Secure Web Proxy supports the local intermediate CA signing certificate issuance mode for TLS inspection.

Secure Web Proxy supports the local intermediate CA signing certificate issuance mode for TLS inspection. By using this mode, Secure Web Proxy caches a single intermediate certificate authority (CA) certificate from your CA pool to sign leaf certificates locally for requested domains, reducing certificate issuance requests and transaction costs. To use this certificate issuance mode, you must make sure that your CA pool is configured to issue intermediate CA certificates.

For more information, see Certificate issuance modes and Configure a local intermediate CA signing.

This feature is generally available (GA).