Blue Coat RA810 Series Appliances

RA Connector – On Demand Access for All Applications

The RA810 Series of rack-mountable proxy appliances provides enterprises and large branch offices with the power to extend remote access to employees, partners, and customers while delivering on demand endpoint security and information protection features.

Typically deployed within the DMZ, the SG810 platform provides remote employees and third parties granular access to corporate applications. Extensive support for unmanaged devices, such as home desktops, partner PCs, and Internet kiosks, by never requiring local admin rights or VPN client software and through a rich set of information protection features to block information leakage at the endpoint, such as browser cache encryption and complete session cleanup.

Object-based policy management enables intuitive and flexible rules that control access to resources based on user, target resource, security profile of the device, time of day, and whether the user’s endpoint is corporate-managed or unmanaged. The RA810 features LAN-speeds and support automatic failover without requiring the user to re-authenticate.

Features:

Blue Coat RA delivers an all-in-one remote access and endpoint security solution that leverages patent-pending Connector technology to provide access from both corporate-managed and unmanaged endpoints. Through the RA Connector, RA extends access to a rich set of Web and non-Web applications without ever requiring the installation of client software, local admin rights or a system reboot. It does not require any port forwarding or network extension clients; all access is on demand. And, the application support is limitless: if the TCP or UDP application meets the following conditions, it will be supported without client software and without local admin rights.

1. Application client initiates communication (e.g., Outlook contacting Exchange)
2. Application client can be launched (or re-launched) after RA Connector has loaded.
3. Application must be running in user’s environment (e.g., not a system service)
4. Application cannot access internal file shares via drive mapping or UNC specification (such as S:\filename or \\server\filename)

If the application (Web or non-Web, off-the-shelf or proprietary, new or legacy) meets these conditions, RA will support it. No client software. No admin rights.

Additional Key Features:

On Demand Remote Access

• Extensive application support without ever requiring VPN client software
• Comprehensive web application support without error-prone URL rewriting
  Single access mode for all users, eliminating the headache of managing multiple access modes for different users
• Support for locked down environments by never requiring local admin rights on end user devices for accessing web and non-web applications
• In office user experience (e.g. launch native applications from desktop)
• Application-layer access across all applications that never requires unrestricted network-layer connectivity
• No changes to desktop, leaving desktop as it found it when user session is over

Integrated Endpoint Security:

• Pre-authentication and continuous spyware scan that leverages patent-pending AMP (Adaptive Malware Protection) technology to provide a pre-login scan for framegrabbers and keyloggers and continues to scan for duration of user session
• AMP technology identifies and temporarily suppresses processes and programs identified as potential threats, such as framegrabbers and keyloggers, for the duration of user session without any permanent system changes
• On demand host integrity checks for a variety of conditions (such as personal firewall settings, antivirus software updates and OS patches and service packs)
• Application blacklists and whitelists to control which applications are allowed to be accessed / not accessed by the end user during the remote access session
• Configurable split tunneling to block or enforce split tunneling

Integrated Information Protection:

• Browser security features encrypt all information stored by the browser, including cache, temp files and cookies, and clear all session information at the end of SSL VPN session using DoD 5220.22-spec file deletion
• Information usage controls for defining and enforcing what users can do with the information accessed and downloaded by web applications, such as blocking or allowing file save, print, save to clipboard, cut-and-paste, and screen print operations
• Framegrabber and keylogger protection by scanning for and suppressing keyloggers and framegrabbers to prevent spyware from stealing personal and corporate information

Granular Application & User Management:

• Intuitive object-based policy manager controls user access to targeted resources
• Granular user and asset control defines access by user, target resource, source/location of user, time of day, and security profile of connecting device
• Policy wizard creates access policies in minutes
• Integrates with leading authentication schemes, such as Microsoft Active Directory, LDAP/LDAPS, RADIUS, RSA SecurID®, and TACACS+
• Flexible tiered access controls allow minimum security thresholds, such as requisite OS patches, AV updates or personal firewalls settings, when accessing specific applications and other resources
• System dashboard provides overview of system health (e.g. CPU usage and disk utilization), concurrent users logged on and overall system status

Scalability and Performance:

• Support 100, 250, 500 or 1000 concurrent users
• Transparent, automatic failover for uninterrupted connectivity
• Supports external load balancers to satisfy performance-critical applications
• High performance architecture to easily support LAN speeds

Technical Specifications
Models:	RA810-A	RA810-B
System:
Disk Drives	1 x 73 GB Ultra 320 SCSI	1 x 73 GB Ultra 320 SCSI
RAM	2 GB	3 GB
Network Interfaces	2 integrated (on-board) 10/100/1000 Base-T NICs. Optional 2x10/100/1000Base-T card (dual GigE with passthru) or 2x10/100/1000Base-SX (dual gigE Fibre) card
Operating Environment:
Power	AC power 100-240V, 60-50Hz, 65 watts, 6.3-3.0A
Temperature	5ºC to 35ºC (41ºF to 95ºF)
Humidity	Less than 90% relative humidity, non-condensing
Altitude	Up to 3048M (10,000ft)
Dimensions and Weight:
Enclosure	19" Rack-mountable
Dimensions (LxWxH)	58cm x 44cm x 4.4cm (22.8in x 17.4 in x 2.7 in)
Weight	442mm (17.4in)
Weight	578mm (22.75in); mounting depth
Weight	33 lb 15kg
Regulations:
Emissions	FCC Class A, EN55022 Class A, VCCI Class A No 1706609, BSMI, CCC, Ctick
Safety	CSA C22.2 No. 950 M95, UL 60950 3rd Edition, EN60950, TUV-GS, TUV-S, CCC, BSMI
Standards	UL/CSA, TUV-S, BSMI, Ctick, CCC, CE
Support:
Support	Standard warranty: 90-day software & phone support with 1-year hardware support; extended and upgraded support plans available
Additional Features:
Protocols and Applications	SSL VPN supports ICMP and virtually any TCP or UDP application. Partial list of tested applications and protocols include: HTTP; FTP; SMTP; RDP; VoIP; H.323; SIP; RTP/RTSP; Citrix ICA Client®; IIOP; Microsoft Outlook (Exchange, IMAP, or POP); PCanywhere®; Yahoo Messenger®, AOL Instant Messenger®, MSN Messenger Service®; Open Bloomberg®
Connectivity and NAT	DNS Proxying ; Network Address Translation (NAT); Firewall and Proxy traversal; Multiple Server Chaining
Performance and Reliability	High Availability; Support for External Load Balancers; Symmetric Multiprocessor Support; Intel Hyperthreading Support
Administration Tools	Web-based Management Console; Real-time status and monitoring; Role-based administration
Auditing and Logging	Session, connection, failed connection logging; Administrative auditing; Endpoint Security event logging; Syslog support; Log file rotation and automated archiving; redundant logging; off-gateway audit trail
VPN Access Control Criteria	IP Address (Source and Destination); DNS Domain Name; Application/Port; User; Group; Time; Host Integrity Status
Encryption Standards	AES with 256-bit key and SHA MAC; RC4 with 128-bit key and MD5 MAC; DES with 56-bit key and SHA MAC; 3DES with 168- bit key and SHA MAC
Authentication Mechanisms	Internal Username & Password (RFC1929); Microsoft Active Directory; LDAP/LDAPS; RADIUS; RSA SecurID®; TACACS+
Application Support Guidelines	RA supports any TCP or UDP application where (a) client initiates communication (b) application is running in user’s environment (c) application uses standard Winsock API and (d) application does not access internal file shares. Also, application client must be launched after Connector has loaded.
Connector Support	Microsoft Windows 2000® SP4 Microsoft Windows XP® (SP1 & SP2) Internet Explorer 6 (ActiveX or Java enabled)

 

Download the Blue Coat Proxy RA810 Series Datasheet (PDF).