Cisco Secure Access Help
Is this content helpful?
Thank you for your feedback. Your response has been recorded.
AI responses are currently only available to logged in users. Log in
Only ask questions about this document. To ask questions about this product as a whole, go to Technical Documentation .
Suggestions
Sorry, we couldn't generate a response for this query.
Cisco Secure Access Help
Updated: August 24, 2026
Want to summarize with AI?
Log in
On this page
Describes SWG Protection Status in Cisco Secure Access. After you deploy the Umbrella module in the installed Cisco Secure Client, a Web Protection Status appears in the Cisco Secure Client endpoint.
After you deploy the Umbrella module in the installed Cisco Secure Client, a Web Protection Status appears in the Cisco Secure Client endpoint. If you do not see a Web Protection Status, the Umbrella module is installed, but Internet Security (OrgInfo.json) is not deployed.
View status information in the Cisco Secure Client Umbrella module on the user device.
Administrative privileges on the user device.
Cisco Secure Client version 5.1.8.105 or later deployed with the Umbrella Roaming Security module or a PAC file for browsers in the environment is required for SWG protection status in Secure Access. For more information, see Release Notes for Cisco Secure Client (including AnyConnect), Release 5.1.
Open the Cisco Secure Client.
Click the chart icon at bottom left to open the Statistics menu.
Navigate to Umbrella to see Secure Web Gateway information.
The following table provides descriptions of the Secure Web Gateway protection status information displayed in the Cisco Secure Client Umbrella module on the user’s device.
| Status | Description | Condition |
|---|---|---|
| Offline | The device is unable to sync with Secure Access and SWG state is unknown. | Secure Client on the device has not been able to sync with Secure Access for 100 minutes or longer. |
| Protected | The device is protected by SWG. | SWG Agent service csc_swgagent is running and intercepting web traffic. |
| Unprotected | The device is not protected by SWG. | SWG Agent service csc_swgagent failed to start. |
| Configuration Error | Failed to update SWG Configuration. | Incorrect value in SWGConfig.json |
| Cloud Service Unavailable | SWG Agent was unable to connect to SWG Proxy. | SWG proxy is not reachable. |
| Disabled due to trusted network | SWG protection is disabled. | The device is connected to an AnyConnect trusted network or a network that matches a trusted context defined by your organization's SWG backoff settings. For more information, see the Secure Web Gateway Backoff Settings section of the Configure Cisco Secure Client Settings page. |
| Disabled | SWG protection is disabled. | Depending on the organization's SWG backoff settings, you may see this state if SWG protection is disabled when the device is not on AnyConnect VPN or a trusted network. |
For more information, see Manage Roaming Devices and the Umbrella Roaming Security chapter of the Cisco Secure Client (including AnyConnect) Administrator Guide, Release 5.1.
Need help?
(Requires a Cisco Service Contract)
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.