Blue Coat ProxySG 8000 Series represent the next generation in high-end appliance platforms. These purpose-built appliances provide total visibility and control of Web communications with wire-speed performance. Based on Blue Coat SGOS, a custom, object-based operating system with integrated caching, these proxy appliances leverage existing authentication systems to enable flexible policy enforcement on content, users, applications and protocols. ProxySG combines comprehensive proxy support of all Web protocols with integrated content filtering, instant messaging control, peer-to-peer (P2P) control, pop-up ad blocking and Web virus scanning.

Proxy SG 8000 Features
The Blue Coat ProxySG enables organisations to keep “good” employees from doing “bad” things on the Internet. The ProxySG provides visibility and control for today’s risks that include:

• Network resource abuse due to P2P file sharing, video streaming, and other unsanctioned applications
• Virus introduction via backdoors such as P2P, Web email and Instant Messaging (IM)
• Legal liability and productivity loss as a result of inappropriate Web surfing

The ProxySG 8000 Series represents the next generation in high-end appliance platforms. The 8000 series is a purpose-built proxy providing flexible control with wirespeed performance utilising dual Xeon P4 3.2GHz Intel processors and disk capacity up to 584 GB. Utilising a custom, object-based OS with caching for performance, organisations can advise, coach and enforce granular policies down to individual users.

Key Features

Performance and Reliability — SGOS
The purpose-built proxy appliance provides flexible control with wire-speed performance allowing a company to advise, coach and enforce granular policies down to individual users. Key SGOS and platform highlights include:

• Secure object-based operating system with small footprint
  
• High-speed Web caching with advanced object pipelining and adaptive refresh
  Extensible hardware options including disk drives, interfaces, memory and SSL accelerator cards
  
• Network functionality including:
  - Active/Active bridging support using virtual IP addressing for failover and remote
  installations
  - Routing configurations for gateway, route tables, RIP, DNS, and WCCP
  - Health checks performed on a forwarding host or external servers to verify
  status and availability of device
  - Configurable Time Services (UTC, NTP)
  - 19” Rack mountable chassis
  
• Integrated support services
  - View & submit service requests via the Blue Coat management interface
  - Send snapshots (trace files) to Blue Coat Support Services for faster problem resolution

Manageability — Policy Processing Engine
The patent-pending Policy Processing Engine enables sophisticated security triggers based on individual users, groups of users, time of day, location, protocol, user agent, content type and other attributes to initiate policy actions. These comprehensive capabilities include:

• Powerful management interface
  - Web-based management interface
  - Optional command line interface
  - SSH v2 and SSL/TLS administration
  - Alerting via SNMP, SMTP and logging administrative events
  
• Comprehensive policy definitions
  - Three policy files with settable evaluation order
  - Graphical Visual Policy Manager with layeredpolicy definitions
  - Definable triggers and actions for policy definition Content Policy Language (CPL)
  - Create custom text-based policies to address unique policy requirements
  - Built-in text editor for CPL allows sample code to be copied and pasted from Blue
  Coat TechBriefs or other advisories
  
• Authentication
  - Utilise a company’s existing authentication including local password files, NTLM,
  LDAP (Active Directory, eDirectory, SunOne), RADIUS and certificates
  - Multi-realm authentication sequencing
  - Secure credential acquisition via SSL
  
• Extended Management with Director
  - Distribute, backup, restore policy files for multiple ProxySG appliances
  - Manage policies by device, group, or region
  - Job scheduling/job status reporting

Control — Proxy Services
The ProxySG provides a layered policy approach allowing companies to balance their Web communication needs with current business and Internet risks. The ProxySG provides unmatched flexability and scalability.

• Proxy support for multiple protocols
  - HTTP, HTTPS, FTP, SOCKS, AOL IM, Yahoo IM, MicrosoftIM, MMS, RTSP,
  QuickTime, TCP-Tunnel
  - Apply policy to all
  
• Content Filtering
  - On-box support for Websense, SmartFilter, and SurfControl
  - Performance gains through integrated caching
  - Define additional custom categories
  
• IM Logging and Controls
  - MSN, Yahoo!, AOL Messengers
  - Method level control settings
  - In band/out-of-band alerts
  
• Content Security
  - Block active content
  - Strip and replace Web content
  - Limit, strip or replace information in content headers
  
• Web virus scanning
  - Scan once, serve many cache benefit
  - ICAP off-box integration with ProxySG
  
• P2P file sharing controls
  - Log and block P2P traffic
  - Prevent client downloads and ads
  
• Pop-up Ad blocking
  - Policy-based control
  - Deny/allow per application
  
• Streaming controls
  - MS, Real, QuickTime
  - Bandwidth optimisation & splitting
  
• SSL Termination
  - Application front-ending (e.g. MS OWA, CRM/Siebel, Lotus Notes)
  - Reverse proxy mode application acceleration
  - Keyrings and certificates

Visibility — Management Reporting
Visibility is the key to managing employee Web communications in the enterprise. Blue Coat provides the tools needed to log and track user interactions over the Internet and across corporate boundaries.

• Default logging
  - HTTP, HTTPS, FTP, SOCKS, TCP-Tunnel, ICP, IM, Windows Media, Real Media,
  QuickTime
  - Global log file limits and upload sizing
  - Client upload settings and scheduling
  
• Custom logging and trace files
  - Selectable fields/text/log formats
  
• Secure log transport off box
  
• SNMP Support
  - Trap settings, community strings
  
• Statistics
  - System usage
  - HTTP/FTP history
  - IM data
  - Streaming history
  - Resources
  - Efficiency
  - SOCKS client, connections, bytes
  
• Aggregate ProxySG logs with Reporter
  - Predefined report capability by user, network, security, IM, Top-10 summaries
  - Secure browser access/role-based viewing
  - User/session tracking/monitor by category
  - Stream logs aggregation with scheduled email reports