How do I capture a packet in bluecoat ProxySG?

Start a packet capture. In the ProxySG Management Console, navigate to Maintenance > Service Information > Packet Capture > Start. Note: Preferably you want to start the packet capture when you are one click away from reproducing the issue.

What is bluecoat ProxySG?

Blue Coat’s secure Web gateway (SWG), the ProxySG, is among the leading products in the SWG marketplace. Like its competitors, Blue Coat ProxySG is equipped with user authentication, web filtering, data loss prevention and inspection.

What is a Bluecoat device?

Blue Coat devices are what is known as a “dual-use” technology, because they can be used both to defend corporate networks and by governments to censor and monitor the public’s internet traffic. The appliances can see some types of encrypted traffic, block websites or record website traffic.

How do I download certificates from bluecoat ProxySG?

Step 1: Install a Root or Intermediate Certificate Authority (CA) for Blue Coat Proxy SG

Obtain Symantec Intermediate CA as described in AR657.
Select Sperate CA’s Option listed next to the correct certificate type.
Copy the certificate to the clipboard.
Select Configuration > SSL > CA certificates > CA certificates.

What is Symantec ProxySG?

A Symantec secure web-filtering proxy empowers you to: Authenticate users for secure web access. Gain visibility into encrypted web traffic. Stop threats by terminating malicious traffic before it hits the endpoint. Control web and cloud usage and adhere to usage policy or compliance regulations.

Is Blue Coat free?

The Blue Coat School has 7.5% of students in years 7-11 who are known to be eligible for free school meals, which is low when compared to many other schools locally and nationally. As such we do not attract high levels of pupil premium funding.

What is policy trace?

Policy tracing is used in Symantec ProxySG when debugging access to websites, such as: Access to a website is allowed when it should be denied. Access to a website is denied when it should be allowed.

How do I renew my ProxySG certificate?

A- via management console: – Select the Configuration > SSL > Appliance Certificates > Request Certificate tab. – Click Request appliance certificate. The Symantec CA server does validation checks and signs the certificate. The certificate is automatically placed in the appliance-key keyring.

How do you add a keyring to ProxySG?

Select Configuration > SSL > Keyrings. Create a new keyring for the ProxySG. Select Show Keypair based on your security policy. Click OK and Apply to save your changes.

What is Symantec Advanced Secure Gateway?

The Advanced Secure Gateway is a scalable proxy designed to secure your web communications and accelerate your business applications. The Gateway’s unique proxy architecture allows it to effectively monitor, control and secure traffic to ensure a safe web (cloud) experience.

How do I troubleshoot a Blue Coat proxy/filter device?

The Blue Coat Proxy / Filter device transfers packets like any other network device. A simple troubleshooting technique is to see if the packets are flowing through the device as expected. Here are the commands to do a Blue Coat Packet Capture: setup a filter to capture packets on 10.1.1.2

How do I start the packet capture in ProxySG?

In the ProxySG Management Console, navigate to Maintenance > Service Information > Packet Capture > Start . Note: Preferably you want to start the packet capture when you are one click away from reproducing the issue. This reduces the “white noise” in the packet capture, making the scope and review much more narrow.

How do I do a blue coat packet capture?

Here are the commands to do a Blue Coat Packet Capture: setup a filter to capture packets on 10.1.1.2 show statistics and info about the packets captured to make sure you got what you were looking for

What is a packet capture (pcap)?

Using packet captures (PCAP) are essential for most ProxySG and Advanced Secure Gateway (ASG) troubleshooting. Packet captures are a quick, easy way to find the point of failure and check the workings of dependent services, such as DNS, authentication, ICAP and so on.