Blue Coat SG8100 Proxy Series Appliances

Blue Coat ProxySG 8100 Series Overview:

The Blue Coat ProxySG 8100 Series offers a high-end proxy appliance platform that enables even the largest enterprises to accelerate and protect applications across the distributed network. Located at the Internet gateway, the ProxySG 8100 platform prevents malware and unauthorized applications from compromising network security or performance.

As the core of an organization’s application delivery network infrastructure, the ProxySG 8100 provides controlled acceleration of business applications across the globally-distributed enterprise. Leveraging Blue Coat’s acceleration technology, the ProxySG 8100 enables branch office users to enjoy the same LAN-like performance and experience as those located at headquarters or the data center.

Deployed at the data center, the ProxySG 8100 accelerates web applications and content from origin Web servers, while securely isolating them from direct Internet access. Optional SSL services secure communications and off-load application servers from computationally-intensive processes.

Centralized policy administration is provided by Blue Coat Director, while Blue Coat Reporter provides log aggregation from multiple ProxySG appliances into concise reports to analyze web communications and policy enforcement.

Get the world’s leading proxy appliance

The Blue Coat Full Proxy Edition of ProxySG appliances are part of the Application Delivery Network (ADN) infrastructure that provides complete application visibility, acceleration and security. To support the Application Delivery Network, ProxySG delivers a scalable proxy platform architecture to secure Web communications and accelerate the delivery of business applications. ProxySG enables flexible policy controls over content, users, applications and protocols and is the choice of more than 80% of the Fortune® Global 500.

Complete Control

ProxySG provides complete control over Web traffic enabling the following functions: Strong user authentication, Web filtering, deep inspection of content for data loss or threats, security checks to the WebPulse™ collaborative cloud defense, inspection and validation of SSL traffic, content caching and traffic optimization, bandwidth management, streaming media splitting and caching, method level controls per protocol, plus the ability to filter, strip or replace Web content. ProxySG is the ultimate foundation for a Secure Web Gateway with its content controls and policy flexibility, or a branch office providing security and acceleration in one solution.

Layered Defenses Security Framework

ProxySG with WebPulse, the collaborative cloud defense uniting over 62M users for Web awareness to new Web content and threats, creates a hybrid design providing the best of on-premise controls with the collective intelligence of cloud service. ProxySG deployed with WebFilter automatically includes the WebPulse cloud service and ProxyClient for remote user protection, filtering and acceleration. ProxySG with ProxyAV enables the highest performing inline threat analysis, including SSL, with a choice of leading anti-malware engines. In addition, data loss prevention integration is securely enabled with S-ICAP or standard ICAP on ProxySG with certified DLP partners.

Unmatched Performance & Reliability

ProxySG innovations in new hardware platforms with multiple cores and the SGOS operating system with multithreading provide 1Gbps throughput for high availability deployments and scale 5X beyond the previous generation. SGOS is a micro kernel built for Web object processing, secure and small in design, it rarely needs attention or patches, and it runs year after year at performance levels beyond the competition. Health checks and monitoring provide administrator awareness, plus Director enables centralized device, license and policy management of ProxySG Web gateways.

Scalability and Lower TCO

The Blue Coat security framework scales in many ways, resulting in lower TCO for customers. The performance innovations require less hardware, rack space and power than alternative solutions. New defenses can be seamlessly added to the WebPulse cloud to scale the depth of protection. Expanding groups of remote users can accelerate office communications with ProxyClient plus be protected by WebPulse. And Reporter scales for visibility of all Web gateway and remote users with custom dashboards and reports on a single server with an included optimized database for up to 10B log lines.

Features:

ProxySG provides complete control over Web traffic, enabling the ultimate foundation for a Secure Web Gateway with its content controls and policy flexibility, or a branch office providing security and acceleration in one solution.

Deploy ProxySG, WebFilter and ProxyAV together to enable:

WebFilter licensing includes the real-time rating service and threat protection of the WebPulse cloud service and ProxyClient for remote user filtering, reporting and visibility.

Control — Proxy Services:

Proxy support for multiple protocols

• HTTP, CIFS, SSL, FTP, MAPI, P2P, MMS, RTSP, QuickTime, TCP-Tunnel, DNS, SOCKS, IM
• Bandwidth management on all proxy services
• SSL Termination & Proxy (forward and reverse)
• Control encrypted traffic for all users and applications inside & outside the enterprise

Content Filtering and Security

• WebFilter continuously updated by WebPulse cloud service for malware detection and content ratings
• On-proxy support of leading URL lists, popular regional lists, custom lists, or custom categories
• Strip and replace Web content, plus IM file sharing controls
• Log and block P2P traffic Inline Malware Detection

Inline Malware Detection

• ProxyAV integration with ProxySG
• hoice of anti-malware engines

IM Logging and Controls

• MSN, Yahoo!, AOL Messengers
• Method level control settings

Streaming controls

• MS, Real, QuickTime
• Stream splitting & caching

ProxyClient

• Remote Filtering with WebPulse cloud service
• Remote Acceleration for file and application performance

Performance and Reliability — SGOS:

Platform highlights

• Secure object-based operating system with small footprint
• High-speed Web caching with advanced object pipelining and adaptive refresh
• Built-in pass-through network card, compression services, bandwidth management, plus optional SSL services

Network functionality including:

• Active/Active bridging support using virtual IP addressing for failover and remote installations
• Routing configurations for gateway, route tables, RIP, DNS, and WCCP
• Health checks performed on a forwarding host or external servers to verify status and availability of device
• Configurable Time Services (UTC, NTP)
• 19” Rack mountable (with kit) or portable usb
• View & submit service requests via the Blue Coat management interface
• Send snapshots (trace files) to Blue Coat Support Services for faster resolution

Manageability — Policy Processing Engine:

Authentication

• Utilize a company’s existing authentication including local password files, NTLM, LDAP (Active Directory, eDirectory, SunOne), Netegrity Siteminder, Oblix, RADIUS and certificates
• Multi-realm authentication sequencing
• Forms-based authentication support

Powerful management interface

• Web-based management interface
• Optional command line interface
• Alerting via SNMP, SMTP and logging administrative events

Comprehensive policy definitions

• Graphical Visual Policy Manager with layered policy definitions
• Definable triggers and actions for policy definition

Content Policy Language (CPL)

• Create custom text-based policies to address unique policy requirements
• Built-in text editor for CPL allows sample code to be copied and pasted from Blue Coat TechBriefs or Support Services advisories

Extended Management with Director

• Distribute, backup, restore policy files for multiple ProxySG appliances
• Manage policies by device, group, or region
• Job scheduling/job status reporting

Management & Control of ProxyClients

• Configure, provision and maintain global deployment of ProxyClients
• Accelerate applications by user
• Centralized policy management and reporting for Remote Filtering

Visibility — Management Reporting:

Default logging

• HTTP, HTTPS, FTP, Telnet, SOCKS,P2P, TCP-Tunnel, ICP, IM, Windows Media, Real Media, QuickTime, DNS
• Global log file limits and upload sizing
• Client upload settings and scheduling

Custom logging and trace files

• Selectable fields/text/log formats

Statistics

• Bandwidth Gain
• HTTP/HTTPS/FTP history
• Streaming history
• Resources

SNMP Support

• Trap settings, community strings

Aggregate Blue Coat ProxySG Logs with Reporter

• Reporter Dashboard™ provides a “drillable” overview of Web activity
• 150+ pre-defined reports track user activity, security risks, and Web traffic performance
• Secure browser access/rolebased viewing
• Provides real-time reporting with continuous log uploads

Acceleration — MACH5:

Bandwidth Management

• Assign priority and network resources based on port, device, applications or content to reflect corporate policies

Protocol Optimization

• Improve inefficient protocols by making them more tolerant to higher latencies

Byte Caching

• Cache repetitive traffic found in the byte stream and serve it locally to reduce WAN traffic

Object Caching

• Store files, videos and Web content locally, providing LAN-like performance over WAN

Compression

• Inline compression can reduce predictable patterns even on the first pass

Product Comparison:
 

Acceleration versus Proxy Edition - What is the Difference?
License Type	Acceleration Editon (MACH5)	Proxy Edition
Windows Media Streaming
Real Media Streaming
QuickTime Streaming
Bandwidth Management
HTTP proxy
MAPI proxy
DNS proxy
Forwarding
ProxyClient
SOCKS proxy
Telnet proxy
ICAP services
Netegrity SiteMinder
Oblix COREid
Peer-To-Peer
User Authentication
Onbox Content Filtering (3rd Party or BCWF)
Onbox Content Filtering (e.g. Websense)
Instant Messaging (AOL, Yahoo, and MSN)		Free
SSL Termination/Proxy	Add-On	Add-On

Diagrams:

The ProxySG provides visibility and control of Web communications for remote offices in an affordable platform.

Blue Coat provides a layered defense against Web 2.0 threats leveraging WebPulse cloud intelligence from over 62M users to protect the Web gateway and remote users. ProxySG provides unmatched policy flexibility, performance and reliability to secure networks and accelerate content.

Technical Specifications:

Documentation:

Download the Blue Coat Full Proxy Edition ProxySG 8100 Datasheet (PDF).

Download the Blue Coat ProxySG Family Datasheet (PDF).