About Client Proxy
The Skyhigh Security Client Proxy software is a unified client that directs traffic to Skyhigh’s security solutions, such as Skyhigh Private Access, Cloud Firewall, and Secure Web Gateway (SWG). It helps safeguard your endpoint users from security threats when accessing the web, whether they are inside or outside your network.
The Skyhigh Client Proxy is responsible for redirecting traffic from endpoints to the Skyhigh Security Service Edge (SSE) solution, which can be deployed both on-premises and in the cloud. Using policies configured through its policy engine, the Skyhigh Client Proxy intercepts and redirects various types of traffic to the different SSE services based on the license subscription.
SCP & Secure Web Gateway - Hybrid Solution
Client Proxy is an essential component of the Skyhigh Security Web Protection hybrid solution. It works with the Cloud as well as the On-Prem instances of the SWG. This solution allows you to integrate the network-based and cloud-based security functions provided by Skyhigh Security Web Gateway and Skyhigh Security Web Security Gateway Service (Skyhigh Security WGCS), respectively.
The Client Proxy software allows or redirects web traffic depending on the location of the endpoint:
- Endpoints located inside the network or connected by VPN — Traffic is allowed to continue to a Web Gateway appliance installed on the network for filtering.
- Endpoints located outside the network — Traffic is redirected to SWG for filtering.
SCP & Skyhigh Private Access
The Client Proxy enables Skyhigh Private Access to establish secure access to corporate applications from any device and location. The solution integrates with other Skyhigh SSE products to offer unified visibility, granular access control, and end-to-end data protection through a unified Cloud Management console. Additionally, the client acts as an enabler for the in-house DLP and RBI functionalities, to which the Private Access solution is integrated as well.
SCP & Skyhigh Cloud Firewall
The Skyhigh Client Proxy software is compatible with the Skyhigh Cloud Firewall, providing enhanced multi-layered protection and the capability for deep packet inspection. This combination offers organizations improved visibility, granular policy enforcement, and greater control over applications to defend against web-based threats.
The Skyhigh Client Proxy redirects traffic to the Cloud Firewall based on the configured policies, effectively managing both HTTP and non-HTTP traffic. The integration of Client Proxy policies with Cloud Firewall policies facilitates traffic redirection for thorough inspection.
Additionally, the Skyhigh SSE agent threat module works in conjunction with the Skyhigh Anti-virus and Sandboxing Engine to ensure complete protection for end-point devices, while also maintaining secure connectivity to the Skyhigh SSE network.
Integration with Endpoint Security
When deploying Client Proxy with Trellix Endpoint Security on the endpoints, you install and manage each product separately using Trellix ePO SaaS or Trellix ePO Cloud.
- Client Proxy administrators — Configure policies and run tasks as usual.
- Endpoint Security administrators — Have the option of configuring Trellix Endpoint Security Web Control so that it is disabled while Client Proxy is installed and actively redirecting web traffic.
On endpoints running Windows, you can view whether Client Proxy is installed and running on the endpoint and actively redirecting traffic by opening the About Skyhigh Client Proxy window from the Start menu.