Network Security · Core
Secure Web Gateway / DNS Security
Filters web and DNS traffic for users.
9 options listedTypical cost: $36-$96/user/yrPROTECT (PR)
Overview
SWGs proxy outbound web traffic to enforce URL filtering, malware inspection, and data controls; DNS-layer security blocks malicious domains before connection. Both are now core SASE/SSE components delivered from the cloud. Licensed per user with tiered feature bundles. Roaming/off-network coverage is a key buying factor.
Strong, low-effort web-threat reduction for users and roaming devices.
Advantages
- Cisco Umbrella is a fast DNS-layer win and easy to deploy
- Zscaler/Netskope add deep inline inspection
- protects off-network users.
Trade-offs
- Per-user cost adds up
- inline proxy can add latency or break apps
- full value needs broader SSE suite commitment.
Vendors & tools in this area
Forcepoint ONE (SWG)Commercial
Cloud-native SWG folded into the Forcepoint ONE SSE platform (also bundles CASB/ZTNA).
Visit site →AdGuard HomeOpen source
Network-wide DNS sinkhole/ad-and-tracker blocker — a Pi-hole alternative with a more batteries-included UI.
Visit site →