McAfee Web Gateway

McAfee Web Gateway

Advanced, proactive security for enabling safe, secure access to the web

Next Steps:


McAfee offers the advanced security, control, and flexibility organizations need to take full advantage of the web.

Unparalleled threat protection — The No. 1-rated anti-malware solution for web threats, McAfee Web Gateway analyzes the nature and intent of all content and code entering the network from requested web pages, providing immediate protection against malware and other hidden threats. With layered security that combines local and cloud-based protection, powered by McAfee Global Threat Intelligence, you can count on McAfee Web Gateway for instant, advanced protection to stop zero-day threats, spyware, and targeted attacks — without a signature. Learn more about McAfee Web Gateway's latest threat protection enhancements that provide state-of-the-art behavior-based emulation and detection techniques. 

Granular application discovery and control — Get point-and-click control for nearly 1,000 web applications and granular function control within those applications. From social and streaming media to file sharing and anonymizing, enable the applications you want, manage how they are used, and control what information is shared. Powerful reporting tools identify unknown or rogue applications, giving you the power to block potential security or productivity threats represented by applications that are not consistent with enterprise policy.

Powerful safeguards against data loss — Scan user-generated content on all key web protocols, using state-of-the-art DLP technology, and prevent confidential or suspect information from leaking out of your enterprise through blogs, wikis, and other Web 2.0 applications and sites. Protect sensitive data that is transferred to cloud storage with inline encryption, preventing users from downloading or reading files without the protections of Web Gateway.

Web identity management — McAfee Web Gateway includes optional single sign-on (SSO) connectors for more than 500 popular SaaS applications. Use SSO to improve end-user convenience, enhance security, and reduce expensive password-related help desk calls. McAfee Web Gateway also supports integration with McAfee One Time Password, which enables two-factor authentication for securing network access, achieving compliance, and protecting your resources from unauthorized access.

Easy, efficient management — With McAfee Web Gateway, you can stop deploying and managing multiple standalone web products. Web Gateway integrates numerous protections, from web filtering and anti-malware to SSL scanning and content control, all with a simplified management footprint and a flexible policy engine. Share a single security policy across protections and protocols, and meet the needs of your entire organization, enhancing protection while saving time and money.

Agile infrastructure and performance — McAfee Web Gateway includes high-performance, enterprise-strength, forward- and reverse-proxy software that provides the flexible authentication, administration, and authorization controls required by today's most demanding enterprises and service providers. Numerous deployment options — including purpose-built appliances or blades, a virtualized platform, or integration with cloud-based McAfee SaaS Web Protection — ensure Web Gateway scales to meet the needs of your unique enterprise.

Protect mobile devices from malware attacks

Read White Paper

Spotlight on shadow IT. The dark side of evading IT policies.

Learn More

Features & Benefits

Get the industry’s best protection

Use proactive intent analysis to filter out malicious content from web traffic in real time. By scanning a web page’s active content, emulating and understanding its behavior, and predicting its intent, McAfee Web Gateway proactively protects against zero-day and targeted attacks. Outbound malware detection identifies and isolates existing infections phoning home, and prevents sensitive data from leaving the organization through Web 2.0 sites.

Use layered security to enhance protection

Web Gateway combines local protection from McAfee Gateway Anti-Malware Engine, its powerful, proactive intent analysis, with cloud-based McAfee Global Threat Intelligence (GTI) to provide advanced protection. For both URL categorization and security-focused web reputation, choose between on-premise and cloud lookups, or opt to use a combination of both for optimal protection and performance. Additional protection through McAfee file reputation cloud-based virus lookup capabilities enable Web Gateway to provide greater protection while optimizing security on a single platform.

Extend management with a powerful policy engine and granular application control

A powerful policy engine enables unmatched flexibility and control in creating and applying policy, supporting the multi-tenancy needs of the largest enterprises and service providers. Web Gateway also extends this flexible control to web applications. Beyond simply allowing or denying access, Web Gateway provides granular function control within nearly 1,000 web applications, including popular social and streaming media, file sharing, and anonymizing applications.

Block data loss

Keep confidential information from leaking out of your organization by scanning user-generated content on all key web protocols. Have advanced data loss needs? Rely on Web Gateway to integrate with McAfee Data Loss Prevention (DLP) solutions.

Protect encrypted traffic

Close the new backdoor through your security barrier with fully integrated malware detection, SSL inspection, and certificate validation directly on the Web Gateway appliance.

Leverage powerful reporting tools and customizable dashboards

Identify your organization’s usage trends, isolate problems, document inappropriate web activity, and comply with regulations with powerful reporting capabilities and integration with the McAfee ePolicy Orchestrator (ePO) platform. Use this information to tailor filtering settings to best enforce your web-usage policies.

System Requirements

Deployment flexibility is a hallmark of McAfee Web Gateway. Options include a virtual machine, hardware appliance, and blade server.

Virtual appliance requirements

  • VMware ESX or VMware ESXi (If you are running version 5.5, make sure that you use update 2 or a later update of this version)
  • Virtual machine host system with the following specifications:
    • CPU: 64-bit capable
    • Virtualization extension: VT-x/AMD-V
  • Virtual machine with the following specifications (production environment):
    • Memory: 16 GB
    • Hard disk space: 200 GB
    • CPU cores: 4 (minimum)

Hardware appliance requirements

A complete range of enterprise and medium-capacity appliances offers affordable protection and scalability for the most demanding IT environments. View the hardware specifications sheet for more details.

Model WG-4500-C

  • Form factor: 1U rack mount
  • RAM: 32 GB
  • Processor: Dual core
  • Processor cache: 4 MB
  • Disk: 2 x 500 GB SATA 7200 RPM
  • RAID level: Raid-1
  • Power supply: 350 W
  • Interfaces: 4 x 10/100/1000 MB Ethernet

Model WBG-5000-C

  • Form factor: 1U rack mount
  • RAM: 96 GB
  • Processor: 6 core
  • Processor cache: 15 MB
  • Disk: 2 x 600 GB SAS 10.6K RPM
  • RAID level: Raid-1
  • Power supply: 2 x 650 W
  • Interfaces: 4 x 10/100/1000 Ethernet

Model WBG-5500-C

  • Form factor: 1U rack mount
  • RAM: 128 GB
  • Processor: 2 x 10 core
  • Processor cache: 25 MB
  • Disk: 6 x 300 GB SAS 10.6K RPM
  • RAID level: Raid-10
  • Power supply: 2 x 750 W
  • Interfaces: 4 x 10/100/1000 Ethernet

Demos / Videos


A core element of any cloud security strategy is the enforcement of acceptable usage policies. See how McAfee Web Protection provides system and network administrators with more than 1,000 application controls to manage user’s access to specific cloud application functions, such as Facebook or YouTube.

In order to share sensitive or proprietary information on the web without compromising security, you need to prevent bad actors from being able to download or read files. See how the built-in encryption technology of McAfee Web Protection automatically protects files uploaded to popular cloud-based collaboration sites.

McAfee Content Security Reporter delivers unified and detailed insight across threat vectors and malicious content that targets organizations via the network, email, and the web. A rich and flexible range of tools enables administrators to understand threats and trends and match this insight with action.

With today’s increasingly sophisticated threat landscape, organizations need to use a layered security approach. Discover how McAfee’s award-winning Web Gateway uses multiple technologies, working together to offer comprehensive web protection.

Learn how McAfee Web Gateway helps prevent web-based risks introduced by Web 2.0 technology.


Many enterprises prefer to consolidate network security functions onto as few platforms as possible. In this video, Jon Oltsik, a top security analyst at Enterprise Strategy Group, discusses some of the considerations that CIOs and CSOs need to take into account when considering whether to deploy a stand-alone next-generation firewall or a secure web gateway to protect internal IT assets. Not surprisingly, his answer is, “It depends…”.

McAfee Web Protection is the industry’s most flexible secure web gateway solution. Customers can deploy any way they want – on-premises, in the cloud, or both – with the flexibility to adapt as business circumstances change. All it takes is one mouse click to synchronize security policy rules, enabling you to protect all users against web-based threats, regardless of location or device.

Security, access, and deployment flexibility

Learn how McAfee solutions will help IT departments keep threats out of the office network.

McAfee Web Gateway offers powerful, proactive protection against zero-day threats, spyware, and targeted attacks.

Awards / Reviews

2014 AV-TEST Comparative Cloud Gateway Test
2014 AV-TEST Comparative Cloud Gateway Test

AV-TEST performed a comparative review of McAfee Web Protection in the Cloud and Websense Cloud Security 2014 and tested each against a set of malicious URLs with zero-day malware to determine their performance against the latest threats on the web.

CRN Ranks McAfee in their 2013 Top 25 Best Companies to Partner With
CRN Ranks McAfee in their 2013 Top 25 Best Companies to Partner With

Ranked by IT solution providers (SPs), CRN Research ranks the Top 25 must-have technology suppliers from a list of nearly 230 companies in 12 product categories that SPs need to consider when formalizing their partnerships today and for the future. 1,000 unique SPs of all types and sizes were surveyed.

McAfee Named One of the 20 Coolest Cloud Security Vendors by CRN, 2012

The Intel-owned security company has been preaching cloud security measures since before the cloud truly formed. McAfee’s central cloud piece is the Cloud Security Platform, which secures content and data—e-mail, Web and identity—as it moves to and from the cloud.

SC Magazine for IT Security Professional
McAfee Web Protection Named a Finalist (Best Web Content Management 2012) from SC Magazine

Products in this category provide web content filtering for laptops, desktops, and optionally servers. They may block or filter objectionable websites and content, and enlist blacklist, whitelist, or both to update the vendor-provided data upon which the solution is based.

SC Magazine for IT Security Professional
McAfee Web Protection Named a Finalist (Best Anti-Malware Gateway 2012) from SC Magazine

Products in this category generally are appliances. Their purpose is to act as gateways, usually at the perimeter of the enterprise, protecting against various types of malware attempting to enter the enterprise from outside.

Customer Stories

City of Chicago

Chicago protects its critical infrastructure with an integrated solution from McAfee, combining SIEM, endpoint, and network security.

  • Maximized staff resources.
  • Malware incidents reduced by 2,000%.
  • Centralized management and analysis.
  • Integrated security event logging that captures events throughout the environment.

Eagle Rock Energy

Eagle Rock strengthens its security infrastructure with the addition of new security management and network security solutions.

  • Integrated security architecture paves the way for business expansion.
  • Comprehensive threat detection ensures that security events from every source are noted and logged.
  • The combination of McAfee Web Gateway and McAfee Advanced Threat Defense thwarts inbound threats from the Internet.
  • Intrusion prevention monitors both external and internal activity.

Flughafen München GmbH

This operator of the Munich Airport secures Internet access and social media use by employees, and stops web-based malware from entering the network with McAfee Web Gateway.

  • Secure Internet access
  • Secure use of social media
  • Increase in overall performance without additional license costs
  • Central administration
  • Secure integration of clients
  • Integration of SSL client certificates

News / Events


Data Sheets

McAfee Web Gateway Appliance Specifications

For a technical summary on the McAfee product listed above, please view the product data sheet.

McAfee SaaS Web Protection

For a technical summary on the McAfee product listed above, please view the product data sheet.

McAfee Web Gateway Reverse Proxy and ICAP Deployment Options

Web-based malware can be downloaded from external sites by users, or uploaded to internal systems if you provide access to external users, such as partners or contractors. This data sheet explains how the reverse proxy and Internet Content Adaptation Protocol (ICAP) features in McAfee Web Gateway enhance network security and block malware targeted at internal websites.

McAfee Web Gateway

For a technical summary on the McAfee product listed above, please view the product data sheet.

McAfee Reporting Product Matrix

For technical specifications on the McAfee product listed above, please view the product data sheet.


McAfee Client Proxy

This technical FAQ covers web protection for the mobile workforce.


2014 AV-TEST Comparative Cloud Gateway Test

AV-TEST performed a comparative review of McAfee Web Protection in the Cloud and Websense Cloud Security 2014 and tested each against a set of malicious URLs with zero-day malware to determine their performance against the latest threats on the web.

2013 AV-TEST Comparative Web Gateway Security Appliance Test

AV-TEST performed a review of McAfee’s web gateway security solution for the enterprise to determine their malware detection and blocking capabilities.

Solution Briefs

McAfee Web Reporter

McAfee Web Reporter provides a real-time view of web traffic, allowing enterprises to refine and enforce Internet use policies and ensure compliance.

McAfee Advanced Threat Defense for McAfee Web Gateway

Social networks, cloud applications, and content-sharing sites have become essential business tools and IT organizations are struggling to make them safely accessible from inside and outside the corporate environment. Read this Solution Brief and see how McAfee Threat Defense for McAfee Web Gateway helps overcome the obstacles.

Abuse of Trust

Attackers prey upon the institution of trust in many ways, with exploiting unsuspecting victims the primary pursuit. Learn how McAfee security technology can help protect against attacks seeking to abuse the trust your company has in its day-to-day operations.

Web Request Routing and Redirection: What’s the best option for your web security deployment?

This paper explores the most widely used mechanisms for routing and redirecting web traffic to a secure web gateway by taking a look at the capabilities, advantages, and limitations of each method.

The Cloud Application Explosion: A Problem You Need To Address

This Osterman Research Executive Brief summarizes a webcast that outlined issues created by the rapid adoption of cloud-based applications. The brief also includes recommendations and questions organizations should address about the use of cloud-based applications in order to maintain access control and to protect sensitive data assets.

7 Requirements for Hybrid Web Delivery

Learn how the McAfee Hybrid Service Delivery Architecture provides a blueprint for adopting any or all service delivery platforms — integrated appliances, virtual appliances, or hosted services—without scrimping on deployment flexibility, security, or savings.

White Papers

McAfee Gateway Anti-Malware Technology Sets the Bar for Web Threat Protection

This white paper discusses the flagship McAfee Gateway Anti-Malware technology, how it adapts to new threats, and sets the stage to protect against future threats with a modular design that allows for the easy addition of components for maximum flexibility.

Protecting Mobile Devices from Malware Attack — An Osterman Research White Paper

How can you protect your employees’ computers against malware attack regardless of their location? How can you enforce acceptable usage policies for employees located remotely or mobile? The best way to protect against web threats is to redirect all web traffic through a proxy or web gateway that can block blacklisted or unsuitable sites, filter malware downloads, and enforce rules preventing sensitive data from being lost. In this white paper, Osterman Research describes the four ways to reroute web traffic from a mobile device or remote computer through a gateway, and highlights the strengths and weaknesses of each approach.

Direct or Transparent Proxy: Choose the right configuration for your gateway.

Secure web gateways are essential in today’s connected world, but which proxy configuration should you choose: direct or transparent? This white paper guides you through the pros and cons and makes recommendations that will help you secure your company and your users more effectively.

Select a Secure Web Gateway

This white paper describes a wide range of Internet-based attack methods and explains how McAfee Web Protection technology helps protect against them.

Mobile Device Web Filtering

This paper will explore ways to implement web filtering of mobile devices through McAfee Web Gateway and discuss ways that McAfee Enterprise Mobility Management (McAfee EMM) software can be leveraged in an integrated manner to assist with web filtering.

Nine Essential Requirements for Web Security

This paper characterizes new web threats, explains why most security solutions in place today are ineffective, and then proposes three key organizational principles for assessing and enhancing web security—security, control, and flexibility—and nine functional requirements that enable these principles.