Smart Switch
When the agent is configured to work in Smart Switch mode then the agent runs by default as Proxy Connect and performs periodic access checks every 60 seconds to several well-known web-sites for which the expected response is known, such as https://captive.apple.com/ and few others.
The goal is to verify:
- Direct access to the internet sending request to these web-sites directly (ignoring any configured proxy on the endpoint).
- Access these web-sites by forwarding the traffic to the Cloud Security Gateway (CSG proxy).
- Send direct request to the Cloud Security Gateway Disposition Service (ignoring any configured proxy on the endpoint)
Based on the above access tests results, the agent determines the mode to operate.
Direct Internet Access | Access via CSG Proxy | Access to Disposition Service | Agent Mode of Operation |
---|---|---|---|
OK | OK | OK/FAIL | Proxy Connect |
OK | FAIL | OK | Direct Connect |
FAIL | OK | OK/FAIL | Proxy Connect |
OK | FAIL | FAIL | The configured fallback |
FAIL | FAIL | FAIL |