12
Internet
SSLSSL
SSLSSL
Web Applications
Corporate Headquarters
Data Center
WAN Optimization “Concentrator” SSL Proxy
• Application Acceleration
• Malware Prevention
WAN Optimization “Branch” SSL Proxy
• Application Acceleration
• Malware Prevention
Branch Office
Figure 10 – Blue Coat ProxySG SSL WAN Optimization Solution
Blue Coat ProxySG appliances at the branch provide performance relief for backhauled Internet applications, even if they are
SSL-encrypted. With caching, compression, and protocol optimizations, Blue Coat MACH5 technology dramatically reduces
user wait times caused by long round trips to and from the organization’s web gateway while cutting bandwidth use by 80%
or more. Using bandwidth management, the organization can prioritize their SSL outbound traffic to optimize certain critical
sites and guarantee a minimum quality of service. Reducing rogue applications alone can result in significant bandwidth gains,
but more granular controls allow for sophisticated management techniques – for example changing application priorities at
month’s end, or making room for backups on crowded multi-protocol label switching (MPLS) links at night.
Putting ProxySG appliances at branch offices has additional benefits; by the time outsourced application data reaches the
secured Internet gateway, it is already optimized and compressed to minimize network load on that pipe as well. Adding
ProxySG appliances to the branch with ProxySG appliances at the gateway enables IT to have complete, policy-based control
over application delivery and security – even over applications and networks they don’t own.
By selectively opening SSL tunnels, the user’s expectation of privacy can be maintained while known-good or known-bad
applications can be silently accelerated or dropped, respectively. All without requiring that server certificates leave the
safety of the datacenter or sending insecure session requests to downstream appliances. The flexibility of Blue Coat’s WAN
optimization technology allows for unmatched sophistication in meeting quality of service mandates for internal applications.
Natively supporting not only HTTPS but also CIFS, MAPI and most streaming media, the ProxySG is well equipped for the
protocols that clog intra-company WANs.
Combining SSL session awareness, including facts about the source certificate such as who signed it, when it expires, and the
organization that issued it, with AAA (authentication, authorization, accounting) and PKI (public key infrastructure) integration
uniquely allows the Blue Coat solution to fully accelerate and control SSL traffic without breaking the SSL trust model.
Technology Primer: Secure Sockets Layer (SSL)
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels