How to remove the X-Bluecoat-Via header from a specific location in Cloud SWG

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

You need to remove the X-Bluecoat-Via header from a specific location in Cloud SWG (formerly known as WSS) so that this information is not transferred by the proxy. This article describes how to do this for Universal Policy Enforcement (UPE) configuration. If this needs to be done for Cloud SWG tenants managed via the Portal, the configuration change needs to be carried out by Symantec Technical Support.

Environment

Symantec Universal Policy Enforcement (UPE)/Management Center.

Cloud SWG.

Resolution

Please do the following:

1. Send Symantec Support a list of the Cloud SWG locations (IP addresses) that you want to be processed by the policy.
2. Symantec Support will return the client.location.id value assigned to these locations.
3. Once you have received the client.location.id values, the following CPL code needs to be entered in the CPL Layer in the Management Center:
   define condition BC_ocs_fix_broken_by_via_header
    client.location.id=yyyyyy
client.location.id=zzzzzz
end

<Proxy>
    condition=BC_ocs_fix_broken_by_via_header action.BC_ocs_fix_remove_X-Bluecoat-Via(yes)
4. If the WSS location IP changes, the client.location.id will also change so you will need to request the new values so that the policy matches.