[MUSIC PLAYING]
SPEAKER: When you need to get workloads to connect
to external services outside of Google Cloud,
you want to do it securely and without having to manage
or maintain your own proxy.
Cloud SWP, Secure Web Proxy, provides
a simple cloud-first web proxy for cloud workload protection.
It provides scalable security for your cloud workloads
and enables content inspection with granular policy control
of web traffic from Google Cloud-hosted workloads
to internet destinations and between Google
Cloud-hosted workloads.
The cloud-first Secure Web Proxy from Google
gives you flexibility and control with full visibility
that helps you prevent outbound connections
to known bad URLs and domains.
With Cloud SWP, you have the flexibility
to design policies aligned to your cloud environment, which
simplifies your setup and management of web egress
security for your cloud workloads.
For example, Cloud SWP allows you
to set up policies that are Cloud Identity focused
and specific to web content.
Cloud SWP's policy construction uses
objects with a cloud context, like secure tags or service
accounts.
Moreover, Cloud SWP also supports TLS inspection
that lets you inspect the encrypted web traffic
and enforce security policies down to the full URL
and destination path.
Cloud SWP also comes with a built-in integration
with Cloud NAT that lets you customize network address
translation for resources in your cloud environment,
making outbound connections.
This is useful in cases when you need a workload to connect
to a SaaS service, which requires allow lists
to specific IPs for access.
Simple, in some cases, doesn't always mean expandable.
But Cloud SWP provides scalable security for your cloud
workloads with protection that autoscales with your network
architecture and usage needs.
It is managed for you.
So, as your business grows, and your workloads make connections
to internet destinations, you don't
need to worry about scaling up your proxy infrastructure
as your traffic grows.
That is already taken care of.
This isn't to say that it can't be configured
or doesn't provide customization options.
Cloud SWP is integrated at the platform level
with broader Google Cloud products and services.
For example, you can configure logging in Cloud Logging
and automate your infrastructure using
infrastructure-as-code tools like Terraform.
All of this comes with elastic scaling and line rate TLS
inspection.
Cloud SWP offers an easy to use and robust proxy with TLS
inspection to provide tighter web egress protection
of your cloud workloads.
Even though it works out of the box,
you can get into the nitty gritty details
with granular controls for advanced use cases.
Granular TLS inspection allows you to block or allow URLs.
This feature enables granular control over web requests,
including URL paths and headers.
You can also set policies based on the source
of the traffic using identifiers like secure tags, service
counts, and IPs.
Getting this granular is foundational to complete
security and threat prevention.
But if you don't need this level of granularity,
you can also allow or block traffic
simply based on the fully qualified domain name,
or FQDN, of the destination.
Cloud SWP works out of the box for the majority
of use cases with no VMs to set up, no software updates to make
manually, and scales with your workloads and traffic,
saving time in both setup and day-to-day operations.
To find out more about how you can use a Cloud-first,
secure web proxy that is simple, scalable, and robust
without having to maintain or update it,
check out the documentation on Google Cloud SWP
using the link on the screen and in the description below.
[MUSIC PLAYING]