IWSVA can act as an upstream proxy for network clients. Client browser settings must
               be configured to redirect traffic to IWSVA. IWSVA scans HTTP and FTP traffic and there
               is no separate need for another dedicated proxy server. Content is scanned in both
               the inbound and outbound directions. However, the Application Control reports and
               polices will not function in proxy mode because IWSVA only sees the HTTP, HTTPS, and
               FTP protocols.
            Forward Proxy Mode also provides the following additional capabilities:
            
               - 
                  
                  Forwards all traffic to another upstream proxy server 
- 
                  
                  Participates in a proxy chain configuration with other proxy servers and supports
                     X-Forwarded-For functionality 
- 
                  
                  Uses Guest port to provide a dedicated traffic channel to guest users. IWSVA applies
                     the Guest policies to the traffic that passes through the Guest port.