Traffic Forwarding profiles are managed in the cloud and delivered to the client. The client will evaluate and acquire traffic to send to the cloud service based on these policies. The cloud service will also check the Traffic Forwarding policies as well as the addition of additional policies, controls and checks as configured by the Administration (Tenant Restrictions, Internet Access web filtering policies etc).