Blue Coat SG210 series User manual

Blue Coat®Systems
SG210 Series
Installation Guide
Version: SGOS 5.2.x

Blue Coat SG210 Installation Guide
Contact Information
Blue Coat Systems Inc.
420 North Mary Ave
Sunnyvale, CA 94085-4121
http://www.bluecoat.com/support/contact.html
[e-mail]
http://www.bluecoat.com
For concerns or feedback about the documentation: [email protected]
Note This equipment has been tested and found to comply with the limits for a Class A Digital device pursuant to Part 15 of the FCC
Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses, and can radiate radio frequency energy, and if not installed and used in
accordance with the instruction manual, might cause harmful interference to radio communications. Operation of this equipment in
a residential area is likely to cause harmful interference in which case the users are required to correct the interference at their own
expense.
Copyright© 1999-2008 Blue Coat Systems, Inc. All rights reserved worldwide. No part of this document may be reproduced by any
means nor modified, decompiled, disassembled, published or distributed, in whole or in part, or translated to any electronic medium
or other means without the written consent of Blue Coat Systems, Inc. All right, title and interest in and to the Software and
documentation are and shall remain the exclusive property of Blue Coat Systems, Inc. and its licensors. ProxyAV™, CacheOS™,
SGOS™, SG™, Spyware Interceptor™, Scope™, RA Connector™, RA Manager™, Remote Access™ and MACH5™ are trademarks
of Blue Coat Systems, Inc. and CacheFlow®, Blue Coat®, Accelerating The Internet®, ProxySG®, WinProxy®, AccessNow®, Ositis®,
Powering Internet Management®, The Ultimate Internet Sharing Solution®, Cerberian®, Permeo®, Permeo Technologies, Inc.®, and
the Cerberian and Permeo logos are registered trademarks of Blue Coat Systems, Inc. All other trademarks contained in this
document and in the Software are the property of their respective owners.
BLUE COAT SYSTEMS, INC. DISCLAIMS ALL WARRANTIES, CONDITIONS OR OTHER TERMS, EXPRESS OR IMPLIED,
STATUTORY OR OTHERWISE, ON SOFTWARE AND DOCUMENTATION FURNISHED HEREUNDER INCLUDING WITHOUT
LIMITATION THE WARRANTIES OF DESIGN, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL BLUE COAT SYSTEMS, INC., ITS SUPPLIERS OR ITS LICENSORS BE LIABLE FOR
ANY DAMAGES, WHETHER ARISING IN TORT, CONTRACT OR ANY OTHER LEGAL THEORY EVEN IF BLUE COAT
SYSTEMS, INC. HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Document Number: 231-02943
Document Revision: E.0 March 2009
Important: Follow all warnings and instructions marked on the product and included in this
manual.

iii
Contents
Chapter 1: The SG210 Series Appliance ................................................................................................5
Unpacking the SG210......................................................................................................................................... 5
Front and Back Panel Features .........................................................................................................................5
The Front-Panel LEDs................................................................................................................................. 5
Rear Components........................................................................................................................................ 6
Installing the SG210 ...........................................................................................................................................7
Placing the SG210 on a Shelf or Tabletop ................................................................................................7
Mounting the SG210 on a Wall .................................................................................................................7
Mounting the SG210 in an Equipment Rack ...........................................................................................9
Rack-Mounting Notes................................................................................................................................. 9
Powering on the SG210 ....................................................................................................................................10
Chapter 2: First-Time Configuration .....................................................................................................13
Section A: Using the Serial Console to Configure Initial Settings 15
Connecting the SG210 to a PC Using a Direct Serial Port................................................................... 15
Initial Configuration Using a Direct Serial Port Connection.............................................................. 15
Section B: Configuring the SG210 Using the Serial Setup Console 18
Performing the Manual Setup Using the Serial Console .....................................................................18
Section C: Configuring the SG210 Using the Web Setup Wizard 23
Section D: Configuring the SG210 Using Director Registration 26
Section E: Logging in to the SG210 30
Logging in to the SG210 Management Console ....................................................................................30
Logging in to the SG210 CLI ....................................................................................................................31
Chapter 3: Troubleshooting.................................................................................................................. 33
A Network Link is Not Established............................................................................................................... 33
The Web Setup Wizard Is Not Accessible .................................................................................................... 34
The SG210 Does Not Power On ..................................................................................................................... 34
Cannot Access the Serial Console ..................................................................................................................35
Cannot Access the Management Console ....................................................................................................35
The System LED Indicates Unhealthy Status............................................................................................... 35
A Security Warning Appears for the Initial Configuration Web Page..................................................... 37
Resetting the SG210 to Its Factory Defaults ..................................................................................................38
The SG210 Appliance Certificate is No Longer Valid After the IP Address Changes ...........................38
The SG210 Does Not Come Back Up After Rebooting ...............................................................................38
The SG210 Cannot Connect to the Director ..................................................................................................39
Connection Request Rejected by the Director.............................................................................................. 39

Blue Coat SG210 Installation Guide
iv
Chapter 4: Next Steps ............................................................................................................................41
Appendix A: Removing the Pass-Through Card .................................................................................43
Appendix B: Specifications ...................................................................................................................47
Environmental and Electrical .........................................................................................................................47
Appendix C: Regulatory Statements.................................................................................................... 49
Rack-Mounting Safety Instructions ...............................................................................................................49
Class A Digital Warning .................................................................................................................................49
EC Community EMC Warning ......................................................................................................................49
Canadian EC EMC Warning ...........................................................................................................................49
Australia/New Zealand EMC Warning....................................................................................................... 50
Taiwan BSMI Notification ..............................................................................................................................50
Japan VCCI EMC Notification ....................................................................................................................... 50
China CCC Notification.................................................................................................................................. 50
Battery Warning Notification......................................................................................................................... 50
Declaration of Conformity.............................................................................................................................. 52
Index .........................................................................................................................................................53

Chapter 1: The SG210 Series Appliance 5
Chapter 1:The SG210 Series Appliance
This Installation Guide provides general instructions for installing, configuring, and using the SG210.
This chapter explains how to unpack the SG210, install it on the wall or in an equipment rack, and make all
necessary connections.
Unpacking the SG210
The SG210 is shipped fully assembled. When you receive and unpack the unit, verify that the package
contains the following items:
Important: This product is intended for operation and servicing only by appropriately trained
technical personnel.
Dieses Produkt wird für Betrieb vorgehabt und wird nur durch passend ausgebildeten
technisches Personal gewartet.
Front and Back Panel Features
This section describes the front and back panel on the SG210.
The Front-Panel LEDs
Figure 1-1: Front-Panel LEDs
❐SG210 Series appliance ❐License and warranty
❐Serial cable ❐Crossover adapter
❐AC Power supply adapter ❐AC power cord
❐Skid-proof rubber pads (4) ❐Wall mount bracket and screws
❐Rack-mounting ear brackets (2)
and screws (6) ❐Jumper (for pass-through card removal only—see Appendix A:Removing the Pass-Through Card on page 43 for information)
❐Packet —Safety/Conformity ❐Quick Start Guide
Power Disk Drive Adapter Port System

6 Blue Coat SG210 Installation Guide
Power LED
•No color: The SG210 is powered off or non-functional.
•Solid Amber: The SG210 is powered on but unable to perform tasks (such as while it boots up).
•Flashing Green to Amber: The SG210 is powered on but is not configured.
•Green: The SG210 is powered on and at least minimally configured.
Disk Drive LED
•Off: No disk activity.
•Green: The disk drive is being accessed (can also indicate compact-flash drive access).
Adapter Port LEDs (Network Adapter Ports 0 and 1)
•Off: No link
•Green: Link
•Flashing Green to Amber: Link and network activity
System
•Off: Nothing to report (SG210 is not powered on).
•Green: SG210 is healthy.
•Amber: SG210 is unhealthy, inspect the appliance and perform a maintenance check before it becomes
critical.
•Flashing Green to Amber: Indicates a critical system warning—the SG210 requires immediate
attention. See “The System LED Indicates Unhealthy Status” on page 35 for information about locating
the source of an unhealthy System LED reading.
Rear Components
Figure 1-2: Components on the Back of the SG210
Power Supply Adapter Port
Connects to the power supply adapter. Connecting a power cable to the power supply adapter and to an
electrical outlet powers on the SG210.
Power Supply
Adapter Port Reset button
Ethernet Port 0 or
designated WAN port
Ethernet Port 1 or
designated LAN port
Serial
Port

Chapter 1: The SG210 Series Appliance 7
Serial Port
Connects to a PC, serial terminal, or standalone serial console box. Use this port to configure or maintain
the SG210 using the command line interface (CLI).
Ethernet Adapter Ports 0 and 1
Two full-duplex, auto-sensing Ethernet network adapters supporting 10/100 Base-T connections. The
physical interfaces of a bridge card are designated as WAN or LAN interfaces to help administrators
configure the bridge. For example, a two-port bridge card has the following interfaces:
Interface 0 (WAN)
Interface 1 (LAN)
If you have a MACH5 license, a programmable bridge card, and labeled WAN/LAN interfaces, the WAN
interface allows transparent interception by default. All other cases, all traffic is bypassed by default.
Reset Button
Restores the appliance to its factory defaults. All configurations are lost when you reset the appliance.
Installing the SG210
There are three methods of installing the SG210 appliance—placing it on a shelf or tabletop, mounting it
on a wall, or mounting it in an equipment rack.
Important: The SG210 ships with a pass-through card that is designed to fail open when the
appliance is powered down or loses power so that Web traffic remains uninterrupted. If
you prefer that the appliance fail closed, remove the pass-though card before mounting
the SG210 on a rack. See Appendix A:Removing the Pass-Through Card on page 43.
Placing the SG210 on a Shelf or Tabletop
For shelf or tabletop use, affix the four skid-proof rubber pads to the underside of the SG210.
Mounting the SG210 on a Wall
To mount the SG210 vertically on a wall, use the wall-mounting bracket, anchors, and screws; you also
need a drill and a Phillips screwdriver.
1Use the holes on the wall-mounting bracket to mark the positions on the wall for the two anchors; drill
holes in the wall just large enough to fit each anchor.

8 Blue Coat SG210 Installation Guide
2Line up the holes on the wall-mounting bracket with the anchors. Use a Phillips screwdriver to secure
the bracket to the wall using the wall-mount screws.
Figure 1-3: Secure the Wall-Mount Bracket to the Wall
3Locate the two notches on the bottom front of the chassis of the SG210; an arrow on each side of the
SG210 points to each notch.
4Mount the SG210 on the wall-mount bracket by inserting the notches on the SG210 into the hooks on
the bracket and pushing down slightly to lock the appliance into place.
Figure 1-4: Secure the Wall-Mount Bracket to the Wall
4 Insert the two notches
into the wall hooks
3 Locate the two notches

Chapter 1: The SG210 Series Appliance 9
Mounting the SG210 in an Equipment Rack
This section includes the safety conventions and the instructions for mounting the SG210 on an equipment
rack.
Rack-Mounting Notes
Read these notes before rack-mounting the SG210.
AElevated Operating Ambient—If installed in a closed or multi-unit rack assembly, the operating
ambient temperature of the rack environment may be greater than room ambient. Therefore,
consideration should be given to installing the equipment in an environment compatible with the
maximum ambient temperature (Tmax) specified by the manufacturer.
BReduced Air Flow—Installation of the equipment in a rack should be such that the amount of air flow
required for safe operation of the equipment is not compromised.
CMechanical Loading—Mounting of the equipment in the rack should be such that a hazardous
condition is not achieved due to uneven mechanical loading.
DCircuit Overloading—Consideration should be given to the connection of the equipment to the supply
circuit and the effect that overloading of the circuits might have on overcurrent protection and supply
wiring. Appropriate consideration of equipment nameplate ratings should be used when addressing
this concern.
EReliable Earthing —Reliable earthing of rack-mounted equipment should be maintained. Particular
attention should be given to supply connections other than direct connections to the branch circuit (for
example, use of power strips).
To mount the SG210 horizontally into an equipment rack, use the rack-mounting brackets and screws; you
also need a Phillips screwdriver.
1Use a Phillips screwdriver to attach the brackets to the SG210; use three screws on each side, as shown
in Figure 1-5.
Figure 1-5: Attach the Brackets to the SG210
Important: Ensure that the SG210 is fully supported when mounting it in the equipment rack:
do not allow the brackets to support the SG210 until they are securely placed.

10 Blue Coat SG210 Installation Guide
2While fully supporting the weight of the SG210, mount the brackets onto the equipment rack using
three equipment rack screws on each side (use the screws provided by the rack manufacturer).
Figure 1-6: Secure the SG210 to the Equipment Rack
Powering on the SG210
Power on the SG210 by plugging in the power supply adapter and power cable.
1Plug the power supply adapter into the SG210, ensuring that the barrel of the power supply adapter is
fully inserted into the SG210.
2Plug one end of the power cable into the power supply adapter.
Figure 1-7: Plug in the Power Adapter and Power Cable
Plug the power supply
adapter into the SG210
Plug the power
cable into the power
supply adapter

Chapter 1: The SG210 Series Appliance 11
3Plug the other end of the power cable into a power outlet.
The SG210 powers on and the operating system boots up. While the SG210 is booting up
(approximately one minute), the Power LED on the front panel (the left-most LED) glows solid amber.
4After the SG210 boots up, verify that the Power LED behaves as described below:
If the Power LED is solid green after booting up, an initial configuration has already been performed.
If you did not perform an initial configuration, restore the appliance to its factory defaults to restart
the initial configuration (see “Resetting the SG210 to Its Factory Defaults” on page 38).
Important: The use of a wall-socket adapter is not recommended, Blue Coat recommends
getting a localized power cable for your appliance. Country-specific power cables
are required to maintain product safety compliance and the warranty.
Configuration Status Power LED Activity
Not completed Flashing green and amber
Completed Solid green Power LED

12 Blue Coat SG210 Installation Guide

Chapter 2: First-Time Configuration 13
Chapter 2:First-Time Configuration
First-time configuration involves setting the basic network parameters and ensuring that the SG210 and
software are working properly.
The initial configuration might be done either using a standalone PC, a serial terminal, or after placing the
SG210 into your network. The placement of the SG210 depends on the flow of traffic within your
organization. The SG210 must be able to intercept initial packets on each client or application connection
to be optimized. Typical deployments include:
❐Explicit proxy configuration— where the client browser is explicitly configured to use a proxy
server. The browser is given the IP address and port number of the SG210.
It is also possible to configure the browser to download the proxy settings from a Web server. This
is called a Proxy Auto-Configuration (PAC) file.
❐Transparent proxy — where the client browser does not know that the traffic is being processed by
a machine other than the Origin Content Server. To enable the SG210 to intercept traffic sent to it,
you must create a service and define it as transparent. The service is configured to intercept traffic
for a specified port, or for all IP addresses on that port. Traffic redirection is managed through
policies you create on the redirection device.
A transparent HTTP proxy, for example, typically intercepts all traffic on port 80 (all IP addresses).
To make sure that the appropriate traffic is directed to the ProxySG, deploy hardware such as a
Layer-4 switch or a WCCP router, or the ProxySG appliance’s software bridge that can redirect
selected traffic to the appliance.
Note: The cabling and connections specific to the deployment of the SG210 are not within the
scope of this book. Check with your network administrator for guidance on deploying the
SG210 within your organization.
You must use the serial console to assign the IP address and the IP subnet mask for the SG210 appliance.
Choose one of the following methods to configure the SG210:
•Serial Setup Console
Use this method if you want to configure basic settings only and do not immediately require traffic
interception of specific services. If you want to configure traffic interception or ADN settings, choose
the Web Setup Wizard option. See Section A: “Using the Serial Console to Configure Initial Settings on
page 15 to configure initial settings. To continue with the configuration using the serial console setup
see Section B: “Configuring the SG210 Using the Serial Setup Console on page 18.
•Web Setup Wizard
Use the Web Setup Wizard if you need to immediately configure traffic interception or ADN settings.
To use the Web Setup Wizard, you must first configure an IP address for the appliance using the serial
console. See Section A: “Using the Serial Console to Configure Initial Settings on page 15 to configure
initial settings. To continue with the configuration using the Web setup wizard see Section C:
“Configuring the SG210 Using the Web Setup Wizard on page 23.

14 Blue Coat SG210 Installation Guide
•Director Registration
Use this method only if you have a Blue Coat 510 Director. The Director allows you to configure an SG
appliance and automatically register it with the Director. See Section A: “Using the Serial Console to
Configure Initial Settings on page 15 to configure initial settings. To continue with the configuration
using the Web setup wizard see Section D: “Configuring the SG210 Using Director Registration on page
26.
After first-time configuration is complete, log on to the SG210 and use the command-line interface (CLI) or
Management Console to fully configure the system. See Section E: “Logging in to the SG210 on page 30 and
refer to the Blue Coat ProxySG Configuration and Management Guide Suite for information on how to fully
configure the software. Download this manual from the Blue Coat WebPower site at:
https://www.bluecoat.com/support/manuals
Note: You must have a WebPower account to access the documentation.

Chapter 2: First-Time Configuration 15
Section A: Using the Serial Console to Configure Initial Settings
This section describes how to configure the SG210 using a direct serial port connection using a standalone
serial terminal or a PC to perform a first-time configuration of the following basic network information:
This procedure is valid for all SG210 Series appliances.
PC Note: If the PC is using standard serial port settings, you should have a problem-free
connection. If your PC has non-standard serial port settings, refer to your PC.
Connecting the SG210 to a PC Using a Direct Serial Port
Use the image below to configure the SG210 to a PC for direct serial port access:
Complete the procedure by reading onscreen material and entering data where necessary. In the procedure
below, entries in bold text are ones for which you are required to enter data.
Initial Configuration Using a Direct Serial Port Connection
1 Power on and connect the serial terminal or PC as described below (the SG210 must be powered off):
Serial terminal: Connect the terminal’s serial cable to the SG210’s serial console port; start the terminal
and verify that it is set using the parameters described below.
PC: Connect a serial cable to a serial port on the PC and to the SG210’s serial console port; start the PC,
open a terminal emulator (such as HyperTerminal), and connect to the serial port to which you
attached the cable. Create and name a new connection (either a COM or TCP/IP), and verify that the
port is set using the parameters described below.
• IP address • IP subnet mask
• IP gateway address • DNS server
•Baud rate: 9600 bps •Data bits: 8
•Parity: none •Stop bits: 1
•Flow control: none •Smooth-scroll: disabled
•Emulation: VT 100

16 Blue Coat SG210 Installation Guide
2Power on the SG210 and wait for the system to finish booting.
The following configuration alert displays:
Figure 2-8: Initial Setup—Configuration Alert
3Press <Enter> three times. When the Welcome to the ProxySG Appliance Setup Console prompt
appears, the system is ready for the first-time network configuration.
Figure 2-9: Initial Setup—SG Appliance Setup Console
4You can do one of the following:
❐Type Mto use the Manual Serial Setup Console. This option allows you to continue using the serial
console for fully configuring your SG210 appliance.
❐Type Wto use the Web Setup Wizard. This option requires you to assign the IP address, IP subnet
mask, and the IP gateway through the serial console, then you can continue the configuration
using the Web browser.
❐Type Rto use Director Registration.This option requires you to assign the IP address, IP subnet
mask, and the IP gateway for the SG210 and the IP address for the Director through the serial
console, before registering the SG210 with a Director.
Note: If you have removed the pass-through card, you are asked if you want to configure a
software bridge. If you enter YES, you must configure at least one bridge port and
associate a network interface with it.
******************* CONFIGURATION ALERT *******************
System startup cannot continue for one of these reasons:
(a) Need at least one adapter configured with an
IP address and subnet.
(b) Need the console password and enable password.
(c) Need to specify the trial edition.
********** SYSTEM STARTUP TEMPORARILY SUSPENDED **********
Press "enter" three times to activate the serial console
Welcome to the SG Appliance Setup Console
How do you want to set up the SG appliance?
M)anual setup using the serial console
W)eb wizard (after setting network configuration using the serial
console)
R)egister with Director (registration password required)
Choose setup mode:

Chapter 2: First-Time Configuration 17
5If you select M, the following screen displays:
Figure 2-10: Initial Setup—Page One
Note: A similar screen displays for each of the configuration options. The parameters that you
enter vary according to the selected configuration option.
6To continue using the serial setup console, see Section B: “Configuring the SG210 Using the Serial Setup
Console on page 18.
For details on the Web Setup Wizard, see Section C: “Configuring the SG210 Using the Web Setup
Wizard on page 23.
To use the Director Registration feature, see Section D: “Configuring the SG210 Using Director
Registration on page 26.
Welcome to the ProxySG Appliance Setup Console
---------------------- (page 1 of 5) ---------------------
Press <ESC> at any time to return to the main menu
Setup mode: Manual
DIRECTIONS:
Please enter the IP addresses for the SG Appliance.
The following interface will be configured:
1. Bridge passthru-0 (WAN link, LAN link)
IP address [0.0.0.0]: 10.0.1.246
IP subnet mask [255.255.255.0]:
IP gateway [0.0.0.0]: 10.0.1.1
DNS server [0.0.0.0]: 10.0.0.100
You have entered the following IP addresses:
IP address: 10.0.1.246
IP subnet mask: 255.255.255.0
IP gateway: 10.0.1.1
DNS server: 10.0.0.100
Would you like to change any of them? Y/N [No]

18 Blue Coat SG210 Installation Guide
Section B: Configuring the SG210 Using the Serial Setup Console
This section describes how to configure the SG210 with the manual setup option using the serial console.
Complete the procedure by reading on-screen material and entering data where necessary. The on-screen
instructions display as five separate pages, whereby you assign the following credentials:
In the procedure below, entries in bold text are ones where you are required to enter data.
Performing the Manual Setup Using the Serial Console
Use the steps below to configure the SG210:
1See Section A: “Using the Serial Console to Configure Initial Settings on page 15, for setting the initial
configuration using a direct serial port connection.
2On page 2, enter a console username and a console and enable password. A default username (admin)
is already in place—change it for stronger security.Usernames and passwords can each be from 1 to 64
characters in length. Passwords that contain special characters (such as an exclamation point) must be
in quotes.
Figure 2-11: Initial Setup—Page Two
• Console username • Console password
• Enable password • Serial port password (optional)
• Restrict the use of the console account
to a specific workstation (optional)
---------------------- (page 2 of 5) ---------------------
Press <ESC> at any time to return to the main menu
DIRECTIONS:
The console username, password and enable password are special administrative
credentials which can be used to log in to the command line interface or web
management interface.
WARNING - The console password and enable password are not defined. The
system cannot start up until these are defined.
You must configure the console user account now.
Enter console username [admin]: name123
Enter console password: ”******”
Verify console password: ”******”
That password is easily guessed Choose another? Y/N [Yes] N
Enter enable password: ”******”
Verify enable password: ”******”
That password is easily guessed. Choose another? Y/N [Yes] N

Chapter 2: First-Time Configuration 19
3(Optional) On page 2, you also have the option to secure the serial port. For maximum security, Blue
Coat recommends that you secure the serial port.
The serial port allows you to configure and access the SG210 using a serial cable. This can pose a
security risk because anyone with access to the appliance can reconfigure the SG210 settings. This
optional step sets a password for the serial console setup, allowing only authorized personnel the
ability to reconfigure the appliance.
(
Figure 2-12: Initial Setup—Page two continued for securing the Serial Port (Optional)
WARNING!
If you set the serial console password upon initial configuration, the password is required for
accessing the serial console. If the password is lost, the appliance must be restored to its
original factory defaults (see “Resetting the SG210 to Its Factory Defaults” on page 38).
You might still be able to access the Management Console or the CLI if you know the
administrative credentials — console username, password, and the enable password.
Do you want to secure the serial port? Y/N [Yes] Y
Enter setup password:*****
Verify setup password: *****
That password is easily guessed.
Choose another? Y/N [Yes] N
WARNING:
If you continue and enable the secure serial port it will
not be possible to enter the setup console without the
setup password. If the setup password is lost, assistance
from Blue Coat Systems will be required and all system
configuration may be lost. It is recommended that the
password be stored in a physically secure location.
Access to the CLI on the serial port will challenge for
credentials.
To enable the secure serial port, re-enter the setup password:

20 Blue Coat SG210 Installation Guide
4(Optional) On page 3, you might restrict the use of the console account to a specific workstation. On
this screen, you can add one IP address to the list of authorized workstations that are approved to use
the console account. Additional workstations maybe configured later using the CLI or through the
Management Console.
Figure 2-13: Initial Setup—Page Three
Note: For maximum security, restrict physical access to the SG210.
Note: After completing the initial configuration, you can change the workstation restriction
settings through the security commands in the CLI or the Console Access page in the
Management Console (under Authentication). You can add or remove IP addresses or
you can enable or disable workstation restrictions. Refer to Volume 4: Securing the Blue
Coat ProxySG Appliance of the Blue Coat ProxySG Configuration and Management Guide Suite
for details.
---------------------- (page 3 of 5) ---------------------
Press <ESC> at any time to return to the main menu
DIRECTIONS:
The console username and password are special. They can be used to log in
to the CLI or Web Management interface even in circumstances where this is
denied by VPM or CPL policy.
This makes the console account useful in emergencies,as a way to log in
when policy is broken, but it may also create a security hole.
To close the security hole, we recommend that you restrict the use of the
console account to specific workstations, identified by their IP address.
This dialog allows you to add one IP address to the list of workstations
that are authorized to use the console account. (This same list is also
used to restrict which workstations can use SSH with RSA authentication.)
Additional workstations may be configured later from the command line
interface or the Web interface.
WARNING: The console account can currently be used to log in from any
workstation.
Would you like to restrict access to an authorized workstation? Y/N [Yes]
Y
Authorized workstation [0.0.0.0]: 10.2.33.1