Register Cloud SWG (WSS) on Edge SWG (ProxySG)

Products

Cloud Secure Web Gateway - Cloud SWG ProxySG Software - SGOS

Issue/Introduction

When using the feature to Register Cloud SWG (WSS) and Edge SWG (ProxySG) in the current system, the only permitted username is sg-register.

The password for the service is generated as a token in the WSS portal. WSS uses this token to identify the appropriate Web Security Service account.

This article details the steps to configure Cloud SWG (WSS) and Edge SWG (ProxySG) integration.

Environment

Register proxy device to cloud method works with license type with fixed single serial number.

With ISG Proxy enterprise license, same serial number can be used to create multiple proxy applications.

Ref--https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/integrated-secure-gateway/2-4/About-ISG/About-Licensing.html

As cloudSWG would not able recognize unique devices proxy forwarding method needs to used.

https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/cloud-swg/help/conn-matrix/conn-about-proxyforward.html

Resolution

This configuration takes place in two parts - Configure WSS to expect a connection from your ProxySG appliance(s) using a unique token, then configure your ProxySG appliance(s) to use that token.

Cloud SWG (WSS) Web Security Service Portal

Log in to your account on the WSS portal at https://portal.threatpulse.com.
From Account Configuration > Products & Licensing, select On-Premises ProxySG under Linked Products.
Click New Token. The portal displays the New Integration dialogue, prompting you to pick up the Token and its settings.
You can set the token generated by the portal to expire by a certain time or date, after a specific amount of use, or never. Select the option appropriate to your configuration.
NOTE: The same token can be used on multiple ProxySG appliances, as long as it is valid.
Right-click the token field and select copy to save the token to your local system's clipboard. This token is the password for your connection from EdgeSWG (proxySG) to CloudSWG (WSS).

ProxySG

Connect to your Edge SWG (ProxySG) appliance(s) via GUI and go to Configuration tab:
Under Cloud Configuration > Cloud Registration > Register This Device
Enter "sg-register" as the username, Token as a password and add the location name so it would be added to the Cloud portal for incoming user traffic.

Additional Information

https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/web-security-service/help/wss-api/api-keys.html