Configuring failover to the hybrid service
It is possible to configure failover to the hybrid service for filtered locations that use explicit proxies. This ensures that users are able to access the Internet and policy enforcement always occurs, even if on-premises proxies are unavailable.
Failover to the hybrid service for a filtered location must be approved, to ensure that web protection services can provision the correct number of users at the data center nearest to your location. Once failover for a filtered location has been approved, it does not need to be re-approved if you change the failover details or later disable and then re-enable failover.
To configure failover to the hybrid service: