The proxy is unable to reach the DRTR servers used for Blue Coat Web Filter Dynamic Categorization

book

Article ID: 166976

calendar_today

Updated On:

Products

ProxySG Software - SGOS

Issue/Introduction

The proxy is unable to reach the DRTR servers used for Blue Coat Web Filter Dynamic Categorization
The proxy is being chained so that all requests are being forwarded to an upstream proxy.
The proxy is not using that forwarding chain and the proxy is going direct.

Resolution

SGOS does not use the configured forwarding policy to forward DRTR requests out to the Internet.  If you have a proxy hierarchy, the child proxy will attempt to contact the DRTR servers directly via its configured gateway(s) and not using the configured forwarding host(s).  If the proxy blocks the DRTR requests from the child proxy, dynamic categorization will not occur.  With older versions of SGOS, there isn't any way to work around the issue.  SGOS 4.2.x (verified in SGOS 4.2.7.1; may be in earlier releases of 4.2.x) and 5.2.x (verified in SGOS 5.2.4.8; may also exist in earlier versions of 5.2.x) have the ability to configure a forwarding target or SOCKS gateway target.  These forwarding targets are on the same page as the "Dynamic Categorization" tab.  This will allow the DRTR requests to be forwarded on to the parent ProxySG.
B#55621