Comments on: Blue Coat ProxySG Appliance – test http url

By: Michael McNamara

Michael McNamara — Mon, 14 Oct 2019 00:33:46 +0000

Very difficult without seeing some real data… what are you using to reverse proxy, Blue Coat?

Cheers!

By: Elisvan Ferreira

Elisvan Ferreira — Fri, 04 Oct 2019 17:06:47 +0000

I’m sorry my english not very good
I have a problem with my network
my infrastructure (nat) -> firewall (rules) -> reverse proxy -> loadbland (web application).
Many of the connection from the HTTP/1.1 400 Bad Request error
I’m seeing in the proxy logs that are malformed package but not getting the solution has anyone had this problem

By: Pascal Tolenaar

Pascal Tolenaar — Mon, 05 Aug 2013 12:13:57 +0000

You will get caching within HTTPS if you do SSL offloading or termination on the SG. The S part of HTTPS is just to secure the communication channel. It wont influence the way caching is performed by both the browser and the proxy. They will just follow the cache directives as described in the HTTP RFC’s 0.9/1.0 and 1.1

By: Michael McNamara

Michael McNamara — Thu, 08 Nov 2012 13:47:32 +0000

In reply to Tim Siegel.

Hi Tim,

I don’t believe it can perform caching of HTTPS/SSL traffic, I believe this is also true of the actual web browsers – there’s no caching of encrypted objects. The Blue Coat ProxySG appliances due support SSL intercept where they can proxy the HTTPS/SSL connection and provide “filtering”.

Cheers!

By: Tim Siegel

Tim Siegel — Mon, 05 Nov 2012 17:39:10 +0000

Can Blue Coat appliance do HTTPS / SSL caching?
would like to cach large files and images on Bluecoat at remote locations for Event Hosting. Files are HTTPS. Is there any way to cache files for local user access?
Regards,
Tim

By: Michael McNamara

Michael McNamara — Tue, 28 Jun 2011 03:00:08 +0000

In reply to Ronaldo Gonzales.

Hi Ronaldo,

I don’t provide any software for any of the equipment I work with. You’ll need to take up your issue with your Blue Coat sales team.

Sorry!

By: Ronaldo Gonzales

Ronaldo Gonzales — Mon, 27 Jun 2011 08:04:38 +0000

Hi Michael,

I want to upgrade my bluecoat with model 800 & 400 series but i can’t do it because my license is already expired. Can you provide me the URL of the SGOS 5.4.5.1 , 5.5.4.1 & 6.2.2.1 (both 400 & 800). Thanks in advance. Ronaldo

By: Michael McNamara

Michael McNamara — Fri, 20 Aug 2010 20:22:45 +0000

In reply to Yannick.

Hi Yannick,

Your English is quite good so no worries there. The Blue Coat ProxySG appliance can act as a reverse proxy and even terminate SSL sessions allowing you to offload the SSL encryption from the web server.

You’re probably referring to this document from Blue Coat; Reverse Proxy with SSL – ProxySG Technical Brief

You need to rewrite the URLs returned by the web server so the client will be able to communicate with the proxy server. In the technical note they provide you a basic example of how to rewrite the URL https://www.example.com to http://www.examplewebserver.com. This will work but only for the very basic of web servers / web applications. If you have a complex web application and/or content you’ll need to investigate other solutions that allow you to publish “internal” web applications to Internet clients.

We currently use the Juniper SSL VPN appliance in core re-writer mode as a reverse proxy on steriods The Juniper SSL VPN appliance takes care of all the URL rewriting and all the things involved in publishing internal applications.

Cheers!

By: Yannick

Yannick — Fri, 20 Aug 2010 15:34:42 +0000

Hi, Mickael !

I have a question for you maybe you have the answer…

We have a problem with our bluecoats with a simple reverse proxy with SSL configuration.

Just to explain, we have a server in our production network with a web server running on port 8080 in single http.

This server need to be available from internet but with SSL.

But the problem is, when we connect to the site in https and we authenticate, the web site just do nothing (like we refresh the page) weird…

I followed the standard configuration provided by bluecoat, at the end of the document, they are talking about Two way url rewriting but I’ve don’t understand it.

Can you explain this to me ? Did you have this problem too ?

Thanks for your help and sorry for my poor english (i’m French BTW)

Regards.