ProxySG & Advanced Secure Gateway

 View Only
  • 1.  BCWF License Expiry affects

    Posted Feb 10, 2023 05:28 PM

    Hi all,

    We ae currently running a project where we have purchased 4 S410's, we are building out 8 virtual machines on these devices, 6 of the virtual machines will directly replace 6 physical Bluecoat devices (Configs ported over) ad 2 VM's will be new devices.

    4our physical devices had licenses that were due to expire last year at the end of March, these licenses were extended so that we would have time to move across to the new virtual machines. Unfortunately our order was placed in January 2022 and the hardware was not delivered until September. We started to build the devices and we encountered issue after issue. e.g. unable to pull down application images via proxy, finding out SNMPV3 traps don't work, all of these issues have delayed our project. 

    We are almost at a stage where we wanted to start adding the VM's into the environment to test, however we have now encountered more issues whilst testing with the SNMP reporting. When we pull one of the PSU's there are no alerts or traps sent. Because of the issues with the alerting the customer doesn't feel conformable with us deploying the VM's until the issue is resolved.

    Our issue is now that we are slightly concerned about the licenses on the Physical kit. we do not want to be in a position where this kit stops working and we affect the service for our customer. So we are looking for some clarification if possible.

    We have the BCWF service that is showing it is due to expire on the 28th April, the customer is concerned that this is going to have an impact on service. We are currently running a reverse proxy solution so I don't believe that the BCWF is used but I would like some confirmation. If this expires am I correct in thinking this will not stop any services from running? Does the expiry simply mean that the web filter will not be updated?

    Any help with this would be appreciated 

     



  • 2.  RE: BCWF License Expiry affects

    Broadcom Employee
    Posted Feb 10, 2023 06:29 PM

    Hi James,

    I am sorry to hear about the obstacles in your project. BCWF is Web Filter and that is the website categories database (i.e. bbc.co.uk is News). It is less common to see BCWF used in a reverse proxy deployment, but you would really have to double check the policy to see if any "Category" objects are being used. This KB details the behavior changes that happen if a BCWF entitlement expires.

    I hope that helps




  • 3.  RE: BCWF License Expiry affects

    Posted Feb 12, 2023 02:45 PM

    Hi James,

    you are right, the BCWF database will not update after the license expiration date. The old database will be used until it expires. If I remember correctly, this is after 30 days. And the DRTR rating service will not work anymore.

    Best regards, Matthias




  • 4.  RE: BCWF License Expiry affects

    Posted Feb 24, 2023 08:28 AM

    Agree with @Matthias Geiser , only use of any filtering in a REVPXY deployment would maybe be the use of BCIS-AS and the Geolocation use if you wanted to restrict by Geolocation association of an incoming request, assuming it was not NAT'd before Edge SWG saw the source.  

    The note that "SNMPV3 traps don't work" is concerning, is this a Known Issue with that version of SGOS?  I'm surprised this wasn't discovered by Engineering on that SGOS version, but I would advise looking to make sure future Release Notes don't have that resolved in a newer version.



    ------------------------------
    Providing you Premier Partner support via Accredited Training, Professional Services, Consulting Services, Partner support for products with full staff of Broadcom Knights.
    Looking for support and want the top versed individuals to assist you? Email sales@braxtongrant.com and let's start a conversation on how we can make you successful. Award Winning North America Symantec Knight Partner of the Year for 2021.
    ~~##Groundbreaking Expert Advantage Partner using CA Automic Automation for Automated Policy Rule Implementation with BSG Symantec Products! Reach out and ask me how to get your demo with us on this One Of A Kind Integration!##~~
    ------------------------------