Symantec Cloud SWG&Edge SWG

🧠 Concepts

• SASE: Cloud-Era Secure Access
  An introduction to the SASE model and the role of Cloud SWG in the modern enterprise network.

🧩 Environment

• Installing pfSense on ESXi
  A base setup guide for pfSense to support SWG testing and VPN scenarios.
• Installing Symantec Edge SWG on VMware ESXi
  Step-by-step guide for deploying Edge SWG in a virtual environment.
• Installing SimpleSAMLphp with Nginx
  Deploying a lightweight SAML IdP with SimpleSAMLphp on Nginx.

🔌 Access Methods to SWG

• How to Configure Explicit Proxy for Cloud SWG
  Configuring explicit proxy mode for Cloud SWG using PAC files or manual settings.
• Configuring Symantec Cloud SWG Static IP IPsec VPN with pfSense
  Setting up IPsec VPN to Cloud SWG using a static public IP and pfSense.
• Connecting pfSense with Symantec Cloud SWG using DDNS and IPsec IKEv2
  A solution for dynamic IP scenarios using DDNS and IKEv2 VPN.
• Seamless Integration: Edge SWG and Cloud SWG Traffic Flow Control
  Forward traffic from Edge SWG to Cloud SWG for unified and flexble traffic control.

🔐 TLS & HTTPS

• Understanding TLS 1.3 with Wireshark
  In-depth breakdown of the TLS 1.3 handshake using Wireshark.
• Understanding TLS/SSL Inspection
  How SWG inspects and decrypts HTTPS traffic securely.

🔑 SAML Authentication & Integration

• Integrating Symantec Cloud SWG with SimpleSAMLphp for Seamless Authentication
  Enabling SAML-based authentication for Cloud SWG with a custom IdP.
• How Does SAML Work? A Complete Step-by-Step Analysis of Single Sign-On
  A comprehensive explanation of how SAML SSO works, including request/response details.

🛠️ Troubleshooting & Debugging

• Decrypting HTTPS Traffic with SSLKEYLOGFILE
  Useful for troubleshooting HTTPS issues by decrypting browser traffic using SSL key logs.
• Simplify Your SSO Debugging: A Guide to SAML Tracer
  Step-by-step guide on using browser tools to trace and debug SAML authentication issues.

🧰 Other

• Keep Your Dynamic IP Online: NameSilo DDNS Auto-Update Guide
  Namesilo DDNS auto-update script to keep dynamic IP reachable.
• Streamlining Symantec Cloud SWG Management with Python APIs
  Use Python to automate Cloud SWG tasks like log retrieval and policy management via API.