Understand Behavioral Differences Between the Skyhigh Client and the SCP

Last updated
Save as PDF

This topic details the behavioral differences between the new Skyhigh Client (SC) and the Skyhigh Client Proxy (SCP).

Skyhigh Client (5.0.0)	Skyhigh Client Proxy (4.9.4 or earlier)
When mutual authentication fails with the alternate proxy, the new Skyhigh Client blocks domains accessed from the alternate list redirection, even when the primary proxy is available.	When mutual authentication fails with the alternate proxy, the Client Proxy routes domains accessed from the alternate list redirection through the primary proxy.
The Window Auto-Tuning feature is not present in the new Skyhigh Client 5.0.0. This invariably increases the TCP window size and the download speed.	The Skyhigh Client Proxy v4.9.4 or earlier includes Window Auto-Tuning, a configurable feature, which improves performance for applications by dynamically adjusting the TCP receive window size.
The Skyhigh Client doesn't display the Block page for the sites when a Block rule is applied either as a Preset or a Custom rule of the policy.	The Skyhigh Client Proxy displays the Block page for the sites when a Block rule is applied either as a Preset or a Custom rule of the policy.
The Skyhigh Client requires port 8080 to be available for communication.	The Skyhigh Client Proxy doesn't require port 8080 for communication.
In Skyhigh Client, only the applicable process bypass list is applied to non-redirected ports.	In Skyhigh Client Proxy, the IP and domain bypass list were incorrectly being applied to non-redirected ports.
During traffic redirection, the Skyhigh Client utilizes a strict top-down selection logic for its proxy list (On-prem or Cloud); it connects to the first reachable proxy and will not automatically bypass on-prem gateways to establish a Secure Channel cloud connection.	During traffic redirection, the Skyhigh Client Proxy prioritizes the Secure Channel (Cloud Proxy) dynamically, regardless of its position in the proxy list.