Edge SWG (ProxySG) VA (Virtual Appliance) and ISG-Proxy license installation FAQ

Products

• SGVA
• SG-VA
• ISG Proxy

Issue/Introduction

Q1. Does the ProxySG VA or ISG-Proxy needs internet access to install license for the first time?

A. Yes, it needs an internet connection to communicate with the licensing server for retrieving initial Birth certificate also known as appliance key.

Q2. What are the Blue Coat licensing servers?

A. The following are the Blue Coat licensing servers: 

validation.es.bluecoat.com 
bto-services.es.bluecoat.com 
device-services.es.bluecoat.com 
download.bluecoat.com 
services.bluecoat.com 
abrca.bluecoat.com

Q3. Why ProxySG VA or ISG-Proxy needs constant communication with licensing servers?

A. To prevent licensing issues (duplicate serial numbers), the ProxySG VA or ISG-Proxy also communicates with https://validation.es.bluecoat.com. Communication attempts to https://validation.es.bluecoat.com occur every hour.  The license is suspended after 7 days if no communication can be made to https://validation.es.bluecoat.com. Once communication is restored, the license is un-suspended and the accumulated failure count starts are reset. it may take few hours for the warning message to disappear from the web UI, after the communication is restored.

Q4. Can I deploy the ProxySG VA or ISG-Proxy in a closed network or in proxy chaining deployment?

A. In a closed network or proxy chaining mode, the ProxySG VA or ISG-Proxy still needs a TCP connection over port 443 either directly or via the upstream proxy on the hosts mentioned above.

Note: Refer to the Secure Web Gateway Virtual Appliance Initial Configuration Guide for details on required configuration using forwarding host for ProxySG VA or ISG-Proxy in proxy chaining mode.

 

Cause

SWG VA can not access the required licensing server hosts.

Resolution

Ensure that the SWG VA has access to the hosts listed in this article.