- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
Broadcom
Enterprise security and infrastructure software sold under the Symantec, Carbon Black, Layer7 and Automic names— Broadcom’s web security, endpoint, data protection, identity, API and automation products, and how each one is licensed. This hub covers fifteen Broadcom products; VMware has its own hub.
Buy through TechBag
Same software. Better outcome — at a lower cost.
The company, at a glance
Quick answer
Fifteen intel pages. Web security, endpoint, data protection, identity, API and automation.
Broadcom’s security and software line, product by product — every linked card is a full intel page, from the Symantec web gateways, DLP and endpoint agents to Carbon Black, identity, Layer7 and Automic.
Symantec Cloud SWG
A cloud proxy on a Google Cloud backbone.
TLS decryption, High Risk Isolation and app controls; usually licensed with Edge SWG as one Web Protection Suite seat per user.
Symantec Edge SWG (formerly ProxySG)
The ProxySG line on hardware, VM or private cloud.
Write a policy once and push it to every gateway; SGOS 7.4 is the long-term release, and 7.3 support ends around December 2026.
Symantec ZTNA
Per-app access that cloaks private resources.
Formerly Secure Access Cloud: app connectors sit in your own data centre or in AWS, Azure or Google Cloud; SSH commands are logged too.
Symantec CloudSOC CASB
Finds shadow IT and polices sanctioned SaaS.
API Securlets and inline Gatelets for Office 365, Google Workspace, Box, Salesforce and Slack, sold inside the DLP Cloud bundle.
Symantec DLP
The classic enterprise DLP incumbent.
Exact and indexed data matching plus image OCR across endpoints, file shares, databases, web, email and cloud apps, with a DSPM module.
Symantec Endpoint Security
One agent, managed on-prem, hybrid or cloud.
Covers Windows, macOS, Linux, iOS and Android; Complete adds Adaptive Protection, AD defence, Threat Hunter and EDR to Enterprise.
Carbon Black Cloud Endpoint
Cloud NGAV and EDR from one sensor and console.
Foundations, Advanced and Enterprise EDR editions with Live Query and custom detection rules; Broadcom lists no Indian data region.
Carbon Black App Control
Lets only trusted software run.
A positive security model for ATMs, POS terminals, end-of-life operating systems and air-gapped hosts, with a PCI DSS 4.0 mapping.
Carbon Black Workload
NGAV, EDR and vulnerability checks for servers.
Risk-ranked vulnerability assessment, CIS benchmarks and live-query remediation for workloads; Sensor Gateway reaches air-gapped hosts.
Symantec Email Security.cloud
Guards Microsoft 365 and Google Workspace mail.
Malware, phishing and BEC filtering with click-time URL checks and isolation; threat response, DLP and PGP encryption are add-ons.
Symantec PAM
Vaults admin credentials and records sessions.
Credential vault, session recording, super-user control and app secrets, plus vCenter protection; 2025 CVEs hit 4.2.0 and earlier.
Symantec IGA
Access requests, reviews and provisioning.
Self-service requests, recertification campaigns and no-code Xpress logic, with a mobile app; release 15.0 is the current version.
Symantec SiteMinder
Federated single sign-on for big web estates.
SAML, OIDC, OAuth, JWT and FIDO2 passkeys with single logoff and session-hijack monitoring; MFA comes through VIP Authentication Hub.
Layer7 API Gateway
Secures and mediates APIs for regulated sectors.
Alone or in Layer7 API Management, on hardware, VMs, Docker, Kubernetes or AWS, Azure and Google Cloud; supports PSD2 and FHIR.
Automic Automation
Runs jobs from mainframe to microservices.
Self-hosted or SaaS, with managed file transfer and SAP integrations; V26, out since April 2026, adds AI job types and MCP.
VMware (VCF and vSphere)
Platform & engineVMware has been a Broadcom company since 22 November 2023 and has its own TechBag hub at /vmware, which covers VMware Live Recovery and Live Recovery Cloud. Workspace ONE and Horizon are not Broadcom products: they went to KKR as Omnissa in July 2024
Symantec CBX
Platform & engineA cloud XDR announced on 23 March 2026 that joins Symantec prevention, data security and Cloud SWG with Carbon Black EDR, promised for later in 2026 through the Catalyst Partner Program. TechBag has not seen it ship, so it has no page yet
VIP, Messaging Gateway and PGP
Platform & engineSeparately licensed Symantec products not yet paged: VIP and VIP Authentication Hub for MFA, the on-premises Messaging Gateway appliance, and the PGP Encryption Suite. VIP is covered on the SiteMinder page, the other two on the Email Security.cloud page
Mainframe, payments, DX APM and Clarity
Platform & engineBroadcom software outside this hub’s security focus: more than 100 CA mainframe products, Arcot 3-D Secure payment security, DX APM (formerly CA APM) and the Clarity portfolio tool. TechBag mentions them here for completeness only
Broadcom sells across 5 of the products TechBag carries in security. The Security guide shows how the category splits and which part is yours. →
Also sold in Network Security & SASE (4 products) · Identity & Access (3 products) · Data Security & Privacy (1 product) · DevOps (1 product).
Why “one licence, cloud and on site” matters here
Broadcom still sells on-premises forms of most of this line: the Edge SWG proxy, DLP Core, PAM, IGA, SiteMinder, App Control, Layer7 and Automic. For web security, one per-user Web Protection licence runs the gateway in Broadcom’s cloud or on your own hardware. For Indian estates that must keep data in-house, that choice of where each product runs is the reason to shortlist it.
Integrated Cyber Defense Manager
ICDm manages the single Symantec Endpoint Security agent on premises, in hybrid mode or from the cloud, for desktops, servers and phones.
Enterprise Console
Cloud SWG administration is moving into the new Enterprise Console, which Broadcom walked through in a July 2026 migration video.
Carbon Black Cloud
NGAV, EDR, Live Query and workload protection share a sensor and console; Sensor Gateway extends them to systems with no internet route.
Identity Security Platform
Home of VIP Authentication Hub, which brings modern MFA to SiteMinder, and paired with PAM as Symantec Identity Security for VCF.
Start with the job — web, data, endpoint, identity, APIs or jobs — then ask which form each product runs in.
Peer & market recognition
Every claim on this hub traces to one of these public signals.
Overall Leader, Zero Trust Platforms 2026
for Symantec SSE, in a Leadership Compass report that Broadcom hosts on its own site
Overall Leader, IGA 2026
also a Product, Innovation and Market Leader, and an Overall Leader for Identity and Access Governance the same year
Overall Leader, Email Security 2025
for the Symantec email line, named Product, Market and Innovation Leader as well
Top Player, Secure Email 2025
in Radicati’s Secure Email Market Quadrant for 2025
Value Leader, Workload Automation 2025
Automic Automation in EMA’s Radar for Workload Automation and Orchestration
Niche Player, SSE Magic Quadrant 2025
Zscaler, Netskope and Palo Alto were that year’s Leaders; no Broadcom product holds a Gartner Leader placement
Overall Leader, ZTNA 2022
an older placement for Symantec ZTNA that its product page still cites
Three PAM CVEs published January 2025
CVE-2025-24500, 24505 and 24507 affect PAM 4.2.0 and earlier; secondary sources name 4.2.1 as the fix
The company in six figures
See the platform, hear the pitch
Make some noise for Symantec CBX
A March 2026 teaser for Symantec CBX, which was announced that month and has not yet shipped.
Symantec Enterprise Cloud
An October 2022 overview of the Symantec portfolio, recorded before Carbon Black joined it.
Symantec Enterprise Cloud: Data-centric, Hybrid Security
An August 2022 film on Symantec’s data-centric, hybrid approach, from the first year under Broadcom’s brand.
Where Broadcom sits — the grids
Two company-level views you won’t find on any vendor site — tap any dot for the rationale. The category-level grid lives on the product page.
Broadcom Across Its Solution Areas
Each dot is a Broadcom solution area: competitive position vs category momentum.
KuppingerCole made Symantec IGA an Overall Leader in 2026; PAM was not evaluated in Gartner’s 2025 PAM Magic Quadrant.
Self-Hosted Options × Portfolio Breadth
How much of each vendor’s security line you can run on your own servers vs how many security categories it sells.
Fifteen products here, most with an on-site form: Edge SWG, DLP Core, PAM, IGA, SiteMinder, App Control, Layer7 and Automic; all quoted.
Positions are TechBag’s illustrative synthesis of public review-platform standings and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
New to this? Learn it properly.
Zero-jargon starting points, in reading order. Each links into the deep education on the product page.
Where should you start with Broadcom?
Answer three questions; we’ll point you at the right starting product. No email required — this isn’t that kind of quiz.
1. What problem is forcing the decision?
2. Where must it run?
3. Who will own it?
Fifteen products, three teams
Symantec and Carbon Black sit in the Enterprise Security Group, identity in its own division, and Layer7 and Automic in other Broadcom software units.
Read →Cloud SWG or Edge SWG?
One Web Protection Suite seat covers both. Edge SWG runs on your hardware or VMs, Cloud SWG in Broadcom’s PoPs, and the hardware is billed extra.
Read →Names that changed
ProxySG is now Edge SWG, Web Security Service is Cloud SWG and Secure Access Cloud is ZTNA; Workspace ONE and Horizon left for Omnissa in 2024.
Read →Enterprise or Complete?
SES Complete adds Adaptive Protection, Active Directory defence, Threat Hunter and EDR to the advanced prevention in the Enterprise edition.
Read →Where data sits in India
Cloud SWG has Delhi and Mumbai PoPs. No India region is established for Carbon Black Cloud, CloudSOC or Email Security.cloud, so ask in writing.
Read →Where Symantec web security fits
The Network Security & SASE category’s Secure Web & DNS guide compares cloud and on-site web gateways and DNS filters, including both Symantec gateways and the CloudSOC CASB.
Read →The acronym decoder
Every term on these pages, in one place- SWG
- Secure web gateway: a proxy that decrypts web traffic and checks it against policy.
- Web Protection Suite
- Broadcom’s per-user licence that runs Cloud SWG and Edge SWG under one seat.
- ZTNA
- Zero trust network access: per-app connections in place of a network-wide VPN.
- CASB
- Cloud access security broker: discovery and control of the SaaS apps staff use.
- DLP
- Data loss prevention: finds sensitive data and stops it leaving by any channel.
- EPP
- Endpoint protection platform: prevention-first anti-malware on laptops and servers.
- EDR
- Endpoint detection and response: recording endpoint activity to hunt and contain attacks.
- Allow-listing
- Letting only approved software run, the model Carbon Black App Control uses.
- PAM
- Privileged access management: vaulting admin credentials and watching their use.
- IGA
- Identity governance and administration: who has access, who approved it, and when.
- API gateway
- A proxy in front of APIs that enforces authentication, rate limits and policy.
- Workload automation
- Scheduling and orchestrating batch jobs, file transfers and business processes.
Buy it like you’ve done this before
The procurement playbook TechBag runs with IT buyers — steps, licensing cheat-sheet, and the pitfalls that cost quarters.
Match the product to the job
TechBag covers 15 Broadcom products across separate divisions and brands. Start from the problem, not the brand, so you do not pay for a bundle to get one feature.
Pin down the licence unit
Web Protection Suite is per user per year. Broadcom publishes no unit for most other products, so ask for it on every line before you compare quotes.
Ask what the bundle already holds
Content Analysis, isolation and threat intelligence come inside Web Protection Suite; CloudSOC is sold in DLP Cloud; ZTNA and Full Browser Isolation are add-ons.
Check where the data will sit
Cloud SWG has Delhi and Mumbai PoPs. India regions for SES, CloudSOC, Email Security.cloud and Carbon Black Cloud are not established, so get the region in writing.
Plan upgrades and patches
Move Edge SWG off SGOS 7.3 before support ends around December 2026, upgrade PAM past 4.2.0, and roll out the SES agent in place of the end-of-line WSS Agent.
Get it priced in rupees
Broadcom sells through partners such as Westcon-Comstor and publishes no list price. TechBag scopes the products and units and quotes the total in INR with GST.
The licensing cheat-sheet
| Product | Licensing model | How you enter | Best for |
|---|---|---|---|
| Cloud SWG | Per user per year, usually inside Web Protection Suite · ZTNA, CASB, DLP and Full Browser Isolation are add-ons | Quote through partners | Cloud web security |
| Edge SWG | Same per-user Web Protection licence · S210/S410 hardware or virtual appliance bought separately | Quote; hardware extra | On-site web proxy |
| ZTNA | Add-on to Cloud SWG and Symantec SSE | Quote through partners | VPN replacement |
| CloudSOC CASB | Sold inside the DLP Cloud bundle | Quote through partners | SaaS visibility and control |
| DLP | DLP Core suite for the on-site estate · DLP Cloud bundle for cloud apps and email | Quote through partners | Enterprise data protection |
| Endpoint Security | Subscription · Enterprise or Complete edition | Quote through partners | Endpoint prevention |
| Carbon Black Cloud Endpoint | Subscription · Foundations, Advanced or Enterprise EDR edition | Quote through partners | Cloud NGAV and EDR |
| Carbon Black App Control | Subscription · on premises or in a public or hosted private cloud | Quote through partners | Fixed-function devices |
| Carbon Black Workload | Subscription for servers and VMs | Quote through partners | Server protection |
| Email Security.cloud | Subscription · threat response, DLP and PGP encryption are add-ons | Quote through partners | Cloud email security |
| PAM | Subscription · vault, sessions and secrets | Quote through partners | Privileged accounts |
| IGA | Subscription · current release 15.0 | Quote through partners | Access governance |
| SiteMinder | Subscription · MFA through VIP Authentication Hub | Quote through partners | Web single sign-on |
| Layer7 API Gateway | Standalone or within Layer7 API Management | Quote through partners | Regulated APIs |
| Automic Automation | Self-hosted or SaaS subscription | Quote through partners | Enterprise job scheduling |
Every Broadcom product is quote-only and sold through partners such as Westcon-Comstor; Broadcom publishes no list price. Web Protection is one per-user, per-year licence for Cloud SWG and Edge SWG, with Edge hardware extra. TechBag gets the quote itemised in INR with GST.
Five pitfalls that cost buyers quarters
Reading a UK price as the price
The £56.25 per user per year seen for Web Protection Suite comes from a UK G-Cloud reseller listing. It is that reseller’s MSRP, not a Broadcom list price, so get a partner quote.
Licensing both gateways twice
One Web Protection Suite seat covers Cloud SWG and Edge SWG; only the Edge hardware is extra. Check a quote does not charge the same users for each gateway.
Leaving Edge SWG on SGOS 7.3
Support for 7.3 ends around December 2026. Plan the move to 7.4, the long-term release, and replace S200, S400 or S500 units covered by the same notice.
Rolling out the WSS Agent
Version 9 is its final major release. The SES agent’s Web and Cloud Access Protection does the same job on Windows and macOS, so deploy that instead.
Assuming an India data region
Only Cloud SWG documents Indian PoPs. Carbon Black Cloud lists no India region, and SES, CloudSOC and Email Security.cloud are unconfirmed, so ask first.
The evaluation kit
Each intel page carries an 8-question vendor checklist and a value calculator:
Skip the homework entirely
Bring your requirements and current tool bills — a TechBag advisor models the whole decision for you.
Book a discovery call →The forces shaping this market
Four trends with momentum scores (TechBag’s read of analyst and market signals) — and what each means for your next decision.
Category momentum — estimated market growth
Illustrative CAGR synthesis**TechBag’s illustrative estimate, not a quoted analyst figure. The takeaway: buyers are moving spend towards zero trust access and identity governance — which is where Broadcom’s 2026 analyst recognition sits.
Endpoint and XDR convergence
Broadcom announced Symantec CBX in March 2026, a cloud XDR that joins Symantec prevention with Carbon Black EDR, due later in the year.
What it means for you
Ask for a ship date in writing before you plan a refresh around CBX.
Governance as a security control
KuppingerCole named Symantec IGA an Overall Leader in 2026, in both its IGA and its Identity and Access Governance compasses.
What it means for you
Treat access reviews as part of security, not an audit chore.
Hybrid web security
One per-user Web Protection licence runs the gateway in Broadcom’s cloud or on your own hardware, under one policy.
What it means for you
Ask any web security vendor what happens to on-site proxies.
AI inside job scheduling
Automic V26, generally available since April 2026, added AI job types and MCP orchestration.
What it means for you
Check which release your automation roadmap actually depends on.
Questions buyers ask about Broadcom
Ready to shortlist Broadcom?
Open any of the fifteen intel pages for the deep dive, or let a TechBag advisor build the case with you — the products that fit the job, the licence units to count, where the data will sit, quotes, trials, GST invoicing and lifecycle support included.
Stats, positions and figures are illustrative syntheses of public materials; verify before purchase.