McAfee Web Gateway

McAfee Web Gateway

Advanced, proactive security for enabling safe, secure access to the web

Next Steps:


McAfee offers the advanced security, control, and flexibility organizations need to take full advantage of the web.

Unparalleled threat protection — The No. 1-rated anti-malware solution for web threats, McAfee Web Gateway analyzes the nature and intent of all content and code entering the network from requested web pages, providing immediate protection against malware and other hidden threats. With layered security that combines local and cloud-based protection, powered by McAfee Global Threat Intelligence, you can count on McAfee Web Gateway for instant, advanced protection to stop zero-day threats, spyware, and targeted attacks — without a signature. Learn more about McAfee Web Gateway's latest threat protection enhancements that provide state-of-the-art behavior-based emulation and detection techniques. 

Granular application discovery and control — Get point-and-click control for nearly 1,000 web applications and granular function control within those applications. From social and streaming media to file sharing and anonymizing, enable the applications you want, manage how they are used, and control what information is shared. Powerful reporting tools identify unknown or rogue applications, giving you the power to block potential security or productivity threats represented by applications that are not consistent with enterprise policy.

Powerful safeguards against data loss — Scan user-generated content on all key web protocols, using state-of-the-art DLP technology, and prevent confidential or suspect information from leaking out of your enterprise through blogs, wikis, and other Web 2.0 applications and sites. Protect sensitive data that is transferred to cloud storage with inline encryption, preventing users from downloading or reading files without the protections of Web Gateway.

Web identity management — McAfee Web Gateway includes optional single sign-on (SSO) connectors for more than 500 popular SaaS applications. Use SSO to improve end-user convenience, enhance security, and reduce expensive password-related help desk calls. McAfee Web Gateway also supports integration with McAfee One Time Password, which enables two-factor authentication for securing network access, achieving compliance, and protecting your resources from unauthorized access.

Easy, efficient management — With McAfee Web Gateway, you can stop deploying and managing multiple standalone web products. Web Gateway integrates numerous protections, from web filtering and anti-malware to SSL scanning and content control, all with a simplified management footprint and a flexible policy engine. Share a single security policy across protections and protocols, and meet the needs of your entire organization, enhancing protection while saving time and money.

Agile infrastructure and performance — McAfee Web Gateway includes high-performance, enterprise-strength, forward- and reverse-proxy software that provides the flexible authentication, administration, and authorization controls required by today's most demanding enterprises and service providers. Numerous deployment options — including purpose-built appliances or blades, a virtualized platform, or integration with cloud-based McAfee SaaS Web Protection — ensure Web Gateway scales to meet the needs of your unique enterprise.

Gartner: McAfee in leaders quadrant for secure web gateways

Read Report

Spotlight on shadow IT. The dark side of evading IT policies.

Learn More

Features & Benefits

Get the industry’s best protection

Use proactive intent analysis to filter out malicious content from web traffic in real time. By scanning a web page’s active content, emulating and understanding its behavior, and predicting its intent, McAfee Web Gateway proactively protects against zero-day and targeted attacks. Outbound malware detection identifies and isolates existing infections phoning home, and prevents sensitive data from leaving the organization through Web 2.0 sites.

Use layered security to enhance protection

Web Gateway combines local protection from McAfee Gateway Anti-Malware Engine, its powerful, proactive intent analysis, with cloud-based McAfee Global Threat Intelligence (GTI) to provide advanced protection. For both URL categorization and security-focused web reputation, choose between on-premise and cloud lookups, or opt to use a combination of both for optimal protection and performance. Additional protection through McAfee file reputation cloud-based virus lookup capabilities enable Web Gateway to provide greater protection while optimizing security on a single platform.

Extend management with a powerful policy engine and granular application control

A powerful policy engine enables unmatched flexibility and control in creating and applying policy, supporting the multi-tenancy needs of the largest enterprises and service providers. Web Gateway also extends this flexible control to web applications. Beyond simply allowing or denying access, Web Gateway provides granular function control within nearly 1,000 web applications, including popular social and streaming media, file sharing, and anonymizing applications.

Block data loss

Keep confidential information from leaking out of your organization by scanning user-generated content on all key web protocols. Have advanced data loss needs? Rely on Web Gateway to integrate with McAfee Data Loss Prevention (DLP) solutions.

Protect encrypted traffic

Close the new backdoor through your security barrier with fully integrated malware detection, SSL inspection, and certificate validation directly on the Web Gateway appliance.

Leverage powerful reporting tools and customizable dashboards

Identify your organization’s usage trends, isolate problems, document inappropriate web activity, and comply with regulations with powerful reporting capabilities and integration with the McAfee ePolicy Orchestrator (ePO) platform. Use this information to tailor filtering settings to best enforce your web-usage policies.

System Requirements

Deployment flexibility is a hallmark of McAfee Web Gateway. You can deploy it as a virtual machine, hardware appliance, or on a blade server.

Requirements for setting up a virtual appliance

  • VMware ESX or VMware ESXi (VMware Workstation version 5.5 or later is not supported, but can be used for testing purposes.)
  • Virtual machine host system with the following specifications:
    • CPU: 64-bit capable
    • Virtualization extension: VT-x/AMD-V
  • Virtual machine with the following specifications:
    • Memory: 4 GB
    • Hard disk space: 200 GB
    • CPU cores: 2 (minimum)


A complete range of enterprise- and medium-capacity appliances offers affordable protection and scalability for the most demanding business environments.

  • Model WG4500
    • Form factor: 1U rack mount
    • RAM: 32 GB
    • Processor: Dual core
    • Processor cache: 4 MB
    • Disk: 2 x 500 GB SAS
    • RAID level: Raid-1
    • Power supply: 400 W
    • Interfaces: 3 x 10/100/1000 Ethernet
  • Model WG5000
    • Form factor: 1U rack mount
    • RAM: 96 GB
    • Processor: 6 core
    • Processor cache: 15 MB
    • Disk: 2 x 600 GB SAS
    • RAID level: Raid-1
    • Power supply: 2 x 650 W (hot swap)
    • Interfaces: 4 x 10/100/1000 Ethernet; 1 x 1000BASE-SX optical network card
  • Model WG5500
    • Form factor: 1U rack mount
    • RAM: 128 GB
    • Processor: 2 x 10 core
    • Processor cache: 25 MB
    • Disk: 6 x 300 GB SAS
    • RAID level: Raid-10
    • Power supply: 2 x 750 W (hot swap)
    • Interfaces: 4 x 10/100/1000 Ethernet; 1 x 1000BASE-SX optical network card
  • Demos / Videos


    A core element of any cloud security strategy is the enforcement of acceptable usage policies. See how McAfee Web Protection provides system and network administrators with more than 1,000 application controls to manage user’s access to specific cloud application functions, such as Facebook or YouTube.

    In order to share sensitive or proprietary information on the web without compromising security, you need to prevent bad actors from being able to download or read files. See how the built-in encryption technology of McAfee Web Protection automatically protects files uploaded to popular cloud-based collaboration sites.

    McAfee Content Security Reporter delivers unified and detailed insight across threat vectors and malicious content that targets organizations via the network, email, and the web. A rich and flexible range of tools enables administrators to understand threats and trends and match this insight with action.

    With today’s increasingly sophisticated threat landscape, organizations need to use a layered security approach. Discover how McAfee’s award-winning Web Gateway uses multiple technologies, working together to offer comprehensive web protection.

    Learn how McAfee Web Gateway helps prevent web-based risks introduced by Web 2.0 technology.


    McAfee Web Protection is the industry’s most flexible secure web gateway solution. Customers can deploy any way they want – on-premises, in the cloud, or both – with the flexibility to adapt as business circumstances change. All it takes is one mouse click to synchronize security policy rules, enabling you to protect all users against web-based threats, regardless of location or device.

    McAfee Web Protection is the industry’s most flexible secure web gateway solution. Customers can deploy any way they want – on-premises, in the cloud, or both – with the flexibility to adapt as business circumstances change. All it takes is one mouse click to synchronize security policy rules, enabling you to protect all users against web-based threats, regardless of location or device.

    Security, access, and deployment flexibility

    Learn how McAfee solutions will help IT departments keep threats out of the office network.

    McAfee Web Gateway offers powerful, proactive protection against zero-day threats, spyware, and targeted attacks.

    Awards / Reviews

    2014 AV-TEST Comparative Cloud Gateway Test
    2014 AV-TEST Comparative Cloud Gateway Test

    AV-TEST performed a comparative review of McAfee Web Protection in the Cloud and Websense Cloud Security 2014 and tested each against a set of malicious URLs with zero-day malware to determine their performance against the latest threats on the web.

    CRN Ranks McAfee in their 2013 Top 25 Best Companies to Partner With
    CRN Ranks McAfee in their 2013 Top 25 Best Companies to Partner With

    Ranked by IT solution providers (SPs), CRN Research ranks the Top 25 must-have technology suppliers from a list of nearly 230 companies in 12 product categories that SPs need to consider when formalizing their partnerships today and for the future. 1,000 unique SPs of all types and sizes were surveyed.

    McAfee Named One of the 20 Coolest Cloud Security Vendors by CRN, 2012

    The Intel-owned security company has been preaching cloud security measures since before the cloud truly formed. McAfee’s central cloud piece is the Cloud Security Platform, which secures content and data—e-mail, Web and identity—as it moves to and from the cloud.

    SC Magazine for IT Security Professional
    McAfee Web Protection Named a Finalist (Best Web Content Management 2012) from SC Magazine

    Products in this category provide web content filtering for laptops, desktops, and optionally servers. They may block or filter objectionable websites and content, and enlist blacklist, whitelist, or both to update the vendor-provided data upon which the solution is based.

    SC Magazine for IT Security Professional
    McAfee Web Protection Named a Finalist (Best Anti-Malware Gateway 2012) from SC Magazine

    Products in this category generally are appliances. Their purpose is to act as gateways, usually at the perimeter of the enterprise, protecting against various types of malware attempting to enter the enterprise from outside.

    McAfee Web Anti-Malware Module, Gateway Edition - Test Results

    McAfee Web Gateway uses next-generation proactive intent analysis to filter out malicious content from web traffic in real time.

    Customer Stories


    A.T.U safeguards employee web and email communications with centrally managed McAfee security solutions.

    • Reduced influx of spam by 99% and maximized employee time and productivity
    • Proactively protected against malicious emails, viruses, and malware
    • Enabled smooth, easy-to-manage implementation and testing process


    CEMEX is a global building materials company that produces, distributes, and sells cement, concrete, aggregates, and related building materials and services to customers and communities throughout the Americas, Europe, Africa, Asia, and the Middle East. Based in Monterrey, Mexico, CEMEX employs more than 43,000, with operations in 50 countries spanning four continents. The company is also the world’s leading supplier of ready-mix concrete.

    • Safeguards against zero-day advanced persistent threats without signature updates.
    • Greatly diminishes administrative time, from defining policies to repairing workstations.
    • Protects more than 26,000 endpoints from email, web, and application-generated attacks.
    • Provides streamlined and integrated management of large, global security platform.

    City of Chicago

    The City of Chicago’s recently formed Information Security Office (ISO) is charged with overseeing cybersecurity across all areas of the city, including critical infrastructure within the water, aviation, and public safety departments.

    • Maximized staff resources.
    • Malware incidents reduced by 2,000%.
    • Centralized management and analysis.
    • Integrated security event logging that captures events throughout the environment.

    County of Orange, California

    Comprehensive McAfee web and email security solutions help County of Orange dramatically reduce spam levels and lower email administration costs.

    • Provided unified threat management and integration between all security products, enabling an end-to-end solution with enterprise-class security
    • Correctly identified 97% of email as spam and dropped it at the edge of the network

    Eagle Rock Energy

    Eagle Rock Energy Partners is an energy company focused on upstream activities, including oil and gas drilling, production, and development. Eagle Rock has working oil and gas properties and development opportunities in the midcontinent area, Permian, and southeast regions of Texas, as well as Oklahoma, Arkansas, Southern Alabama, Mississippi, and Louisiana.

    • Integrated security architecture paves the way for business expansion.
    • Comprehensive threat detection ensures that security events from every source are noted and logged.
    • The combination of McAfee Web Gateway and McAfee Advanced Threat Defense thwarts inbound threats from the Internet.
    • Intrusion prevention monitors both external and internal activity.

    Flughafen München GmbH

    McAfee secures Munich Airport with Web Gateway.

    • Secure Internet access
    • Secure use of social media
    • Increase in overall performance without additional license costs
    • Central administration
    • Secure integration of clients
    • Integration of SSL client certificates

    McAfee (Web Gateway)

    The McAfee Global Security team enthusiastically embraces its new web gateway solution and appreciates the benefits of its feature-rich, advanced technology — and looks forward to scaling up and exercising its capabilities more fully.

    • Provides centralized management for distribution of policies and configurations
    • Protects employees by blocking unsafe and inappropriate content
    • Allows granular policy creation and deployment capabilities allow human resources (HR) to custom-tailor content access for different business units and job functions
    • McAfee Global Threat Intelligence provides real-time feeds to McAfee Web Gateway about emerging threats and proactively blocks malicious sites and content
    • Enables business security for environments that need Web 2.0 access and use of personal mobile devices

    NYC Department of IT and Telecommunications

    NYC Department of IT and Telecommunications uses McAfee for for vulnerability management, endpoint encryption, and other areas of security functionality.

    • Increased protection with a savings of $18 million
    • Provided centralized control across highly distributed IT environment

    School City of Hammond

    School City of Hammond enlists McAfee to strengthen web and email controls.

    • Blocked more than 99% of spam and viruses from entering the network
    • Improved bandwidth usage, since spam is caught at the gateway
    • Simplified email administration so the IT department could focus on other issues
    • Prevented students from circumventing the web filtering system by accessing anonymizer sites

    SIM University

    SIM University uses McAfee Firewall Enterprise to protect its data center.

    • Provide a multilayered defense against security threats
    • Amplify network bandwidth and dramatically improve throughput
    • Increase availability of learning management system to more than 99.9 percent
    • Free up IT administration time of security staff

    Swiss Reinsurance Company

    Swiss Reinsurance Company relies on McAfee Web Gateway to protect employees worldwide from malicious web content.

    • Protected 10,000 worldwide users with dual anti-virus engines
    • Applied the same anti-virus and content inspection rules to SSL encrypted HTTPS traffic
    • Delivered comprehensive and combined reporting for anti-malware/anti-virus and URL filtering solution
    • Saved administrative overhead through common and easy-to-use Web GUI

    Texas Tech University Health Sciences Center

    Texas Tech University Health Sciences Center (TTUHSC) offers programs in medicine, nursing, pharmacy, biomedicine and health sciences.

    • Extensible compliance reporting.
    • Block thousands of attacks.
    • Security audits in minutes.
    • Improve visibility and productivity.

    Walnut Valley Unified School District

    Walnut Valley Unified School District blocks web-based threats with McAfee Web Gateway.

    • Prevented students from using encrypted traffic and anonymizers to circumvent the web filtering system
    • Enabled school to receive E-Rate funding
    • Made it easy to implement user-based web usage policies and to grant temporary or permanent exceptions
    • Provided granular reporting and audit capabilities, including tracing user activity and trends

    News / Events


    Data Sheets

    McAfee Web Gateway Appliance Specifications

    For a technical summary on the McAfee product listed above, please view the product data sheet.

    McAfee Web Gateway Reverse Proxy and ICAP Deployment Options

    Web-based malware can be downloaded from external sites by users, or uploaded to internal systems if you provide access to external users, such as partners or contractors. This data sheet explains how the reverse proxy and Internet Content Adaptation Protocol (ICAP) features in McAfee Web Gateway enhance network security and block malware targeted at internal websites.

    McAfee SaaS Web Protection

    For a technical summary on the McAfee product listed above, please view the product data sheet.

    McAfee Web Gateway

    For a technical summary on the McAfee product listed above, please view the product data sheet.

    McAfee Reporting Product Matrix

    For technical specifications on the McAfee product listed above, please view the product data sheet.


    McAfee Client Proxy

    This technical FAQ covers web protection for the mobile workforce.


    2014 AV-TEST Comparative Cloud Gateway Test

    AV-TEST performed a comparative review of McAfee Web Protection in the Cloud and Websense Cloud Security 2014 and tested each against a set of malicious URLs with zero-day malware to determine their performance against the latest threats on the web.

    McAfee Positioned in the Leaders Quadrant for 2014 Magic Quadrant for Secure Web Gateways

    Leading analyst firm Gartner has placed McAfee as a Leader in the Magic Quadrant for Secure Web Gateways.

    Secure Web Gateways (SWGs) utilize an advanced array of techniques, such as URL filtering, malware detection and application control technology, to protect organizations and enforce Internet policy compliance. The evolving threat landscape has forced SWG vendors to respond by adding technologies to defend against advanced threats and in this Magic Quadrant Gartner analyzes each vendor’s approach to advanced threat defense.

    2013 AV-TEST Comparative Web Gateway Security Appliance Test

    AV-TEST performed a review of McAfee’s web gateway security solution for the enterprise to determine their malware detection and blocking capabilities.

    Solution Briefs

    McAfee Advanced Threat Defense for McAfee Web Gateway

    Social networks, cloud applications, and content-sharing sites have become essential business tools and IT organizations are struggling to make them safely accessible from inside and outside the corporate environment. Read this Solution Brief and see how McAfee Threat Defense for McAfee Web Gateway helps overcome the obstacles.

    Web Request Routing and Redirection: What’s the best option for your web security deployment?

    This paper explores the most widely used mechanisms for routing and redirecting web traffic to a secure web gateway by taking a look at the capabilities, advantages, and limitations of each method.

    The Cloud Application Explosion: A Problem You Need To Address

    This Osterman Research Executive Brief summarizes a webcast that outlined issues created by the rapid adoption of cloud-based applications. The brief also includes recommendations and questions organizations should address about the use of cloud-based applications in order to maintain access control and to protect sensitive data assets.

    7 Requirements for Hybrid Web Delivery

    Learn how the McAfee Hybrid Service Delivery Architecture provides a blueprint for adopting any or all service delivery platforms — integrated appliances, virtual appliances, or hosted services—without scrimping on deployment flexibility, security, or savings.

    McAfee Web Reporter

    McAfee Web Reporter provides a real-time view of web traffic, allowing enterprises to refine and enforce Internet use policies and ensure compliance.

    White Papers

    Direct or Transparent Proxy: Choose the right configuration for your gateway.

    Secure web gateways are essential in today’s connected world, but which proxy configuration should you choose: direct or transparent? This white paper guides you through the pros and cons and makes recommendations that will help you secure your company and your users more effectively.

    New Mcafee Gateway Anti-Malware Technology Sets the Bar for Web Threat Protection

    This white paper discusses the latest version of the flagship McAfee Gateway Anti-Malware technology and how it adapts to new threats and sets the stage to protect against future threats with a modular design that allows for the easy addition of components for maximum flexibility.

    Select a Secure Web Gateway

    This white paper describes a wide range of Internet-based attack methods and explains how McAfee Web Protection technology helps protect against them.

    Mobile Device Web Filtering

    This paper will explore ways to implement web filtering of mobile devices through McAfee Web Gateway and discuss ways that McAfee Enterprise Mobility Management (McAfee EMM) software can be leveraged in an integrated manner to assist with web filtering.

    Nine Essential Requirements for Web Security

    This paper characterizes new web threats, explains why most security solutions in place today are ineffective, and then proposes three key organizational principles for assessing and enhancing web security—security, control, and flexibility—and nine functional requirements that enable these principles.



    • At Intel Security, Protecting Customers Takes Precedence Over Seeking Headlines
      Christiaan Beek - November 21, 2014

      One question I often hear is “When will Intel Security (McAfee) publish a report on the latest threat?” It seems to be a hot trend today for security companies to offer reports with topics such as “Operation X” or “Malware Y,” or to trumpet how many zero-day vulnerabilities they have found. Do we now measure […]

      The post At Intel Security, Protecting Customers Takes Precedence Over Seeking Headlines appeared first on McAfee.

    • White Networks
      Tyson Macaulay - November 14, 2014

      Internet of Things (IoT) needs “white networks” to scale and deliver the assurance we require for machine-things; white as in “clean and pure”. The IoT will contain all the devices on the current internet, plus many new devices used for machine-to-machine and industrial applications and services.  In contrast to a “white network” I would assess […]

      The post White Networks appeared first on McAfee.

    • When Fingerprints Fail (Blog 1 of 4)
      Steve Grossenbacher - November 13, 2014

      We’ll be releasing four blog posts over the next week.  Each blog will contain a repeated clue word to help you solve the puzzle below.  Track all four clues to help solve the final puzzle and a chance to win a Nikon D3200 DSLR camera and 18-55mm lens!.   To enter the contest, after the […]

      The post When Fingerprints Fail (Blog 1 of 4) appeared first on McAfee.

    • Exploit Kits Improve Evasion Techniques
      Rajesh Nataraj KP - November 12, 2014

      Exploit kits are toolkits that malicious developers use to take advantage of client-side vulnerabilities, targeting web browsers and programs that can be accessed through browsers. The most common exploit targets are Java, Flash, PDFs, and Silverlight. Exploit kits use lots of techniques to evade detection by security products. Exploit kits use several common techniques: Code […]

      The post Exploit Kits Improve Evasion Techniques appeared first on McAfee.

    • Farewell to FOCUS 14
      McAfee Enterprise - November 6, 2014

      While the dust in Las Vegas may still be settling from three jam-packed days of security discussions, demos, expert panels, and more, we‘ve brought back with us valuable takeaways and tales from FOCUS 14. During the 7th annual McAfee FOCUS conference, brought to you by Intel Security, we talked with partners about the future of […]

      The post Farewell to FOCUS 14 appeared first on McAfee.