Blue Coat RA8100 Series Appliances

Blue Coat RA 8100 Overview:

Blue Coat ProxyRA 8100 Series The RA8100 Series of rack-mountable proxy appliances provides large-sized sites with the power to extend remote access to employees, partners, and customers while delivering on demand endpoint security and information protection features.

Typically deployed within the DMZ, the RA8100 platform provides remote employees and third parties granular access to corporate applications. Extensive support for unmanaged devices, such as home desktops, partner PCs, and Internet kiosks, by never requiring local admin rights or VPN client software and through a rich set of information protection features to block information leakage at the endpoint, such as browser cache encryption and complete session cleanup.

Object-based policy management enables intuitive and flexible rules that control access to resources based on user, target resource, security profile of the device, time of day, and whether the user’s endpoint is corporate-managed or unmanaged. The RA8100 features LAN-speeds and support automatic failover without requiring the user to re-authenticate.

Deliver on-demand application security and connectivity

Blue Coat ProxyRA SSL VPN appliances provide a complete solution that simplifies remote access and endpoint security for users on both corporate-owned and unmanaged machines. ProxyRA protects data from both intentional and accidental security breaches through a unique proxy architecture that delivers on-demand connectivity and security services to any machine.

With Blue Coat ProxyRA, IT can:

• Provide remote access on demand to both corporate-owned and unmanaged machines, such as home office desktops.
• Support both Web and client-server applications.
• Automate spyware protection against keyloggers and other malware.
• Prevent information leaks through system controls.

Features:

RA Connector – On Demand Access for All Applications

Blue Coat ProxyRA delivers an all-in-one remote access and endpoint security solution that leverages patent-pending Connector technology to provide access from both corporate-managed and unmanaged endpoints. Through the RA Connector, ProxyRA extends access to a rich set of Web and non-Web applications without ever requiring the installation of client software, local admin rights or a system reboot. It does not require any port forwarding or network extension clients; all access is on demand. And, the application support is limitless: if the TCP or UDP application meets the following conditions, it will be supported without client software and without local admin rights.

• Application client initiates communication (e.g., Outlook contacting Exchange)
• Application client can be launched (or re-launched) after RA Connector has loaded.
• Application must be running in user’s environment (e.g., not a system service)
• Application cannot access internal file shares via drive mapping or UNC specification (such as S:\filename or \\server\filename

If the application (Web or non-Web, off-the-shelf or proprietary, new or legacy) meets these conditions, ProxyRA will support it. No client software. No admin rights

Additional Key Features:

On Demand Remote Access

• Extensive application support - Provides out-of-the-box support for web and non-web TCP and UDP applications
• Comprehensive web application support - Provides uninterrupted access to both simple and advanced and feature-rich web applications (XML, ActiveX, AJAX, Java, etc.) without relying on error-prone URL rewriting
• Single access mode for all users - Provides on demand access to packaged and custom client-server and Web applications through unique on demand connectivity agent
• Support for locked down environments - Never requires local Admin rights on end user machines (including Macs and PCs with Microsoft Vista’s advanced security model)
• In office user experience - Provides IPSec-like user experience (e.g. launch native applications from desktop)
• Application-layer access across all applications - Controls access by applications for all supported applications and never requires unrestricted network-layer connectivity
• No changes to desktop - Leaves desktop as it found it when user session is over (no system alternations or modifications) and no software left behind

Endpoint Security

• Integrated with SSL VPN - Provides endpoint security for managed and unmanaged devices seamlessly integrated with remote access deployment and management
• Pre-authentication and continuous spyware scan - Uses patent-pending technology to perform a pre-login behavioral scan for keyloggers and framegrabbers and continuously scans for spyware for duration of user’s session
• Automatic spyware suppression - Identifies and temporarily suppresses processes and programs identified as potential threats, such as framegrabbers and keyloggers, for the duration of user session without any permanent system changes
• On demand host integrity checks - Checks a variety of conditions (such as personal firewall settings, antivirus software updates and OS patches and service packs) on the endpoint
• Customizable host checking - Granular policy-based access—restricts access to internal resources based on endpoint security status
• Client application validation - Provides application white lists and blacklists to control which applications, through checksum validation, are allowed
• Application-specific access - Allows administrators to limit which applications can reach specific resources to block unauthorized programs from contacting the internal assets
• Configurable split tunneling- Blocks or enforces split tunneling

Granular Application & User Management

• Intuitive object-based policy manager - Controls user access to targeted resources through easy-to-administer, object-based access rules
• Granular user and access control - Defines access by user, target resource, source/location of user, time of day, and security profile of connecting device
• Policy wizard - Creates access policies in minutes with user-friendly wizard
• Extensive authentication support - Integrates with leading authentication schemes, such as Microsoft Active Directory, LDAP/LDAPS, RADIUS, RSA SecurID®, and TACACS+
• Custom groups - Supports custom groups using existing directory groups or user attributes for targeted access to specific resources
• Flexible tiered access controls - Allows minimum security thresholds, such as requisite OS patches, AV updates or personal firewalls settings, when accessing specific applications and other resources
• Activity logs with flexible search tool - Logs all activity by user and application and provides intuitive search tool for locating specific records
• System dashboard - Provides overview of system health (e.g. CPU usage and disk utilization), concurrent users logged on and overall system status
• Customizable login page - Allows IT administrators to customize the user login page to integrate with corporate colors, branding and messaging

Information Protection

• Integrated with SSL VPN - Provides information protection for managed and unmanaged devices seamlessly integrated with remote access
• Browser security - Encrypts all information stored by the browser, including cache, temp files and cookies, and clears all session information at the end of SSL VPN session using DoD 5220.22-spec file deletion
• Information usage controls - Controls what users can do with the information accessed and downloaded by web applications, such as blocking or allowing file save, print, save to clipboard, cut-and-paste, and screen print operations
• Framegrabber and keylogger protection - Scans for and suppresses keyloggers and framegrabbers to prevent spyware from stealing personal and corporate information

Scalability and Performance

• Flexible user configuration - Support 25 to 5,000 concurrent users
• High availability - Transparent, automatic failover for uninterrupted connectivity
• Load balancing - Supports external load balancers to satisfy performance-critical applications
• High performance architecture - Easily supports LAN speeds

Technical Specifications:

Documentation:

Download the Blue Coat ProxyRA Datasheet Datasheet (PDF).