| Category | Feature | TMWS Standard | TMWS Advanced |
|---|---|---|---|
| Deployment | Cloud gateway | Yes | Yes |
|
*On-premises gateway *On-premises gateway is not available in TMWS Standard in Japan | Yes, up to 50 gateways | Yes, up to 100 gateways | |
| Deployment mode | Cloud: forward proxy On-premises: forward proxy, ICAP | Cloud: forward proxy On-premises: forward proxy, ICAP | |
| Cloud PAC file management | Yes | Yes | |
| Supported endpoint platform | Windows, Mac, iOS/iPadOS, Android and Chromebook | Windows, Mac, iOS/iPadOS, Android and Chromebook | |
| Proxy chaining | Yes | Yes | |
| Port forwarding | Yes, cloud gateway only | Yes, cloud gateway only | |
| Traffic handling | HTTP | Yes | Yes |
| HTTPS decryption | Yes | Yes | |
| TLS 1.3 | Yes | Yes | |
| HTTP/2 | Yes | Yes | |
| Bandwidth control | Yes | Yes | |
| User authentication | Active Directory | Both cloud and on-premises: ADFS, agent On-premises only: Kerberos | Both cloud and on-premises: ADFS, agent On-premises only: Kerberos |
| Azure Active Directory (Azure AD) | Yes | Yes | |
| OKTA | Yes | Yes | |
| Yes | Yes | ||
| Hosted user | Yes | Yes | |
| Access Rules | Approved/Blocked URL lists | Yes | Yes |
| Customized access rules | Yes | Yes | |
| URL filtering | Yes | Yes | |
| Application control | Yes | Yes | |
| Cloud application access control | No | Yes | |
| Cloud service filter | Yes, up to 6 filters | Yes, up to 200 filters | |
| Customized user notifications | Yes | Yes | |
| Enforce safe search for Google, Yahoo!, Bing, and Youtube | Yes | Yes | |
| Security | Web Reputation | Yes | Yes |
| Anti-malware | Yes | Yes | |
| Botnet detection | Yes | Yes | |
| Community file reputation | Yes | Yes | |
| Predictive machine learning | Yes | Yes | |
| Cloud sandboxing | No | Yes | |
| On-premises sandboxing | Yes, on-premises gateway only | Yes, on-premises gateway only | |
| Custom Defense | Yes | Yes | |
| Data Loss Prevention (DLP) | No | Yes | |
| Logs and reports | Scheduled and on-demand reporting | Yes | Yes |
| Customized report | Yes | Yes | |
| Cloud syslog forwarding | Yes | Yes | |
| On-premises syslog forwarding | Yes | Yes | |
| Audit logs | Yes | Yes | |
| Administration | Role-based access control | Yes | Yes |
| Policy backup and restore | Yes | Yes | |
| Administrator alerts | Yes | Yes | |
| On-premises gateway upgrade | Yes, on-premises gateway version 3.4.1 and later | Yes, on-premises gateway version 3.4.1 and later | |
| Product integration | Apex Central | Yes | Yes |
| Deep Discovery Analyzer | Yes, on-premises gateway only | Yes, on-premises gateway only | |
| Remote Manager | Yes | Yes | |
| Vision One | Yes | Yes |
