The McAfee® Web Protection hybrid solution is the integration of McAfee® Web Gateway and McAfee® Web Gateway Cloud Service (McAfee® WGCS) in a hybrid deployment.

Together, the on-premise and cloud components protect your organization from threats that might arise when users access the web from inside or outside your network.

Organizations that have a Web Gateway appliance installed on the network and are using McAfee WGCS can manage one web protection policy for both and apply it across the organization. The policy is configured in the Web Gateway interface and pushed to McAfee WGCS at the synchronization interval you specify. Authentication is configured in the McAfee WGCS interface.

Hybrid components

A Web Protection license provides all components needed to set up a hybrid deployment. In addition to Web Gateway and McAfee WGCS, hybrid components include:

  • McAfee® Client Proxy
  • McAfee® Content Security Reporter
  • McAfee® ePolicy Orchestrator® Cloud (McAfee® ePO™ Cloud)
  • McAfee® ePolicy Orchestrator® (McAfee® ePO™)

Cloud-only vs. hybrid deployments

The type of deployment determines how the web protection policy is managed.

  • Cloud-only deployment — The policy is managed with McAfee ePO Cloud and saved in the global policy store.
  • Hybrid deployment — The policy is managed in the Web Gateway interface and synchronized with the cloud. When synchronized, the on-premise policy overwrites the policy configured in the cloud and saved in the global policy store.

Caution: After hybrid synchronization is enabled in the Web Gateway interface, the web protection policy in the cloud is overwritten. To disable synchronization and restore the default McAfee WGCS policy, you must contact Technical Support.