BIG-IP Access Policy Manager: Secure Web Gateway

Case Management

MY PRODUCTS & PLANS

Subscriptions

Product Usage

Trials

Registration Keys

Resources
Downloads
Licensing
Activate F5 product registration key
Ihealth
Verify the proper operation of your BIG-IP system

F5 University
Get up to speed with free self-paced courses
Devcentral
Join the community of 300,000+ technical peers

F5 Certification
Advance your career with F5 Certification
Product Manuals
Product Manuals and Release notes

Manual : BIG-IP Access Policy Manager: Secure Web Gateway

Applies To:

Show Versions

Show Versions

BIG-IP APM

21.0.0, 17.5.1, 17.5.0, 17.1.3, 17.1.2, 17.1.1, 17.1.0

Original Publication Date: 03/14/2023
Updated Date: 11/06/2025

BIG-IP APM Secure Web Gateway Overview

About APM Secure Web Gateway

Benefits of using APM for web access

Secure Web Gateway subscription benefits

What happens when the Secure Web Gateway subscription expires?

About the URL database URL categories

About user-defined URL categories

About APM session management cookies and forward proxy

Explicit Forward Proxy Configuration

Overview: Configuring APM to act as an explicit forward proxy

Overview: Processing RDP traffic on a device configured for explicit forward proxy

Transparent Forward Proxy Configuration

Overview: Configuring transparent forward proxy

Overview: Configuring transparent forward proxy in inline mode

Remote Access Forward Proxy Configurations

Overview: Configuring explicit forward proxy for Network Access

Overview: Configuring transparent forward proxy for remote access

Policies for APM (with SWG) as a Secure Web Gateway

Overview: Controlling forward proxy traffic with SWG

Policies for APM as a Secure Web Gateway

Overview: Controlling forward proxy traffic with APM

SSL Bypass and Intercept with APM

Overview: Bypassing SSL forward proxy traffic with APM

Forward Proxy Chaining with APM

BIG-IP system forward proxy chaining and APM benefits

Interoperability characteristics for forward proxy chaining

Configuration essentials for forward proxy chaining

Overview: Offloading authentication from the next hop

Overview: Using NTLM pass-through to the next hop

Overview: Inserting HTTP headers for authentication to the next hop

Overview: Authenticating with HTTP Basic to the next hop

Overview: Configuring Basic or NTLM SSO to the next hop

Overview: Configuring Kerberos SSO to the next hop

Overview: Configuring Kerberos SSO to a resource server

Overview: Updating virtual servers for forward proxy chaining with APM

Configuring the URL Database for SWG

About initial configuration steps for SWG

Overview: Downloading and updating the URL database for SWG

Customizing URL Categories and Filters for SWG

Overview: Customizing URL categories and filters for SWG

Creating User-Defined URL Categories and Filters for APM

Overview: Configuring user-defined URL categories and filters

Configuring an SWG Agent for User Identification

About user identification with an SWG F5 agent

Overview: Configuring the SWG F5 DC Agent

Overview: Configuring the SWG F5 Logon Agent

Overview: Creating a script on a Windows system for SWG F5 Logon Agent

Secure Web Gateway Statistics

About SWG data for threat monitoring

About Secure Web Gateway statistics

Overview: Monitoring Internet traffic for threats

Logging and Reporting

Overview: Configuring remote high-speed APM and SWG event logging

Configuring logging for the URL database