Can LTM act as Forward Proxy?

Yes. Forward SSL license is needed. No APM means you cannot identify users while SWG is meant for URL filtering and for malware scanning of certain web pages user tries to reach..

In this case, you still need to route internet traffic to a malware scanner of sorts..