How is traffic typically routed to the Cisco Web Security Appliance?

policy configuration

configuration on end user devices, pointing to the Cisco WSA

in$-$line deployment for all web traffic

transparent redirection of web traffic