Blue Coat ProxyOne Appliance

ProxyOne is designed to produce mid-sized businesses with easy-to-deploy, enterprise-level web security. It incorporates content-caching technology for improved scanning performance and will extend protection to remote workers via Blue Coat's ProxyClient software.

This 1U rack system comes with a quad-core Xeon processor, 18GB of memory, two mirrored 1TB hard disks and 2 hot-plug power supplies. It encompasses a Cavium Nitrox hardware accelerator, while a hardware bypass switch means an appliance failure won't halt your web access.

Prices start at £5,600, together with 24/7 support for 100 users, one-year warranty, licences and security updates. This makes it expensive for small firms, but costs decrease because the user count goes up, with a 3-year subscription for two,000 users equating to around £11 per user every year.

The appliance supports two deployment methods and will be placed to 1 side of the network, where it functions as an explicit proxy. This requires all client systems at the LAN to be reconfigured to take advantage of it, and this is often automated using AD group policies or PAC scripts.

The easier method, which we chose for testing, is to position it in-line between the firewall and LAN. On this mode it functions as a clear gateway and requires no client configuration.

First contact is via a serial port connection to establish management access. We found the six-step process simple - we provided a hard and fast IP address, netmask, gateway and first DNS server details, chose an administrator user name and gave it a password.

That's all there's to it, because the appliance downloads updates and virus signatures automatically and starts filtering traffic immediately. Point an internet browser on the IP address provided earlier and you'll be presented with easy accessibility to URL filtering, appliance monitoring and configuration and a separate reporting section.

URL filtering comes courtesy of Blue Coat's WebPulse cloud-based service. It's easy to establish as you decide and select from 74 categories and judge whether to dam or allow them. Spyware, malware, phishing and proxy-avoidance sites are permanently blocked. You could create a white list of allowed URLs, IP addresses and domains, and a black list where they are going to be blocked whatever the categories chosen.

We found filtering performance to be exemplary. With the games and gambling categories blocked, our attempts to access 50 bingo sites were all rebuffed.

Social networking sites comparable to Facebook, Twitter and MySpace may be quickly placed off-limits. We also visited lots of sites known to harbour malware and these were automatically blocked.

A P2P category allowed us to dam access to BitTorrent sites, however the IM category only blocks sites providing these services and is unable to forestall apps which includes Windows Live Messenger. Appliances comparable to Cyberoam's CR750ia offer IM app controls and feature no user restrictions.

The device-configuration web site provides detailed graphs showing all traffic activity. You can even see the cache in action, and we tested its effectiveness by downloading a 20MB file from an external FTP site which initially took 11 minutes. Subsequent downloads took a second as they were retrieved from the cache.

Blue Coat's reporting features appear to have every angle covered. A dashboard provides a selection of graphs showing detected malware, potentially infected LAN clients, blocked sites and web browsing activity. a number of predefined reports come in so that you can pull up views of user behaviour, security threats and perusing trends. You can even create your individual reports using stored data.

Blue Coat is definitely easy to deploy. Smaller companies will find it expensive, but its ability to increase content security and ideal URL filtering to remote workers adds a number of value.
Dave Mitchell