PROXYSG FOR REVERSE PROXY SOLUTION BRIEF

Security Web-based solutions are being implemented for nearly every aspect of business operations, from public websites Empowers to mission-critical business applications. As a result, growing security concerns, sluggish performance, and Business increasing complexity are straining existing infrastructures. To secure and accelerate web applications and public websites, organizations turn to Blue Coat for reverse proxy deployments.

WHY PROXYSG FOR REVERSE PROXY DEPLOYMENTS?

Blue Coat ProxySG proxy appliances combine robust security, high- range of policy rules. Comprehensive logging and reporting provide performance content delivery, and operational simplicity, allowing detailed accounting information, giving administrators the visibility organizations to secure and accelerate their web applications and public necessary to assess web usage patterns and track security issues. websites. ProxySG Reverse Proxy enables organizations to: Protects Web Servers – ProxySG securely isolates general-purpose • Accelerate delivery of web applications and content through a proxy servers from direct access, acting as an intermediary between architecture with integrated caching web applications and the external clients who attempt to access them. ProxySG provides robust authentication and policy support and can • Protect web infrastructure by isolating origin servers from direct either challenge users or transparently check authentication credentials Internet access using an organization’s existing security framework. For high- • Secure external user access to web applications, such as web e-mail, performance, low-latency virus scanning of all uploaded content to web extranets, and public websites, by acting as an SSL termination / servers, ProxySG integrates with ProxyAV and offers a choice of leading origination point anti-virus engines. To ensure confidentiality, ProxySG can be configured to encrypt communications between users and web applications using • Save time and money by reducing the number of web servers required Secure Sockets Layer (SSL). • Implement granular access policies based on users, groups, time of Accelerates Web Content – At the heart of the ProxySG for Reverse day, location, network address, user agent, and other attributes to Proxy solution is SGOS, a secure, object-based operating system meet unique business requirements specifically designed to handle web content. SGOS combines patented • Authenticate clients using existing security framework, including local proxy caching technology with an optimized TCP stack for efficient password files, NTLM, LDAP, RADIUS, one-time passwords, and web content acceleration. SGOS’s intelligent use of its integrated certificates allows 60-90% of an application’s web objects to be cached and served • Safeguard their web infrastructure from viruses, worms, and Trojans directly to users, further enhancing site performance and scalability. with real-time AV scanning of all uploaded content In addition, optional SSL services provide hardware-accelerated key negotiation, , and decryption support. • Deliver high-performance streaming media to thousands of simultaneous users with streaming proxies Simplifies Operations – An integrated, optimized appliance that combines proxy software and hardware, ProxySG is easy to install, ProxySG appliances are easily configured for reverse proxy mode and configure, and maintain. The ProxySG’s Visual Policy Manager (VPM) tuned for the workload of high traffic websites. IT administrators can provides an intuitive, graphical interface to define and manage a wide use ProxySG to efficiently scale their web farms to address flash or SOLUTION BRIEF

peak periods of traffic, leveraging advanced features, such as content Accelerates Web Content acceleration, compression, protection against Denial-of-Service attacks, • Optimized TCP stack rapidly serves large amounts of static and and optional stream splitting and caching. dynamic web content Security Administrators can also use ProxySG to implement a scalable and • Intelligent cache allows 60-90% of an application’s web objects to be secured web portal by front-ending web applications such as corporate Empowers cached and served directly to users web e-mail (e.g., Outlook Web Access, Lotus Notes WebMail, Novell Business Groupwise WebAccess) and web-based business applications (e.g., • HTTP compression reduces required bandwidth, conserves CPU Siebel, Oracle, SAP). resources, and delivers previously compressed pages faster For added security, ProxySG can originate and terminate SSL-encrypted • Optional hardware-accelerated SSL processes up to 800 key sessions between web applications and users. This allows organizations negotiations per second per card to secure actions such as authentication and message review on both • Optional streaming proxies provide stream splitting and caching to sides of the data stream. deliver high-performance streams to thousands of simultaneous users To prevent subsequent users to a particular kiosk or workstation from Simplifies Operations accessing a previous user’s account, ProxySG can be configured to erase cached authentication cookies. For added protection, the • “Set and forget” proxy appliance is easy to deploy and manage ProxySG for Reverse Proxy solution can be configured to automatically • Integrated appliance eliminates need to install applications or OS time out after a specified period of inactivity, enabling administrators to patches strengthen secure access from public networks. • Scalable solution reduces number of web servers required Blue Coat ProxySG is the leading proxy appliance for securing and accelerating web applications and public websites. ProxySG for • Intuitive graphical interface simplifies policy rule creation and Reverse Proxy integrates robust web server protection and accelerated management web content delivery in a scalable, centralized proxy architecture that • Comprehensive logging and reporting provide visibility into web usage simplifies operations while significantly enhancing network performance. patterns and security issues See Blue Coat white papers for additional application and control Key Features and Benefits solutions with ProxySG; www.bluecoat.com/products/web-application- Protects Web Servers reverse-proxy

• Securely isolates general-purpose servers from direct Internet access User request Blue Coat Systems Inc. • Built on SGOS, a secure object-based operating system specifically www.bluecoat.com designed to handle web content Corporate Headquarters • Controls user access with robust authentication and policy rules Sunnyvale, CA Accelerated content delivery • Intelligent OS distinguishes between valid and malicious connections with integrated cache +1.408.220.2200 Web Server Farm ProxySG to service legitimate users while resisting DoS attacks EMEA Headquarters Hampshire, UK +44.1252.554600 © 2014 Blue Coat Systems, Inc. All rights reserved. Blue Coat, the Blue Coat logos, ProxySG, PacketShaper, CacheFlow, IntelligenceCenter, CacheEOS, CachePulse, Crossbeam, K9, the K9 logo, DRTR, Mach5, Packetwise, Policycenter, ProxyAV, ProxyClient, SGOS, WebPulse, Solera Networks, the Solera Networks logos, DeepSee, “See Everything. Know Everything.”, “Security Empowers Business”, and BlueTouch are registered trademarks or trademarks of Blue Coat Systems, Inc. or its affiliates in the U.S. and certain APAC Headquarters other countries. This list may not be complete, and the absence of a trademark from this list does not mean it is not a trademark of Blue Coat or that Blue Coat has stopped using the trademark. All other trademarks mentioned in this document owned by third parties Singapore are the property of their respective owners. This document is for informational purposes only. Blue Coat makes no warranties, express, implied, or statutory, as to the information in this document. Blue Coat products, technical services, and any other technical data referenced in this document are subject to U.S. export control and sanctions laws, regulations and requirements, and may be subject to export or import regulations in other countries. You agree to comply strictly with these laws, regulations and requirements, and +65.6826.7000 acknowledge that you have the responsibility to obtain any licenses, permits or other approvals that may be required in order to export, re-export, transfer in country or import after delivery to you. v.SB-PROXYSG-FOR-REVERSE-PROXY-EN-v4c-0214