Blue Coat AV510 Series Appliances

The Blue Coat AV™ 510 (AV510) enables organizations to scan for viruses, worms, spyware, ‘bots and trojans entering through Web-based backdoors, at wire-speed, including:

• Personal Web email accounts where a majority of viruses and worms propagate
• Browser based file downloads that bypass existing virus scanning defenses
• SSL-encrypted malware
• Spyware Trojans, downloaders, ‘bots, and root-kits

Traditional, Web anti-virus gateways often lack scalability and performance for HTTP, HTTPS and FTP scanning, leaving desktops to defend themselves. The AV510 combined with a Blue Coat SG Appliance provides a proven record of enterprise robustness for effective virus scanning, plus complete visibility and control of enterprise Web communications.

The AV510 is a purpose-built solution designed for quick integration with the Blue Coat SG 810 for deployment in medium enterprise or distributed environments. Heuristic Trojan scanning can also prevent many spyware variants. It provides fast, low-latency scanning performance and defense in depth via a choice of antivirus engines from Kaspersky, Sophos, McAfee, Ahn Lab and Panda.

The Blue Coat AV510 integrated with the Blue Coat SG provides the scalability and performance to scan Web communications and file downloads for viruses, worms and trojans.

Features:

The Blue Coat AV 510 Series™ (AV510) integrated with the Blue Coat SG Appliance (Blue Coat SG) represents the next generation in high-end appliance platforms for robust, high-performance Web virus scanning. Key Features include:

• Scalability and Performance
• Layered Security
• Strongest System For Preventing Unknown Spyware
• Ease of Deployment & Administration

Scalability and Performance:

Pairing the AV510 with the Blue Coat SG provides significant advantages for high-speed Web virus scanning that standalone systems cannot match, such as:

• Blue Coat SG processes Web objects at wire speed with integrated caching
• AV510 only scans Web objects forwarded from the Blue Coat SG for improved performance
• AV510 eliminates redundant scanning of frequently downloaded objects with scan-once-serve-many-times intelligent cache integration
• AV510 provides load balancing and clustering of multiple AV510 appliances for flexible scalability
• Granular policies and method-level controls in the Blue Coat SG stop worm outbreaks where virus signatures fall short (e.g., spIM buddylink)
• Active/active bridging provides failover support on the Blue Coat and allows the addition of multiple AV510 appliances for future growth
• Blue Coat SG includes world’s fastest proxy cache which substantially accelerates most web traffic

The Blue Coat solution means less hardware, high performance virus scanning, and granular control of Web communications. The AV510 with Blue Coat SG provides unmatched visibility, control, and scalability in an integrated system.

Layered Security:

Recent virus and worm outbreaks, spyware, and the increase in browser-based attacks show the importance of a layered security strategy provided by:

• Choice of antivirus engine with automated updates on the AV510, allowing a layered virus scanning strategy with "Vendor A" for network scanning and "Vendor B" for desktops, servers and gateways
• Support for Kaspersky, Sophos, Panda, Ahn Lab and McAfee anti-virus scanning engines
• Option to scan for malware inside encrypted SSL traffic including webmail attachments, anonymizer sessions, HTTPS hacker sites
• Utilizing the Blue Coat SG for control over Web communications for both outbound requests and content replies to provide added protection beyond virus signatures and patterns
• Implementing three key methods to control Web communications - the Blue Coat SG controls "transport" and "content", while the AV 510 provides "signatures"
• Enforcing the Blue Coat SG policies to control Web communications upon outbreaks and before virus signatures are available

Strongest System For Preventing Unknown Spyware:

• AV510 allows heuristic scanning of new and unknown spyware Trojans (Kaspersky or Panda recommended)
• Blue Coat SG allows blocking all unauthorized drive-by downloaders (spyware’s preferred vector)
• Blue Coat SG allows blocking many exploits used by spyware via policy updates
• Blue Coat SG allows blocking spoofed files with non-executable extensions, but executable code in the header
• Blue Coat SG allows blocking potential spyware downloads from 2 Million+ known spyware domains and sites at high risk of downloading spyware…regardless of how new their spyware code is. Page views are still permitted to maximize business usefulness of Web.
• Blue Coat SG with Blue Coat Web Filter™ includes Dynamic Real Time Rating™ to categorize new objectionable sites at high risk of having spyware (e.g., porn sites) in less than 200 milliseconds
• All of the above can be applied to spyware attempting to enter via encrypted SSL tunnels

Ease of Deployment & Administration:

The AV510 is optimized for integration with Blue Coat SG as a complete system, through the following:

• Purpose-built appliance solutions from a single vendor; designed, tested and manufactured for compatibility
• Default communications, settings, and connection threads between the Blue Coat SG and the AV510 are optimized for superior performance
• Virus updates to the AV510 are automated with definable time frequency settings, and cached content is automatically cleared with each update
• Administrators can define default or custom locations for signatures and virus engine updates, and configure behavior of AV510 upon license expiration
• Configurable options for scanning files include: set time-out duration, drop file if errors in scanning occur, and define trusted sites
• Heuristics fingerprint recurring files as infected or clean for non-cacheable content to improve efficiency
• Administrators can apply allow/deny lists with extensions along with file size and content type restrictions
• Customized alerts can notify administrators when a virus is found, AV updates are successful, AV updates fail, subscriptions expire, files are dropped, or files pass without scanning
• AV510 log files can be customized using standard logging formats and sent off-box via TCP or UDP for processing
• Health checks from Blue Coat SG to AV510 verify status and availability of appliances
• New firmware updates and release notes are sent to AV510 for administrator approval and installation

Integrated System Solution:

The combination of Blue Coat SG + AV510 provides scalable performance with control over transport and Web content with integrated virus scanning. Virus engines and signatures are only one part of Web content control. New worms and trojans are using IM and Web spam to propagate with new techniques always on the horizon. For the first time, Web communication controls and Web virus scanning work together using Blue Coat solutions.

Technical Specifications
Models:	AV510-A
System:
Disk Drives	1 x 80 GB SATA
RAM	1 GB
Network Interfaces	2 integrated (on board) 10/100/1000 Base-T NICs
Operating Environment:
Power	AC power 100-240V, 50-60Hz, 65 watts, 2A
Temperature	5ºC to 35ºC (41ºF to 95ºF)
Humidity	Less than 90% relative humidity, non-condensing
Altitude	Up to 3048M (10,000ft)
Dimensions and Weight:
Enclosure	19" Rack-mountable (with mounting kit)
Dimensions (LxWxH)	58cm x 44cm x 4.4cm (22.8in x 17.4 in x 1.7 in)
Weight	12.3kg (27 lb)
Regulations:
Emissions	FCC Class A, EN55022 Class A, VCCI Class A No 1706609, BSMI, CCC, Ctick
Safety	CSA C22.2 No. 950 M95, UL 60950 3rd Edition, EN60950, TUV-GS, TUV-S, CCC, BSMI
Standards	UL/CSA, TUV-S, BSMI, Ctick, CCC, CE
Support:
Support	Standard warranty: 90-day software & phone support with 1-year hardware support; extended and upgraded support plans available

 

	Download the Blue Coat Proxy AV510 Series Datasheet (PDF).
	Download the Blue Coat SG with Web Virus Scanning Datasheet (PDF).