Smart Switch

When the agent is configured to work in Smart Switch mode then the agent runs by default as Proxy Connect and performs periodic access checks every 60 seconds to several well-known web-sites for which the expected response is known, such as https://captive.apple.com/ and few others.

The goal is to verify:

  • Direct access to the internet sending request to these web-sites directly (ignoring any configured proxy on the endpoint).
  • Access these web-sites by forwarding the traffic to the Cloud Security Gateway (CSG proxy).
  • Send direct request to the Cloud Security Gateway Disposition Service (ignoring any configured proxy on the endpoint)

Based on the above access tests results, the agent determines the mode to operate.

Table 1. Operating Modes
Direct Internet Access Access via CSG Proxy Access to Disposition Service Agent Mode of Operation
OK OK OK/FAIL Proxy Connect
OK FAIL OK Direct Connect
FAIL OK OK/FAIL Proxy Connect
OK FAIL FAIL The configured fallback
FAIL FAIL FAIL