Key Capabilities 
Network Management

SWG 13.0 replaces the legacy Network Service with the NetworkManager service, which now handles all network connection management. Administrators should use the nmcli command-line tool to configure network interfaces, including assigning DHCP IP addresses. For more details, see Network Management Changes

Return to Sender

Provides support for the Return to Sender feature, enabling controlled handling and routing of outbound traffic based on defined policies. For more details, see Return to Sender.

HSM Integration

Enables integration with supported HSM providers, including Entrust nShield HSM, Thales Luna, and Fortanix DSM, to securely store and manage cryptographic keys, enhancing overall security for encryption and key operations. For more details, see Hardware Security Module.

Supported SSL Versions

SSLv3 has been completely removed from all SSL protocol configurations and settings to enhance security. By default, only TLS 1.2 and TLS 1.3 are enabled, ensuring alignment with modern security standards and best practices. For more details, see View Supported SSL Versions.

Boot Mode

SWG 13.0 utilizes UEFI (Unified Extensible Firmware Interface) mode, an advanced software that replaces traditional BIOS (Basic Input/Output System) firmware, for enhanced performance and security. 

 

  • Was this article helpful?