enTechnical Alertshttp://bluecoat.force.com/knowledgebase/ //link to the public knowledge base Fri Sep 01 19:38:20 GMT 2017 Fri Sep 01 19:38:20 GMT 2017 //help build the article url //build the article url HTTPS requests to Apple web servers fail for Apple devices and Macintosh computers using Safari when being processed by certain versions of ProxySG when tunnel-on-protocol-error is enabled.HTTPS requests to Apple web servers may fail when the client is an Apple device or Macintosh computer using Safari.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000032983Thu May 18 18:55:27 GMT 2017Thu May 18 18:55:27 GMT 2017 //help build the article url //build the article url ProxySG, ASG and WSS will interrupt SSL connections when clients using TLS 1.3 access sites also using TLS 1.3The following behaviors are observed when this issue occurs: SSL connections will be interrupted when clients that default to TLS 1.3 access TLS1.3 sites, if ProxySG or ASG has protocol detection, SSL Proxy service or SSL interception enabled or the connections are sent to WSS.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000032878Tue May 16 20:03:11 GMT 2017Tue May 16 20:03:11 GMT 2017 //help build the article url //build the article url Certificate Errors when accessing the ProxySG or Advanced Secure Gateway using Chrome v58When accessing a website using an affected type of SSL certificate with an affected version of browser, a user will see an error/warning page.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000032957Thu Apr 27 20:56:01 GMT 2017Thu Apr 27 20:56:01 GMT 2017 //help build the article url //build the article url Interoperability issue between Symantec SSL Visibility products and TLS 1.3 in certain configurationsThis article explains how the SSL Visibility handles TLS1.3 flowshttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000032947Thu Apr 20 20:03:43 GMT 2017Thu Apr 20 20:03:43 GMT 2017 //help build the article url //build the article url Updated Hard Disk Drives for SG300 and SG600Updated Hard Disk Drives for SG300 and SG600http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/UpdatedHardDiskDrivesforSG300andSG600Wed Apr 19 20:35:04 GMT 2017Wed Apr 19 20:35:04 GMT 2017 //help build the article url //build the article url SV1800 may fail to boot after upgrading to 4.0.1.1When upgrading an SV1800 to 4.0.1.1 the system may not be able to find a usable boot devicehttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000032890Fri Apr 07 22:09:15 GMT 2017Fri Apr 07 22:09:15 GMT 2017 //help build the article url //build the article url Changes to ProxySG trust package Feb 4/5/2017In February 2017 new trust packages will be released in latest revisions of SGOS.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000032748Wed Apr 05 17:02:05 GMT 2017Wed Apr 05 17:02:05 GMT 2017 //help build the article url //build the article url Upgrade of the ProxySG Trust package (04/04/2017)This article outlines the instructions for upgrading the ProxySG Trust packagehttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000028311Tue Apr 04 20:07:50 GMT 2017Tue Apr 04 20:07:50 GMT 2017 //help build the article url //build the article url With protocol detection enabled, Proxy SG breaks all SSL traffic that is going to TLS1.3 sitesThe following behaviors are observed when this issue occurs: All SSL connection will break that is going to TLS1.3 sites, if Proxy SG has protocol detection or SSL interception enabled.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/With-protocol-detection-enabled-we-will-break-all-explicit-traffic-that-is-going-to-TLS1-3-sitesTue Mar 14 22:54:37 GMT 2017Tue Mar 14 22:54:37 GMT 2017 //help build the article url //build the article url Content Analysis (CAS) or Advanced Secure Gateway (ASG) AV vendor license reflects as expired after new subscription activationAV vendor license is not showing the renewed date.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000032864Fri Mar 10 19:39:38 GMT 2017Fri Mar 10 19:39:38 GMT 2017 //help build the article url //build the article url SGOS/AVOS Upgrade Required for License System (July 4, 2013)This article provides the details for the changes made to the licensing of SGOS/AVOS effective July 4th, 2013.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/URGENTSGOSAVOSUpgradeRequiredbyJuly42013Tue Jan 10 19:52:23 GMT 2017Tue Jan 10 19:52:23 GMT 2017 //help build the article url //build the article url WebFilter URL Category Updates/Changes (November 12, 2013)The attachment included in this article details changes to the WebFilter URL categories made on November 12, 2013.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/UpcomingBlueCoatURLCategoryUpdatesChangesTue Jan 10 17:55:32 GMT 2017Tue Jan 10 17:55:32 GMT 2017 //help build the article url //build the article url Subscription updates failing on ProxySG, Content Analysis and Advanced Secure Gatewaysubscripton.es.bluecoat.com updates failinghttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000032508Thu Dec 22 22:37:52 GMT 2016Thu Dec 22 22:37:52 GMT 2016 //help build the article url //build the article url PacketShaper S-series core file generationIn the event that a PacketShaper S-series appliance enters a hung state, or behaves in an unexpected way, generating a core file can provide the necessary data to identify and resolve the issue.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000027690Thu Dec 22 19:59:14 GMT 2016Thu Dec 22 19:59:14 GMT 2016 //help build the article url //build the article url (Cloud) Upgrade from UA 4.7.1 to 4.7.3 on Win8.1 or 10 failsUpgrades to UA version 4.7.3 from UA version 4.7.1 on a Windows 8.1 or Windows 10 may fail.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/Cloud-Upgrade-from-4-7-1-to-4-7-3-on-Win8-1-or-10-failsMon Dec 12 23:11:02 GMT 2016Mon Dec 12 23:11:02 GMT 2016 //help build the article url //build the article url PacketShaper S-series may report "Measurement engine is waiting until xx:xx" after a measurement engine reset or system upgradePacketShaper S-Series can take up to 24 hours to start the measurement engine, after an event that may require or involve a measurement engine reset.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000032520Thu Dec 01 21:00:18 GMT 2016Thu Dec 01 21:00:18 GMT 2016 //help build the article url //build the article url Kaspersky updates failing on ProxyAVKaspersky updates failinghttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000032509Fri Nov 04 22:34:51 GMT 2016Fri Nov 04 22:34:51 GMT 2016 //help build the article url //build the article url ProxySG/ASG Memory leak with SSL Interception and Automatic Protocol Detection Policy on 6.6.5.1A memory leak was discovered in 6.6.5.1 that affects ProxySG or ASG appliances that are intercepting SSL with automatic protocol detection policy when HTTPS is detected.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000032471Wed Nov 02 13:40:03 GMT 2016Wed Nov 02 13:40:03 GMT 2016 //help build the article url //build the article url ECDHE cipher support on the ProxySG applianceThe ProxySG appliance's support for DHE ciphers impacts CPU heavily. To remedy this issue, the ProxySG supports ECDHE and ECDSA ciphers.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000022362Wed Oct 19 19:39:01 GMT 2016Wed Oct 19 19:39:01 GMT 2016 //help build the article url //build the article url Time zone database on ProxySG update announcementTime zone database on ProxySG update announcementhttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000028315Fri Oct 14 20:12:43 GMT 2016Fri Oct 14 20:12:43 GMT 2016 //help build the article url //build the article url Newline characters being stripped from policy when pushed through Management CenterManagement Center (MC) replaces the carriage returns (line breaks) within the custom objects in the ProxySG policy which may cause the policy to fail when pushed to the ProxySG.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000032384Fri Sep 16 18:10:43 GMT 2016Fri Sep 16 18:10:43 GMT 2016 //help build the article url //build the article url Leap Second Adjustment - December 31, 2016Will Blue Coat products be affected by the leap second adjustment taking place on December 31, 2016?http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000024864Thu Jul 28 18:10:31 GMT 2016Thu Jul 28 18:10:31 GMT 2016 //help build the article url //build the article url Slow browsing on HTTPS/SSL traffic; appliance not responding when SSL proxy enabledSlow browsing and high cpu in SSL Proxy component on the Proxy SGhttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/Slow-browsing-on-HTTPS-SSL-traffic-Proxy-hanging-when-SSL-proxy-enabledFri Jul 08 09:06:09 GMT 2016Fri Jul 08 09:06:09 GMT 2016 //help build the article url //build the article url ASG - Boot loop after setting "ipv6 auto-link disable"Issuing the "ipv6 auto-link disable" may cause an ASG appliance to fail to load and restart.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000029637Mon Jun 27 19:37:01 GMT 2016Mon Jun 27 19:37:01 GMT 2016 //help build the article url //build the article url Unable to access https://www.google.com and https://www.gmail.com on Chrome version 50 on ProxySG and ASGAfter updating to Chrome version 50 https://www.google.com and https://www.gmail.com are not accessible any more.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000031241Tue Jun 21 13:01:10 GMT 2016Tue Jun 21 13:01:10 GMT 2016 //help build the article url //build the article url Unable to access https://www.google.com and https://www.gmail.com on Chrome version 50 when decrypting on the SSLVUnable to access some Google sites on Chrome version 50 when decrypting on the SSLVhttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000031281Fri Jun 10 18:10:11 GMT 2016Fri Jun 10 18:10:11 GMT 2016 //help build the article url //build the article url SSL sessions to Google being cut through on SSLV ApplianceSome SSL sessions to Google servers are being cut through with the session log indicating that the session is using an unknown cipher suite.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000031045Fri Jun 10 18:03:34 GMT 2016Fri Jun 10 18:03:34 GMT 2016 //help build the article url //build the article url Restart of ProxySG after downloading BCWF updatesThis article explains the symptom, root cause and solutions for cases where the ProxySG restarts due to a BCWF update that was pushed on April 28, 2016http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000030888Mon May 09 21:34:39 GMT 2016Mon May 09 21:34:39 GMT 2016 //help build the article url //build the article url PacketShaper 9.2.13g1 now availableThis article provides details on the security and performance enhancements that are part of the PacketShaper and PolicyCenter 9.2.13g1 release. Customers running PacketShaper and PolicyCenter 9.x versions are urged to upgrade to this latest release as soon as possible.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000030826Fri Apr 22 20:28:42 GMT 2016Fri Apr 22 20:28:42 GMT 2016 //help build the article url //build the article url The host categorization database on SSL Visibility appliances fail to update as of Feb 2, 2016As of Feb 2, 2016, the host categorization database on SSL Visibility appliances fail to update.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000029520Thu Feb 04 20:45:53 GMT 2016Thu Feb 04 20:45:53 GMT 2016 //help build the article url //build the article url "Socket Connect Error" when downloading BCWF database on ProxySGProxySG may see problems downloading the latest BCWF database updateshttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000029528Thu Feb 04 00:15:06 GMT 2016Thu Feb 04 00:15:06 GMT 2016 //help build the article url //build the article url Problem downloading antivirus updates on ProxyAV servers running version 3.5ProxyAV running version 3.5 may see problems downloading the latest antivirus updateshttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000029531Thu Feb 04 00:15:01 GMT 2016Thu Feb 04 00:15:01 GMT 2016 //help build the article url //build the article url SSL Visibility SV1800-F High Availability may not function properlyAn SV1800-F appliance with a Fiber Media Card running a CPLD version of 0007 or 000C and with interface 4 configured in High Availability (HA) mode may not function properly.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000029456Wed Jan 27 19:59:35 GMT 2016Wed Jan 27 19:59:35 GMT 2016 //help build the article url //build the article url McAfee patterns will stop updating on all ProxyAV appliances after March 31st, 2016This article outlines the details and resolution when McAfee patterns stop updating in a ProxyAV environment.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000029271Sat Jan 16 01:26:34 GMT 2016Sat Jan 16 01:26:34 GMT 2016 //help build the article url //build the article url Proxies running SGOS 6.5.8.1 boot loader will fail to reload 6.5.8.1 after January 28th 2016Proxies that have ever run SGOS 6.5.8.1 will fail to boot-up on 6.5.8.1 after January 28th 2016.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000027436Thu Jan 14 15:32:51 GMT 2016Thu Jan 14 15:32:51 GMT 2016 //help build the article url //build the article url Firefox users connecting through the Blue Coat Cloud Service may encounter browser warnings encountering SSL SHA-1 certificatesA ThreatPulse policy with SSL interception enabled will result in browser warnings when accessing certain SSL-based sites through the Blue Coat Cloud web security service when using certain versions of Mozilla Firefox.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000029268Fri Jan 08 13:57:14 GMT 2016Fri Jan 08 13:57:14 GMT 2016 //help build the article url //build the article url "Page Cannot Be Displayed" when navigating to Google owned sites using Internet ExplorerThe article talks about a recent Microsoft security patch which causes Internet Explorer to return, "page cannot be displayed' when browsing to Google owned siteshttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000028481Tue Dec 15 23:58:28 GMT 2015Tue Dec 15 23:58:28 GMT 2015 //help build the article url //build the article url Digicert intermediate CA certificate on proxy expired on Sept. 30th 2015The DigiCert_High_Assurance_EV_Root_Inter_CA CA certificate on ProxySG expired on Sept. 30th 2015. Websites that need this certificate chain will not load properly.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000027970Thu Oct 01 13:12:40 GMT 2015Thu Oct 01 13:12:40 GMT 2015 //help build the article url //build the article url “This webpage is not available” error when attempting to browse to Google Services in an SSLVA environmentTraffic between Google Chrome and Google services, such as Gmail, can no longer be decrypted by SSLV and result in an “Invalid MAC” error.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000027435Fri Sep 11 13:31:00 GMT 2015Fri Sep 11 13:31:00 GMT 2015 //help build the article url //build the article url Blue Coat Web Filter (BCWF) pattern files did not update from Sep 2 - 3, 2015Blue Coat Web Filter (BCWF) pattern files did not update from Sep 2 - 3, 2015http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000027458Fri Sep 04 14:27:13 GMT 2015Fri Sep 04 14:27:13 GMT 2015 //help build the article url //build the article url SGOS 6.6.2.1 downgrade issueDowngrading from SGOS 6.6.2.1 to SGOS 6.5.7.5 or older can result in the downgrade failing and the ProxySG to become unresponsive.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/SGOS-6-6-2-1-downgrade-issueMon Aug 17 15:50:12 GMT 2015Mon Aug 17 15:50:12 GMT 2015 //help build the article url //build the article url CachePulse policy is cleared when a new CFS database is downloaded to the ProxySGhttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000026767Thu Aug 06 19:36:37 GMT 2015Thu Aug 06 19:36:37 GMT 2015 //help build the article url //build the article url SSL Visibility SV1800-F appliances may not Fail-To-Wire as expectedSSL Visibility SV1800-F appliances may not Fail-To-Wire when power is lost or when the unit is halted/rebootedhttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000026073Fri Jul 24 21:36:23 GMT 2015Fri Jul 24 21:36:23 GMT 2015 //help build the article url //build the article url Director 6.1.19.1 Net-SNMP package updatehttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/Director-6-1-19-1-netsnmp-package-updateWed Jun 24 17:04:11 GMT 2015Wed Jun 24 17:04:11 GMT 2015 //help build the article url //build the article url Sophos updates are failing with CAS OS1.2.4.1 upgradeSophos updates are failing after upgrading CAS-S400A1 device to CAS OS1.2.4.1.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/Sophos-updates-are-failing-with-CAS-OS1-2-4-1-upgradeTue May 12 22:01:04 GMT 2015Tue May 12 22:01:04 GMT 2015 //help build the article url //build the article url Prevent NTLM credentials from being forwarded to a malicious OCShttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000024584Thu Apr 23 15:20:00 GMT 2015Thu Apr 23 15:20:00 GMT 2015 //help build the article url //build the article url PacketShaper S series requires ME reset after upgrading to 11.3.After upgrading to 11.3, a measurement engine reset is required to ensure stability when accessing some reports.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/PacketShaper-S-series-requires-ME-reset-after-upgrading-to-11-3Tue Apr 14 22:23:47 GMT 2015Tue Apr 14 22:23:47 GMT 2015 //help build the article url //build the article url ProxySG and Director Management Consoles cannot load after Java updatehttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/000024402Wed Apr 01 17:17:46 GMT 2015Wed Apr 01 17:17:46 GMT 2015 //help build the article url //build the article url Director profile push causes ProxySG to reboot back to last known good version if availablehttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/Director-profile-push-causes-ProxySG-to-reboot-back-to-last-known-good-version-if-availableWed Oct 22 14:35:04 GMT 2014Wed Oct 22 14:35:04 GMT 2014 //help build the article url //build the article url Wrong configuration applied after upgrading to SGOS version 6http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/WrongconfigurationappliedafterupgradingtoSGOSversion6Wed Oct 01 12:33:48 GMT 2014Wed Oct 01 12:33:48 GMT 2014 //help build the article url //build the article url When downgrading the OS on a ProxyAV appliance, installing a version that is too old might render the box inoperable.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/WhendowngradingtheOSonaProxyAVapplianceinstallingaversionthatistoooldmightrendertheboxinoperableWed Oct 01 12:33:48 GMT 2014Wed Oct 01 12:33:48 GMT 2014 //help build the article url //build the article url Upgrading the PacketShaper's Bootloader to version 7.0http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/UpgradingthePacketShapersBootloadertoversion70Wed Oct 01 12:33:47 GMT 2014Wed Oct 01 12:33:47 GMT 2014 //help build the article url //build the article url Updated Hard Disk Drives for select models of the SG900 and SG9000http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/UpdatedHardDiskDrivesforselectmodelsoftheSG900andSG9000Wed Oct 01 12:33:47 GMT 2014Wed Oct 01 12:33:47 GMT 2014 //help build the article url //build the article url Regenerating a software license for ProxySG 300-5 and 9000-5/10/20 units adds an SSL-Proxy license; in some cases, this can cause SSL traffic to be blockedhttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/RegeneratingasoftwarelicenseforProxySG300-5and9000-51020unitsaddsanSSL-ProxylicenseinsomecasesthiscancauseSSLtraffictobeblockedWed Oct 01 12:33:41 GMT 2014Wed Oct 01 12:33:41 GMT 2014 //help build the article url //build the article url Oracle Java 7 Security Manager Bypass Vulnerability (CVE-2013-0422)http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/OracleJava7SecurityManagerBypassVulnerabilityCVE-2013-0422Wed Oct 01 12:33:37 GMT 2014Wed Oct 01 12:33:37 GMT 2014 //help build the article url //build the article url NICs unresponsive on new AV1200 (Rev.B), AV1400 (Rev.B), and AV2400 (Rev.B)http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/NICsunresponsiveonnewAV1200RevBAV1400RevBandAV2400RevBWed Oct 01 12:33:35 GMT 2014Wed Oct 01 12:33:35 GMT 2014 //help build the article url //build the article url Important BCAAA Updatehttp://bluecoat.force.com/knowledgebase/articles/Technical_Alert/ImportantBCAAAUpdateWed Oct 01 12:33:31 GMT 2014Wed Oct 01 12:33:31 GMT 2014 //help build the article url //build the article url 6.2.4.1 peers unable to communicate with manager running 6.2.3.x or older SGOS releases.http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/6241peersunabletocommunicatewithmanagerrunning623xorolderSGOSreleasesWed Oct 01 12:33:24 GMT 2014Wed Oct 01 12:33:24 GMT 2014 //help build the article url //build the article url "Heartbleed" fix available in AVOS3.5.1.301http://bluecoat.force.com/knowledgebase/articles/Technical_Alert/HeartbleedfixavailableinAVOS351301Tue Sep 30 13:19:54 GMT 2014Tue Sep 30 13:19:54 GMT 2014