[ALERT] Upgrade of the Edge SWG (formerly ProxySG) and ASG Trust Package - May 7, 2024

Products

• ProxySG Software - SGOS

Issue/Introduction

Severity

Information

Description

Refer to the attached document below for a complete list of upgrades to the EdgeSWG and Advanced Secure Gateway trust package.

EdgeSWG and Advanced Secure Gateway received trust package upgrades on May 7, 2024.

Expired certificates can stay in the trust package as long as a valid duplicate certificate is served when available.  Symantec monitors the trust package to ensure that only expired certificates without a duplicate certificate are left in the trust package.

Resolution

Action Required

Download the latest trust package using one of the following methods.

Method 1 - Download the Trust Package from Symantec Servers

To download the trust package manually, use the following CLI command:

#load trust-package
    Downloading from "http://appliance.bluecoat.com/sgos/trust_package.bctp"
    The trust package has been successfully downloaded.
    trust package successfully installed

The event log contains specific entries for certificate store and certificate list updates provided by the trust package.

If the trust package download URL configured on the appliance is not http://appliance.bluecoat.com/sgos/trust_package.bctp, you can change it as follows:

>enable
#configure terminal
#(config)security trust-package download-path http://appliance.bluecoat.com/sgos/trust_package.bctp

Method 2 - Update the Trust Package in a Closed Environment

In a closed environment, you must manually download the trust package and host it on a file server that the appliance can access. Then, on the appliance, specify this file server location in the #load trust-package command: 

1. Download the trust package from http://appliance.bluecoat.com/sgos/trust_package.bctp.
   If clicking the previous link does not initiate the download, right-click the link and select Save As to download the file.
2. Save the trust package to a location in the local network that the appliance can access via HTTP.
3. Specify the download URL and load the trust package:

# (config) security trust-package download-path <local_URL>
  ok
#(config) exit
# load trust-package
  Downloading from "http://your_domain/sgos/trust_package.bctp"
    The trust package has been successfully downloaded.
    trust package successfully installed