Blue Coat AV2400 Series Appliances

Blue Coat AV2400 Series Overview:

Blue Coat ProxyAV™ delivers advanced malware detection at the Web gateway and is as a key component of the Application Delivery Network (ADN) infrastructure that integrates application visibility, acceleration and security. ProxyAV appliances are designed for use with ProxySG Full Proxy Edition appliances to provide inline threat protection and malware scanning of Web content at the gateway, an integral element of Blue Coat's layered defenses security framework. The unique, high-performance architecture of ProxyAV combined with leading anti-malware engines efficiently secure Web traffic and protect users from Web-based malware. Together, ProxyAV and ProxySG provide superior performance and the lowest hardware footprint requirements, resulting in an environmentally efficient and cost-effective solution. Protect your users and information from viruses, Trojans, worms, malware and other forms of malicious content -- even extending protection to users who are not running anti-virus software.

Inline Threat Analysis

ProxyAV supports leading malware engines from Panda, Sophos, McAfee and Kaspersky with updates as frequently as every 5 minutes, providing more effective protection than traditional desktop anti-virus solutions. Unlike competitive offerings, Blue coat provides deferred scanning which removes long load objects like Web radio and other media from processing threads to further optimize Web gateway performance.

ProxyAV supports four modes of content analysis, including traditional object analysis, trickle first or last stream analysis, and deferred scan. ProxyAV can be configured to analyze both inbound and outbound traffic and includes options such as set time-out duration, drop file if errors in detection occur, and define trusted sites. Policy can be set for allow/deny lists, with extensions along with file size and content type restrictions. Alerts and log files can also be customized.

Performance and Scalability

ProxyAV is a purpose-built appliance designed for efficient malware analysis at the gateway. Load balancing and clustering technology achieve higher efficiency with less hardware than single box solutions. ProxyAV communicates with ProxySG via ICAP(S), a high-performance and standards-based protocol. The multi-core architecture of ProxyAV combined with load balancing and clustering technology boost performance to 1Gbps throughput for high-availability Web gateway deployments.

Scan Everything

ProxyAV provides best-in-class malware scanning with performance and security. ProxyAV can scan files up to 2GB in size and analyze compressed archives up to 99 layers deep. ProxyAV integrates with multiple threat awareness clouds, including Blue Coat WebPulse and third-party clouds, providing multi-vendor cloud protection at the gateway.

New ProxyAV 1400 / 2400

Designed for distributed enterprise and service provider environments of 10,000 users or more, the ProxyAV 1400 and 2400 are designed to pair 1:1 with the ProxySG 9000. Built-in hardware serviceability features include sliding rail mounts to reduce maintenance time. Dual, redundant power supplies ensure high availability.

Key Benefits

• Fewer appliances mean less management and rack space, providing a better ROI
• Built-in investment protection with four and five year service contracts
• Multiple vendor cloud defenses add additional layers of malware analysis
• Security and Performance without compromise

Features:

The Blue Coat ProxyAV Series™ integrated with the Blue Coat ProxySG appliances are part of a layered defense architecture that also includes the WebPulse collaborative cloud defense. ProxyAV plays a key role as the inline threat detection layer for this security framework where SSL traffic is not always visible to cloud analysis and thus requires inline inspection for threats and data loss. ProxyAV also analyzes all file downloads from Web 2.0 sites with user authentication or credential tokens, plus web mail, file sharing and other methods of content delivery.

Scalability and Performance

Pairing the ProxyAV with the ProxySG provides significant advantages for high-speed Web threat analysis that standalone systems cannot match, such as:

• ProxySG processes Web objects at wire speed with integrated caching
• ProxyAV only scans Web objects forwarded from the ProxySG for improved performance
• ProxyAV eliminates redundant scanning of frequently downloaded objects with scan-once-serve-many-times intelligent cache integration

The Blue Coat solution means less hardware, high performance Web threat analysis, and granular control of Web communications. The ProxyAV with ProxySG provides a key defense layer in an extensible security framework that works as an integrated system.

Ease of Deployment & Administration

The ProxyAV is optimized for integration with ProxySG as a broader solution through the following:

• Purpose-built appliance solutions from a single vendor; designed, tested and manufactured for compatibility
• Default communications, settings, and connection threads between the ProxySG and the ProxyAV are optimized for superior performance
• Updates to the ProxyAV are automated with definable time frequency settings from 5 to 30 minutes
• Administrators can define default or custom locations for anti-malware updates, and configure behavior of ProxyAV upon license expiration
• Configurable options for scanning files include: set time-out duration, drop file if errors in scanning occur, and define trusted sites
• Heuristics fingerprint recurring files as infected or clean for non-cacheable content to improve efficiency
• Administrators can apply allow/deny lists with extensions along with file size and content type restrictions
• Customized alerts can notify administrators when a virus is found, AV updates are successful, AV updates fail, subscriptions expire, files are dropped, or files pass without scanning
• ProxyAV log files can be customized using standard logging formats and sent off-box via TCP or UDP for processing
• Health checks from ProxySG to ProxyAV verify status and availability of appliances
• New firmware updates and release notes are sent to ProxyAV for administrator approval and installation
• Reporter provides a dashboard with customizable graphics and tables for ProxyAV threat detections, plus detailed reports for malware, phishing, Web threats and unwanted programs

Layered Security

Recent increases in Web threats that infect popular Web sites, search engine results, social networking environments, Web 2.0 blogs and forums, and new levels of phishing attacks show the importance of a layered security strategy. ProxyAV provides the following features:

• Choice of anti-malware engines with automated updates on the ProxyAV, allowing a layered virus scanning strategy with "Vendor A" for Web gateway threat detection and "Vendor B" for desktops, servers and gateways
• Support for Kaspersky, Sophos, Panda and McAfee anti-malware engines
• Option to detect malware inside of encrypted SSL traffic
• Inbound and outbound threat detection deployments

Strongest System For Preventing Unknown Spyware

• ProxyAV allows behavioral analysis of new and unknown Web threats and malware
• ProxySG allows blocking all unauthorized drive-by downloaders and installers by category or site
• ProxySG allows blocking of masquerading files that fail true file type checks
• ProxySG with Blue Coat WebFilter includes a community watch cloud service called WebPulse that unites 62M users to analyze new Web links and content for Web threats
• WebFilter also provides a real-time Web content rating service to categorize newly created or previously unseen content on the fly for users such as phishing attacks that appear and fade away quickly
• All of the above can be applied to malware and Web threats attempting to enter via encrypted SSL tunnels

Diagram:

Blue Coat provides a layered defense against Web 2.0 threats leveraging WebPulse cloud intelligence from over 62M users to protect the Web gateway and remote users. ProxySG provides unmatched policy flexibility, performance and reliability to secure networks and accelerate content.

Technical Specifications:

Documentation:

Download the Blue Coat ProxyAV 1400/2400 Datasheet Datasheet (PDF).