Secure Web Gateway (SWG)

Is the Secure Web Gateway (SWG) module included in any bundles?

The SWG module is part of the Coro AI Complete and Coro AI Essentials bundles.

Is the Secure Web Gateway (SWG) module enabled by default?

No. The SWG module is not enabled by default, and needs to be enabled by an admin user.

How do I enable DNS filtering?

To enable DNS filtering in Secure Web Gateway (SWG):

  1. Enable the toggle button for DNS filtering
  2. Add a device label to at least one allowlist or blocklist

DNS filtering only applies to devices that are part of device labels assigned to at least one allowlist or blocklist. For more information, see DNS filtering.

Do I need to select a region or location when enabling Secure Web Gateway (SWG)?

Yes. You must select a region when enabling SWG, unless you have already selected a region for the Network module. The same region is used for both SWG and Network.

For more information, see Activating the Network service.

Can I create multiple virtual offices in different regions or locations?

No. Each Coro workspace supports only one virtual office, which applies to both Network and SWG.

What IP address is assigned when creating a virtual office?

When an admin user creates a virtual office in the Coro console, they must select a region or location for that office. Coro then assigns a static IP address based on the selected region.

Available regions include:

  • Australia (Sydney)
  • Brazil (Sao Paulo)
  • Canada (Toronto)
  • France (Paris)
  • Germany (Frankfurt)
  • India (Bangalore)
  • Israel (Tel Aviv-Yafo)
  • Mexico (Mexico City)
  • Netherlands (Amsterdam)
  • Singapore
  • South Africa (Johannesburg)
  • Spain (Madrid)
  • Tokyo (Japan)
  • United Kingdom (London)
  • United Kingdom (Manchester)
  • USA-East (New Jersey)
  • USA-Midwest (Chicago, Illinois)
  • USA-Pacific-Northwest (Seattle, Washington)
  • USA-South (Atlanta, Georgia)
  • USA-South (Miami, Florida)
  • USA-West (Los Angeles, California)
  • USA-West (Silicon Valley, California)

Where can I find my virtual office IP address in my workspace?

The virtual office IP address is located at the top of the SWG module.

DNS filtering is preventing authentication to our internal domain. What should I do?

Add your internal domain to the Secure Web Gateway (SWG) allowlist. For example, *.internal.company.com.

Can Secure Web Gateway (SWG) apply to Chromebook users?

Chromebook users can install the Android app, if Android apps are enabled.

Why can't I find the Coro Endpoint Protection app in the iOS App Store?

The Coro Endpoint Protection app for iOS is available but Apple’s internal listing settings currently prevent it from appearing in search results. However, the direct download link is included in Control Panel > SWG, so users can easily access and install the app from there.

What are the minimum versions of iOS and Android supported by the Coro Endpoint Protection app?

The Coro Endpoint Protection app supports devices running Android 12 or later and iOS 17 or later.

Can the Coro Endpoint Protection app connect if IPSec is blocked?

Yes. The Endpoint Protection app on Android devices uses OpenVPN, which relies on TLS/SSL for secure transport, not IPSec. iOS devices use WireGuard, which performs its own encryption.

This means the app can connect even in networks where IPSec traffic is blocked.

Does the Coro Endpoint Protection app force VPN, ZTNA, or DNS filtering use?

The Coro Endpoint Protection app can be configured to always keep the VPN, ZTNA, or DNS filtering on. However, users can still manually uninstall the app, which Coro cannot prevent at the device level.

Can I restrict Coro Endpoint Protection app installation to specific devices?

No, Coro does not support restricting which devices can download the Coro Agent. However, after the Agent is installed, admin users control which devices can access DNS filtering using device labels.

Can I use DNS filtering without turning on the VPN or ZTNA?

Yes. The Secure Web Gateway (SWG) and Network modules work independently.

What activity about DNS filtering can I see in Coro?

Coro provides a DNS report that gives visibility into DNS filtering activity across your workspace. The report includes:

  • Top DNS queries and top blocked queries
  • Top allowed and blocked domains
  • Top allowed and blocked clients
  • Blocked domains and the users or devices that attempted to access them

This summary helps you identify usage trends, detect suspicious activity, and monitor the effectiveness of DNS-based protections. You can access the DNS report from your Coro workspace.