Internet Access · SWG
Decide what leaves a device, on any network.
Rules run on the device before a connection opens, so they hold at home, on hotel wifi and on mobile data. Traffic then goes straight where it was going, with no detour through a proxy.
| Rule | Applies To | Action | Mode |
|---|---|---|---|
| Adult content | Everyone | Block | Enforced |
| Personal file sharing | Contractors | Block | Report |
| Social media | Finance | Warn | Enforced |
Everything on the way out, in one place.
Six parts of Internet Access, all on the same identity and rules.
Web Access Policy
Category and site rules for outbound traffic, in order. Global rules set the floor; group and person rules are merged over them.
Application Policy
Allow the services and ports a group needs, by destination.
Cloud Routing
Send chosen destinations out through Fowlguard, so the far end sees your organisation's address. Different rules at home and at the office.
TLS Inspection
Decrypt HTTPS on the device, under your own certificate, so rules about paths, keywords and files can act.
Block Pages
Your wording and your logo, with a way for the person to ask for access.
Policy Tracer
Ask why a request was allowed or blocked, and see the rule that decided it.
Watch a rule before it stops anyone.
Put a new rule in report-only, see in the logs what it would have caught, then switch it to Block. Nobody loses access while you check.
- Report, Warn, Block and Allow
- Your own categories alongside ours
- A domain in one of yours is judged by yours alone
| Time | Person | Site | Result |
|---|---|---|---|
| 09:41 | Sam Reyes | share.example.net | Would Block |
| 09:40 | Lena Park | docs.harborpine.example | Allow |
Some traffic is never decrypted.
Payment and banking providers, government and health portals are on a built-in never-decrypt list. Banking, health, government and legal categories are excepted whatever you choose.
- Inspection happens on your machine
- Your certificate authority, trusted by your devices
- Add your own Never Decrypt categories
| Category | Decrypt |
|---|---|
| Banking | Never |
| Health | Never |
| File Sharing | On |
| Productivity | On |
The only thing a blocked person reads.
Set the wording and the logo, and the page carries a request route that sends an appeal to Access Requests. Approving one writes a rule of its own.
Personal is free for 15 days, then $2 per user per month. Small is $5 and Medium $8 per user per month.
Asked often.
Does my traffic go through a proxy?
No. The decision is made on the device and traffic goes straight out. Cloud Routing sends only the destinations you name through Fowlguard.
What if your service is unreachable?
The rules are already on the device, so filtering carries on and so does the internet.
Do I need TLS inspection?
Not for category and site rules. It is needed for rules about paths, keywords, files or a caller's User-Agent, and for your block page to show on HTTPS sites.
Can it work for a family?
Yes. Personal covers homes and individuals: filtering that travels with the device, on any network.