Blue Coat ASG-S400 Series User manual

Blue Coat recommends that you connect the appliance and verify the LEDs and LCD display to
ensure functionality before rack mounting the appliance.
If you want to install the appliance into a rack before performing any configuration tasks, begin with
Rack Mount the Appliance.
Note: Network cables are not included and must be supplied by the user.
Figure 1 shows a typical Blue Coat ASG-S400 network deployment:
The following installation assumes the network deployment shown in Figure 1 is in use. For more
information, see the product guides at:
https://bto.bluecoat.com/products/advanced-secure-gateway
To deploy your ASG-S400 appliance (Figure 2):
1. Remove the EULA (End User License Agreement) sticker located
on the rear of the appliance. Be aware that you are agreeing to
the terms and conditions of the EULA by removing the sticker and
installing the product.
2. Disconnect the existing LAN switch cable from the WAN router.
3. Connect the Ethernet cable from the LAN switch and plug it into the 2:1 port network interface on
the ASG-S400 appliance.
4. Connect an Ethernet cable from the WAN router to the 2:0 port network interface on the ASG-
S400 appliance. The interface auto-negotiates 10/100/1000 Base-T speed and duplex settings.
5. Connect a network cable between the SYS MGMT 0:0 port network interface and the router (or
switch) leading to the management network.
6. Connect a null-modem serial cable from the ASG-S400 appliance to a PC (or serial terminal).
This connection is used to perform initial configuration via a direct serial connection.
7. Connect the socket end of the enclosed power cords into the power supply inlets, and then
connect the plug into a power source. If the appliance does not automatically power on, switch
the appliance on by pressing the rear soft power switch and continue to .
Note: This appliance retains memory of being turned off with the soft power switch. In such cases,
the soft power switch must be used to turn it back on after power is connected. However, if power is
disconnected while the appliance is on, it will automatically turn on when power is restored.
3Connect the Cables
2
Unpack the shipment package and verify the contents of the box.
The Blue Coat ASG-S400 series appliance ships with the following components:
 Blue Coat ASG-S400 series appliance  Software License Agreement
 Two AC power cords  Safety and Regulatory Compliance Guide
 Null-modem serial cable  Quick Start Guide (this document)
 Two / four post slide-rail kit  Rack mount ears w/ installation hardware
3Unpack the Appliance
1
Quick Start Guide
Advanced Secure Gateway: ASG-S400 Series
Flip over to complete the installation
4
After your ASG-S400 appliance is configured for network access, complete the installation by verifying
network connectivity and licensing the appliance. The ASG-S400 relies on a base license, consisting of
the primary operating components of the Proxy and Content Analysis features, and add-on licenses
which includes optional elements, such as file inspection subscriptions and specialized Proxy features.
Licensing the ASG is a multi-step process. You must first install the base license, activate and install the
Proxy licenses, and then activate and install the file inspection subscriptions. Keep in mind, you’ll need
Internet connectivity to access the Blue Coat Licensing Portal (BCLP) to activate your optional add-ons.
To complete the ASG-S400 installation:
1. Verify that you can log in to the appliance via the Web browser. To log in to the appliance:
a. Enter the ASG-S400 IP address into your Web browser's Address or Location box using
the following format: https://ASG_ipaddress:8082.
b. Enter the user name and password specified during configuration to access the
management console. The management console loads within your browser window.
2. Activate the base license from the management console:
a. Navigate to the License page: Proxy > Maintenance > Licensing > Install
b. Click Retrieve. The appliance automatically contacts the Blue Coat licensing server and
installs the base license.
3. Activate optional Proxy licenses and/or file inspection subscriptions, if any were purchased:
a. Visit the Blue Coat Licensing Portal at: https://services.bluecoat.com and log in using your
BlueTouch Online credentials.
b. Enter an activation code provided in your e-fulfilment letter and click Next.
c. Enter your appliance serial number, click Next and follow any on screen prompts to
complete the activation.
d. Repeat 3b –3c for each optional license and subscription you wish to activate.
4. Download and install the updated license:
a. Navigate to the License page: Proxy > Maintenance > Licensing > Install
b. Click Retrieve. The appliance automatically contacts the Blue Coat licensing server and
installs the updated license.
5. To validate that all services are available, you must restart your appliance:
a. Navigate to Proxy > Maintenance > Tasks.
b. Select the Hardware and software radio button.
c. Click Restart now.
Note: The appliance can take up to 10 minutes to restart. DO NOT unplug the power
cables during the restart process as this can cause a corruption of the configuration.
6. Enable file inspection subscriptions, if any were purchased:
a. Navigate to the Content Analysis License page: Content Analysis > System > Licensing.
Each licensable service shows the following details:
 Status: The availability of a service component and the expiration date.
 Active: The activation status of the component.
b. Select a service component checkbox to activate it.
c. Click Save Changes.
7. To prepare the ASG-S400 for rack mounting, gracefully shutdown the appliance using the
shutdown command.
a. Access the ASG-S400 command-line interface (see for more information).
b. When prompted, press 1to access the CLI.
c. Enter enable to access privileged commands.
d. Enter shutdown to turn off the appliance.
Important! Do not shut down the appliance using the switch or by removing the power cables!
Abruptly removing power can result in irreparable data loss. Always use the shutdown command
from the CLI to power down the appliance
3License the ASG-S400 Appliance
5
For additional installation details and configuration options, see the
Advanced Secure Gateway documentation available at:
https://bto.bluecoat.com/products/advanced-secure-gateway
Verify the LEDs and LCD Display
3
To verify that the appliance has booted and is operational, check the following:
Figure 3 shows the location of all the major control functions located on the front panel of the ASG-
S400 series appliance. After the appliance boots up, the System Management LED should be Off
while the Power LED should alternate between amber and green, denoting an unconfigured state.
Note: Following the initial configuration, the System Management LED continues blinking amber until
a valid license is applied to the appliance.
After the appliance has been configured for network access, the LCD displays various system
statistics. You can use the left and right arrows to manually scroll through the statistics modes.
3Perform Initial Configuration
4
You must have the following network information on hand to perform initial configuration:
To access the ASG-S400 command-line interface and run the initial configuration wizard:
1. Confirm that a null-modem serial cable is connected from the ASG-S400 appliance to your
workstation serial port. For cabling instructions, see Connect the Cables.
2. Open a terminal emulation program such as Microsoft HyperTerminal®, PuTTY, Tera Term, or
Procomm™.
3. Configure the terminal emulation software to the following settings:
4. Power on the ASG-S400 appliance. After the appliance boots up, you will be prompted to press
<Enter> three times to start the initial configuration wizard.
5. Press <Enter> three times. The configuration process begins.
6. Choose a configuration method:
 [Manual Setup] Select this method if you are configuring the ASG-S400 appliance without
Director (provides centralized management for ASG appliances).
 [Director-managed setup] Select this method if you are registering this ASG-S400 with
Director. You will need the Director appliance IP address and registration password.
7. Enter the network configuration parameters when prompted. If your ASG-S400 appliance is
connected to the network, the configuration wizard will attempt to verify DNS server addresses
and auto-detect link settings.
Baud rate: 9600 bps Data bits: 8Flow control: none
Parity: none Stop bits: 1
 ASG-S400 IP address  Default Gateway IP address
 Subnet mask  Primary DNS server IP address
 Console password to access advanced
commands in the CLI
 Admin password for authorizing access to the
appliance
6
2

3. Mount the slide-rail assemblies into the four-post rack (Figure 7):
a. Place the assembled slide-rail against the equipment rack and attach the Rail_A front bracket
to the outside face of the rack using (2) rack screws. Do not fully tighten! The Rail_A front
bracket will be tightened after the appliance is secured in step 4c.
b. Extend (or retract) Rail_C to align the mounting face of the bracket against the outside face of
the equipment rack and attach with (2) rail screws. Do not fully tighten! The Rail_C bracket will
be tightened after the appliance is secured in step 4c.
c. Tighten the Rail_C side mounting screws.
d. Repeat steps 3a-3c for the other side. Ensure both slide-rail assemblies are at the same
height in the rack.
This section lists additional resources for the ASG-S400 appliance.
3Next Steps
7
Reference Documentation To access the ASG-S400 appliance reference documentation, visit:
https://bto.bluecoat.com/products/advanced-secure-gateway
Hardware Documentation Blue Coat hardware document depository, to access visit:
https://bto.bluecoat.com/blue-coat-hardware-documentation
Answers to Frequently
Asked Questions
Blue Coat Knowledge Base, available at:
https://bto.bluecoat.com/knowledgebase
Blue Coat User Community Blue Coat Support Forums, available at:
https://forums.bluecoat.com
Classroom and Web-based
Training
Blue Coat Training, available at:
https://www.bluecoat.com/support/training
Deployment Planning and
Consultation
Blue Coat Professional Services, available at:
https://www.bluecoat.com/support/consulting-services
Technical Support Blue Coat Support, available at:
https://www.bluecoat.com/support/overview
This section describes how to troubleshoot several hardware problems.
Problem: The system does not power up.
Solution: Check the power cords and verify that the outlet is receiving power.
Problem: The System and Power LEDs are green, but there is no network connectivity.
Solution: Check the network connections to verify that they are not loose. Otherwise, the problem might
be a bad network cable or an issue with the router/switch.
Problem: The System Management LED blinks amber even after the appliance has finished booting.
Solution: If the appliance does not have a valid license installed, the System Management LED blinks
amber.
3Troubleshooting
8
 You must remove the inner rail from Rail_A before starting the installation. For more infor-
mation on this task, refer to the S400 Series Maintenance and Upgrade WebGuide.
 Rail_B is not used in the four-post slide-rail installation. These items should be set aside
for future use.
The slide-rail rack mounting kit included with the appliance allows the appliance to be installed in
multiple configurations. This Quick Start Guide will show the tasks required to install the ASG-S400
series appliance into a four-post rack.
Note: For comprehensive information on the slide-rail rack mounting kit and additional installation
options, see the S400 Series Maintenance and Upgrade WebGuide at:
https://bto.bluecoat.com/blue-coat-hardware-documentation
To ensure safety before you begin rack mounting the appliance, follow these instructions:
1. Gracefully shutdown the appliance from the CLI and disconnect all cables.
2. Read the Rack Mount Warnings section of the included Safety and Regulatory Compliance
Guide.
3. Take adequate safety and grounding measures to avoid creating an electric shock hazard and to
prevent bodily injury.
To install the ASG-S400 into a four-post equipment rack, you need the following items:
Note:
Rack Mount the Appliance
6
 M4 Nut driver / Adjustable wrench  #2 Phillips head screwdriver
 Equipment rack specific screws (please refer to your equipment rack guide for more information)
2. Assemble the slide-rails (Figure 6):
a. Loosely attach Rail_C to Rail_A. The precise attachment location depends on how far Rail_C must
be extended (or retracted) to fit your specific equipment rack model. It might be necessary to
remove Rail_C from Rail_A to determine the proper installation length for your network rack.
Temporarily mount Rail_C to Rail_A by doing the following:
1. Approximate the slide-rail installation length by lining up the front and rear mounting faces
against the equipment rail. Be sure that the slide-rail mounting faces are on the outside of the
equipment rack vertical rails.
2. Temporarily install (3) M3 screws through the slotted hole located on Rail_C after the
installation length has been determined. Be sure to install the screws equidistantly to
distribute the loads placed on the rail.
b. Repeat step 2a for the opposite slide-rail.
To install the ASG-S400 appliance into a four-post equipment rack, follow the steps below:
1. Attach the inner rail to the appliance (Figure 5):
a. Align the inner rail to the four mounting posts on the side of the chassis and lock the rail into position
by sliding it towards the rear of the appliance. Ensure that all four mounting posts snap into the slots
on the inner rail.
b. Install (1) M3 screw to secure the inner rail to the appliance.
c. Align the retaining ear against the raised mounting posts and install (2) M3L4 screws to secure the
rack mount ear to the appliance. Ensure that the captive screw faces the front.
d. Repeat steps 1a-1c for the opposite inner rail.
4. Secure the ASG-S400 appliance into the equipment rack (Figure 8):
a. Align the grooves on the inner rail with those on Rail_A, and slide the appliance half-way
into the rack.
b. Depress the gray tab on the inner rail to slide the appliance fully into the equipment rack.
c. Withdraw the appliance to access the rack mounting screws and tighten the Rail_A and Rail_C
rack mounting screws that secure the slide-rails to the equipment rack (See Figure 7, inset a
and b).
d. Push the appliance fully into the equipment rack.
e. Tighten the thumbscrews on the retaining ears to prevent the unit from sliding out of the
equipment rack.
5. Reconnect the cables. Follow the instructions in Connect the Cables
2
© 2015 Blue Coat Systems, Inc. All rights reserved. BLUE COAT, PROXYSG, PACKETSHAPER, CACHEFLOW, INTELLIGENCECENTER, CACHEOS, CACHEPULSE, CROSSBEAM, K9, DRTR, MACH5, PACKETWISE, POLICYCENTER, PROXYAV, PROXYCLIENT, SGOS, WEBPULSE, SOLERA NETWORKS, DEEPSEE, DS APPLIANCE, SEE EVERYTHING. KNOW EVERYTHING., SECURITY EMPOWERS BUSINESS, BLUETOUCH, the Blue Coat shield, K9, and Solera Networks logos and other Blue Coat logos are registered trademarks or trademarks of Blue Coat Systems, Inc. or its affiliates in
the U.S. and certain other countries. This list may not be complete, and the absence of a trademark from this list does not mean it is not a trademark of Blue Coat or that Blue Coat has stopped using the trademark. All other trademarks mentioned in this document owned by third parties are the property of their respective owners. This document is for informational purposes only.
BLUE COAT MAKES NO WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT. BLUE COAT PRODUCTS, TECHNICAL SERVICES, AND ANY OTHER TECHNICAL DATA REFERENCED IN THIS DOCUMENT ARE SUBJECT TO U.S. EXPORT CONTROL AND SANCTIONS LAWS, REGULATIONS AND REQUIREMENTS, AND MAY BE SUBJECT TO EXPORT OR IMPORT REGULATIONS IN OTHER COUNTRIES. YOU AGREE TO COMPLY STRICTLY WITH THESE LAWS, REGULATIONS AND REQUIREMENTS, AND
ACKNOWLEDGE THAT YOU HAVE THE RESPONSIBILITY TO OBTAIN ANY LICENSES, PERMITS OR OTHER APPROVALS THAT MAY BE REQUIRED IN ORDER TO EXPORT, RE-EXPORT, TRANSFER IN COUNTRY OR IMPORT AFTER DELIVERY TO YOU.
RECYCLE YOUR OLD BLUE COAT APPLIANCE! —Blue Coat offers an easy and sustainable way to
recycle your decommissioned Blue Coat appliances. Simply use your new shipping box to send us your
old appliance, absolutely free of charge. For details and shipping information, please visit:
http://www.bluecoat.com/support/recycling-blue-coat-products
WHY RECYCLE? —According to the latest figures on E-Waste and Recycling from the Environmental
Protection Agency (EPA), the recycling rate for electronic waste in the United States is under 20%. The
remaining 80% of waste products end up in landfills or incinerators.
Without proper recycling, toxic chemicals and other hazardous materials pose serious environmental and
health risks. By offering a free and easy-to-use Product Take-Back program to its customers, Blue Coat
enables businesses to efficiently and responsibly dispose of their used technology. Find out how!
1. Fast and easy to use
Use your new appliance carton to ship us your old technology.
2. Protects people and the planet
Responsible technology recycling is good for business and the environment.
3. Free for our customers
We cover the costs, including shipping.
To take advantage of this offer, visit http://www.bluecoat.com/support/recycling-blue-coat-products and
follow the simple instructions.
Recycling Information
To view an online version of this document, go to:
https://bto.bluecoat.com/products/advanced-secure-gateway
How to Contact Support —For the current list of regional customer support phone numbers, go to:
http://www.bluecoat.com/support/technical-support/contact-service-support
When contacting Blue Coat Systems for technical phone support or to set up an RMA, be prepared to
provide your serial number to verify entitlement. If you do not have your serial number, supply Blue Coat
with your Support Contract Number, which can be found on your Support Contract Certificate.
If you have purchased a Support Contract but have not received a Support Contract Certificate, go to:
http://www.bluecoat.com/support/technical-support/contact-service-support
BlueTouch Online —BlueTouch Online https://bto.bluecoat.com allows you to create new technical
support cases and review and comment on open cases at any time. You also have access to exclusive
Blue Coat support materials, installation notes, and updates.
To obtain a BlueTouch Online login, go to:
https://www.bluecoat.com/forms/contact
Blue Coat Support Offerings —For a list, see http://www.bluecoat.com/support/
Service Information
Americas:
Blue Coat Systems Inc.
384 Santa Trinita Ave
Sunnyvale, CA 94085
Rest of the World:
Blue Coat Systems International SARL
3a Route des Arsenaux
1700 Fribourg, Switzerland