Symantec Web Security Service

Symantec Web Security Service
Name	Symantec Web Security Service
Developer	Symantec Corporation
Released	2010s
Latest release	discontinued/legacy
Operating system	Cloud-based
Genre	Secure Web Gateway, Cloud Access Security Broker
License	Proprietary

Symantec Web Security Service Symantec Web Security Service was a cloud-based secure web gateway provided by Symantec Corporation that integrated web filtering, threat intelligence, and data loss prevention to protect enterprise users and organizations from internet-borne threats. The service interoperated with enterprise architectures, cloud platforms, and security ecosystems developed by Broadcom Inc., Microsoft, Amazon Web Services, Google Cloud Platform, and third-party vendors to deliver policy enforcement, traffic inspection, and analytics. It competed in markets alongside offerings from Zscaler, Cisco Systems, Palo Alto Networks, McAfee LLC, and Forcepoint while aligning with standards used by Internet Engineering Task Force, National Institute of Standards and Technology, Payment Card Industry Security Standards Council, and Cloud Security Alliance.

Overview

Symantec Web Security Service combined web proxying, content categorization, malware scanning, and cloud access security broker functionality to provide comprehensive internet security for enterprises such as Bank of America, Walmart, AT&T, Verizon Communications, and ExxonMobil. The platform leveraged threat intelligence feeds and threat research from Symantec Intelligence, Symantec Threat Hunter, and third-party sources including VirusTotal, AlienVault, Cisco Talos, Kaspersky Lab, and FireEye to identify phishing, zero-day exploits, and command-and-control communications. Administrators used policy controls influenced by compliance frameworks from Sarbanes-Oxley Act, General Data Protection Regulation, Health Insurance Portability and Accountability Act, and Gramm–Leach–Bliley Act to enforce acceptable use and data protection. Deployment models supported hybrid enterprises with remote workforces from organizations like IBM, Dell Technologies, Oracle Corporation, and Accenture.

Features and Functionality

Key features included URL filtering, SSL/TLS inspection, malware sandboxing, data loss prevention, application control, and reporting, enabling enterprises such as Citigroup, JPMorgan Chase, HSBC, Deutsche Bank, and Goldman Sachs to manage web risk. The service offered category-based policy engines and real-time reputation scoring leveraging databases curated by Symantec Global Intelligence Network, ThreatCloud, Broadcom Security Research, Recorded Future, and Group-IB. Integration with identity providers such as Okta, Azure Active Directory, Ping Identity, OneLogin, and RSA Security enabled user- and group-based policies. Administrative consoles provided dashboards, logs, and alerts compatible with security information and event management systems like Splunk, IBM QRadar, ArcSight, Securonix, and LogRhythm.

Architecture and Deployment

Architected as a globally distributed service, Symantec Web Security Service operated points of presence and data centers interlinked with content delivery networks and peering arrangements involving Akamai Technologies, Cloudflare, Level 3 Communications, NTT Communications, and Equinix. Traffic steering options included client-based agents, proxy chaining, GRE tunneling, and policy-based routing used by enterprises running Cisco IOS, Juniper Networks Junos, Fortinet FortiGate, Palo Alto Networks PAN-OS, and F5 Networks appliances. The solution supported TLS interception with certificate management, integration with Microsoft Active Directory, and federated authentication via SAML 2.0, enabling consistent enforcement across offices and remote users from companies like Siemens, Toyota Motor Corporation, and Siemens Healthineers. High-availability and scalability were achieved through geo-redundant POPs and orchestration mechanisms similar to those used by Kubernetes-backed cloud services and OpenStack deployments.

Security and Privacy Considerations

Security controls included inline malware detection, sandbox detonation, retrospective alerting, and indicators of compromise sharing with partners such as US-CERT, Europol, Interpol, Mandiant, and CERT-EU; privacy considerations involved inspection of TLS traffic and handling of personal data subject to laws like GDPR and contractual obligations with enterprises such as Procter & Gamble and Unilever. Customers required careful configuration to balance inspection with end-user privacy expectations, using features comparable to those in Blue Coat Systems products and guidance from Electronic Frontier Foundation and International Association of Privacy Professionals. Data residency, logging retention, and access controls had to align with regional regulations enacted by bodies such as the European Commission, UK Information Commissioner's Office, Australian Privacy Commissioner, and Office of the Privacy Commissioner of Canada.

Integration and Management

Management interfaces supported RESTful APIs, SIEM connectors, and orchestration with endpoint protection suites from Symantec Endpoint Protection, Microsoft Defender for Endpoint, CrowdStrike Falcon, SonicWall, and Trend Micro. Automation and policy provisioning were possible through integration with configuration tools like Ansible, Puppet, Chef, Terraform, and SaltStack used by enterprise IT teams at Capgemini, Deloitte, KPMG, and Ernst & Young. Reporting and forensics could be exported into analytics platforms such as Tableau, Power BI, Elastic Stack, and Splunk Enterprise for incident response workflows coordinated with CERT teams and managed security service providers including AT&T Cybersecurity and Secureworks.

History and Development

The service evolved from Symantec's acquisition strategy and product roadmaps in the 2010s, influenced by corporate actions involving Symantec Corporation, its enterprise business transitions, and later transactions with Broadcom Inc. and partnerships with cloud providers like Microsoft Corporation and Amazon.com. Development tracked industry shifts toward cloud-delivered security led by competitors such as Zscaler and mergers involving Blue Coat Systems and VeriSign assets, while research collaborations linked to University of California, Berkeley, Stanford University, Massachusetts Institute of Technology, and security consortia shaped threat intelligence capabilities. Over time, market consolidation and strategic refocusing resulted in product realignments, rebranding efforts, and migration paths recommended for customers to successor services maintained by Broadcom and third-party vendors.

Category:Cloud security