ProxyAV 510 Series
The Blue Coat AV510 Series is a purpose-built solution designed for simple integration with Blue Coat SG810 and SG510 series solutions for medium enterprise or distributed environments providing scalable performance with a choice of antivirus engines.
- Blue Coat AV510 Datasheet 0.37MB
- Blue Coat Overview Brochure 0.76MB
The Blue Coat AV510 (AV510) enables organizations to scan for viruses, worms, spyware, ‘bots and trojans entering through Web-based backdoors, at wire-speed, including:
- Personal Web email accounts where a majority of viruses and worms propagate
- Browser based file downloads that bypass existing virus scanning defenses
- SSL-encrypted malware
- Spyware Trojans, downloaders, ‘bots, and root-kits
Traditional, Web anti-virus gateways often lack scalability and performance for HTTP, HTTPS and FTP scanning, leaving desktops to defend themselves. The AV510 combined with a Blue Coat SG Appliance provides a proven record of enterprise robustness for effective virus scanning, plus complete visibility and control of enterprise Web communications.
The AV510 is a purpose-built solution designed for quick integration with the Blue Coat SG 810 for deployment in medium enterprise or distributed environments. Heuristic trojan scanning can also prevent many spyware variants. It provides fast, low-latency scanning performance and defense in depth via a choice of antivirus engines from Kaspersky, Sophos, McAfee, Ahn Lab and Panda.
Scalability and PerformancePairing the Blue Coat AV with the Blue Coat SG provides significant advantages for high-speed Web virus scanning that standalone systems cannot match, such as:
- Blue Coat SG processes Web objects at wire speed with integrated caching (up to 400 Mbps, 7 msec latency)
- Blue Coat AV only scans Web objects forwarded from the Blue Coat SG for improved performance
- Blue Coat AV focuses CPU processing on virus scanning using heuristics to maximize throughput
- Blue Coat AV provides load balancing and clustering of multiple Blue Coat AV appliances for enterprise scalability
- Granular policies and method-level controls in the Blue Coat SG stop worm outbreaks where virus signatures fall short (e.g., spIM buddylink)
- Active/active bridging provides failover support on the Blue Coat SG and allows the addition of multiple Blue Coat AV appliances for future growth
- Enhanced processing architecture
The Blue Coat solution means less hardware, high performance virus scanning, and granular control of Web communications. The Blue Coat AV with Blue Coat SG provides unmatched visibility, control, and scalability in an integrated system.
Layered SecurityRecent virus and worm outbreaks, spyware, and the increase in browser-based attacks show the importance of a layered security strategy provided by:
- Choice of antivirus engine with automated updates on the AV510, allowing a layered virus scanning strategy with "Vendor A" for network scanning and "Vendor B" for desktops, servers and gateways
- Support for Kaspersky, Sophos, Panda, Ahn Lab and McAfee anti-virus scanning engines
- Option to scan for malware inside encrypted SSL traffic including webmail attachments, anonymizer sessions, HTTPS hacker sites
- Utilizing the Blue Coat SG for control over Web communications for both outbound requests and content replies to provide added protection beyond virus signatures and patterns
- Implementing three key methods to control Web communications - the Blue Coat SG controls "transport" and "content", while the AV 510 provides "signatures"
- Enforcing the Blue Coat SG policies to control Web communications upon outbreaks and before virus signatures are available
- AV510 allows heuristic scanning of new and unknown spyware Trojans (Kaspersky or Panda recommended)
- Blue Coat SG allows blocking all unauthorized drive-by downloaders (spyware’s preferred vector)
- Blue Coat SG allows blocking many exploits used by spyware via policy updates
- Blue Coat SG allows blocking spoofed files with non-executable extensions, but executable code in the header
- Blue Coat SG allows blocking potential spyware downloads from 2 Million+ known spyware domains and sites at high risk of downloading spyware…regardless of how new their spyware code is. Page views are still permitted to maximize business usefulness of Web.
- Blue Coat SG with Blue Coat Web Filter™ includes Dynamic Real Time Rating™ to categorize new objectionable sites at high risk of having spyware (e.g., porn sites) in less than 200 milliseconds
- All of the above can be applied to spyware attempting to enter via encrypted SSL tunnels
The AV510 is optimized for integration with Blue Coat SG as a complete system, through the following:
- Purpose-built appliance solutions from a single vendor; designed, tested and manufactured for compatibility
- Default communications, settings, and connection threads between the Blue Coat SG and the AV510 are optimized for superior performance
- Virus updates to the AV510 are automated with definable time frequency settings, and cached content is automatically cleared with each update
- Administrators can define default or custom locations for signatures and virus engine updates, and configure behavior of AV510 upon license expiration
- Configurable options for scanning files include: set time-out duration, drop file if errors in scanning occur, and define trusted sites
- Heuristics fingerprint recurring files as infected or clean for non-cacheable content to improve efficiency
- Administrators can apply allow/deny lists with extensions along with file size and content type restrictions
- Customized alerts can notify administrators when a virus is found, AV updates are successful, AV updates fail, subscriptions expire, files are dropped, or files pass without scanning
- AV510 log files can be customized using standard logging formats and sent off-box via TCP or UDP for processing
- Health checks from Blue Coat SG to AV510 verify status and availability of appliances
- New firmware updates and release notes are sent to AV510 for administrator approval and installation
Integrated System Solution
The combination of Blue Coat SG + Blue Coat AV provides scalable performance with control over transport and Web content with integrated virus scanning. Virus engines and signatures are only one part of Web content control. New worms and trojans are using IM and Web spam to propagate with new techniques always on the horizon. For the first time, Web communication controls and Web virus scanning work together using Blue Coat solutions.
