---
title: "Configure Secure Web Gateway Port for Linux"
slug: "configure-secure-web-gateway-port-for-linux"
updated: 2026-03-10T09:35:07Z
published: 2026-03-10T09:35:07Z
canonical: "help.scalefusion.com/configure-secure-web-gateway-port-for-linux"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.scalefusion.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure Secure Web Gateway Port for Linux

By default, Secure Web Gateway (SWG) listens for traffic on port 8080. However, in many enterprise environments, administrators may need to change this port due to network policies, port conflicts, or security requirements. This guide provides instructions to verify the currently configured port, change it to a custom value, or revert it back to the default.

This flexibility allows IT teams to adapt SWG deployment to different network environments while maintaining consistent security and traffic handling across managed devices.

## Applicable Tux Agent Versions

This configuration applies to the following tux agent versions:

- `tux-agent_3.6.1~20260210061818-0_armhf.deb`
- `tux-agent-3.6.1~20260210055508-0.el8.aarch64.rpm`
- `tux-agent_3.6.1~20260210053924-0_arm64.deb`
- `tux-agent-3.6.1~20260210052330-0.el8.x86_64.rpm`
- `tux-agent-3.6.1~20260210052405-0_amd64.deb`

## Default Configuration

- **Default Port:** `8080`

If no custom port is configured, SWG automatically listens on port 8080.

## Verify the Current Listening Port

To verify the port currently used by SWG, run the following command on your terminal window:

```plaintext
nft list ruleset
```

This command displays the current firewall rules, including the port configured for SWG.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-ZGAIWPOU.png)

## Change the SWG Listening Port

To configure a custom port for SWG, run the following script:

```plaintext
set-swg-port.sh <PORT_NUMBER>
```

### Example

```plaintext
set-swg-port.sh 3030
```

This command configures the SWG service to listen on **port 3030**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-CDUPAPT5.png)

## Revert to the Default Port

To remove the custom port configuration and revert to the default port (**8080**), run the script without any parameters:

```plaintext
set-swg-port.sh
```

> [!NOTE]
> Running the script without arguments resets the SWG configuration to the default port.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-2F61QWEF.png)