Quick Start Guide

Advanced Secure Gateway: ASG-S400 Series

53 License the ASG-S400 Appliance

13 Unpack the Appliance 3 Verify the LEDs and LCD Display
After your ASG-S400 appliance is configured for network access, complete the installation by verifying
Unpack the shipment package and verify the contents of the box. To verify that the appliance has booted and is operational, check the following: network connectivity and licensing the appliance. The ASG-S400 relies on a base license, consisting of
the primary operating components of the Proxy and Content Analysis features, and add-on licenses
The Blue Coat ASG-S400 series appliance ships with the following components: Figure 3 shows the location of all the major control functions located on the front panel of the ASG- which includes optional elements, such as file inspection subscriptions and specialized Proxy features.
S400 series appliance. After the appliance boots up, the System Management LED should be Off
 Blue Coat ASG-S400 series appliance  Software License Agreement while the Power LED should alternate between amber and green, denoting an unconfigured state. Licensing the ASG is a multi-step process. You must first install the base license, activate and install the
Proxy licenses, and then activate and install the file inspection subscriptions. Keep in mind, you’ll need
 Two AC power cords  Safety and Regulatory Compliance Guide Internet connectivity to access the Blue Coat Licensing Portal (BCLP) to activate your optional add-ons.
 Null-modem serial cable  Quick Start Guide (this document)
To complete the ASG-S400 installation:
 Two / four post slide-rail kit  Rack mount ears w/ installation hardware 1. Verify that you can log in to the appliance via the Web browser. To log in to the appliance:
a. Enter the ASG-S400 IP address into your Web browser's Address or Location box using
the following format: https://ASG_ipaddress:8082.
b. Enter the user name and password specified during configuration to access the
management console. The management console loads within your browser window.
23 Connect the Cables 2. Activate the base license from the management console:
a. Navigate to the License page: Proxy > Maintenance > Licensing > Install
Blue Coat recommends that you connect the appliance and verify the LEDs and LCD display to b. Click Retrieve. The appliance automatically contacts the Blue Coat licensing server and
ensure functionality before rack mounting the appliance. installs the base license.
If you want to install the appliance into a rack before performing any configuration tasks, begin with 3. Activate optional Proxy licenses and/or file inspection subscriptions, if any were purchased:
6 Rack Mount the Appliance. a. Visit the Blue Coat Licensing Portal at: https://services.bluecoat.com and log in using your
BlueTouch Online credentials.
Note: Network cables are not included and must be supplied by the user. b. Enter an activation code provided in your e-fulfilment letter and click Next.
Note: Following the initial configuration, the System Management LED continues blinking amber until
c. Enter your appliance serial number, click Next and follow any on screen prompts to
Figure 1 shows a typical Blue Coat ASG-S400 network deployment: a valid license is applied to the appliance.
complete the activation.
d. Repeat 3b – 3c for each optional license and subscription you wish to activate.
After the appliance has been configured for network access, the LCD displays various system
4. Download and install the updated license:
statistics. You can use the left and right arrows to manually scroll through the statistics modes.
a. Navigate to the License page: Proxy > Maintenance > Licensing > Install
b. Click Retrieve. The appliance automatically contacts the Blue Coat licensing server and
installs the updated license.
5. To validate that all services are available, you must restart your appliance:
a. Navigate to Proxy > Maintenance > Tasks.
b. Select the Hardware and software radio button.
c. Click Restart now.
Note: The appliance can take up to 10 minutes to restart. DO NOT unplug the power
43 Perform Initial Configuration cables during the restart process as this can cause a corruption of the configuration.
The following installation assumes the network deployment shown in Figure 1 is in use. For more 6. Enable file inspection subscriptions, if any were purchased:
information, see the product guides at: a. Navigate to the Content Analysis License page: Content Analysis > System > Licensing.
https://bto.bluecoat.com/products/advanced-secure-gateway You must have the following network information on hand to perform initial configuration: Each licensable service shows the following details:
 Status: The availability of a service component and the expiration date.
 ASG-S400 IP address  Default Gateway IP address  Active: The activation status of the component.
b. Select a service component checkbox to activate it.
 Subnet mask  Primary DNS server IP address
c. Click Save Changes.
 Console password to access advanced  Admin password for authorizing access to the 7. To prepare the ASG-S400 for rack mounting, gracefully shutdown the appliance using the
commands in the CLI appliance shutdown command.
a. Access the ASG-S400 command-line interface (see 4 for more information).
To access the ASG-S400 command-line interface and run the initial configuration wizard:
b. When prompted, press 1 to access the CLI.
1. Confirm that a null-modem serial cable is connected from the ASG-S400 appliance to your c. Enter enable to access privileged commands.
workstation serial port. For cabling instructions, see 2 Connect the Cables.
d. Enter shutdown to turn off the appliance.
2. Open a terminal emulation program such as Microsoft HyperTerminal®, PuTTY, Tera Term, or
Procomm™. Important! Do not shut down the appliance using the switch or by removing the power cables!
3. Configure the terminal emulation software to the following settings: Abruptly removing power can result in irreparable data loss. Always use the shutdown command
Baud rate: 9600 bps Data bits: 8 Flow control: none
from the CLI to power down the appliance

Parity: none Stop bits: 1

To deploy your ASG-S400 appliance (Figure 2):
1. Remove the EULA (End User License Agreement) sticker located
on the rear of the appliance. Be aware that you are agreeing to
the terms and conditions of the EULA by removing the sticker and
installing the product.
2. Disconnect the existing LAN switch cable from the WAN router.
3. Connect the Ethernet cable from the LAN switch and plug it into the 2:1 port network interface on
the ASG-S400 appliance.
4. Connect an Ethernet cable from the WAN router to the 2:0 port network interface on the ASG-
S400 appliance. The interface auto-negotiates 10/100/1000 Base-T speed and duplex settings.
5. Connect a network cable between the SYS MGMT 0:0 port network interface and the router (or
switch) leading to the management network.
6. Connect a null-modem serial cable from the ASG-S400 appliance to a PC (or serial terminal).
This connection is used to perform initial configuration via a direct serial connection.
7. Connect the socket end of the enclosed power cords into the power supply inlets, and then
connect the plug into a power source. If the appliance does not automatically power on, switch
the appliance on by pressing the rear soft power switch and continue to .
For additional installation details and configuration options, see the
Advanced Secure Gateway documentation available at:
4. Power on the ASG-S400 appliance. After the appliance boots up, you will be prompted to press https://bto.bluecoat.com/products/advanced-secure-gateway
<Enter> three times to start the initial configuration wizard.
5. Press <Enter> three times. The configuration process begins.
6. Choose a configuration method:
 [Manual Setup] Select this method if you are configuring the ASG-S400 appliance without
Director (provides centralized management for ASG appliances).
 [Director-managed setup] Select this method if you are registering this ASG-S400 with
Director. You will need the Director appliance IP address and registration password.
7. Enter the network configuration parameters when prompted. If your ASG-S400 appliance is
connected to the network, the configuration wizard will attempt to verify DNS server addresses
and auto-detect link settings.

Note: This appliance retains memory of being turned off with the soft power switch. In such cases,
the soft power switch must be used to turn it back on after power is connected. However, if power is
disconnected while the appliance is on, it will automatically turn on when power is restored.

Flip over to complete the installation

 6 Rack Mount the Appliance 73 Next Steps
The slide-rail rack mounting kit included with the appliance allows the appliance to be installed in This section lists additional resources for the ASG-S400 appliance.
multiple configurations. This Quick Start Guide will show the tasks required to install the ASG-S400
series appliance into a four-post rack. Reference Documentation To access the ASG-S400 appliance reference documentation, visit:
https://bto.bluecoat.com/products/advanced-secure-gateway
Note: For comprehensive information on the slide-rail rack mounting kit and additional installation
options, see the S400 Series Maintenance and Upgrade WebGuide at: Hardware Documentation Blue Coat hardware document depository, to access visit:
https://bto.bluecoat.com/blue-coat-hardware-documentation https://bto.bluecoat.com/blue-coat-hardware-documentation
Answers to Frequently Blue Coat Knowledge Base, available at:
To ensure safety before you begin rack mounting the appliance, follow these instructions: Asked Questions https://bto.bluecoat.com/knowledgebase
1. Gracefully shutdown the appliance from the CLI and disconnect all cables.
Blue Coat User Community Blue Coat Support Forums, available at:
2. Read the Rack Mount Warnings section of the included Safety and Regulatory Compliance https://forums.bluecoat.com
Guide.
3. Take adequate safety and grounding measures to avoid creating an electric shock hazard and to Classroom and Web-based Blue Coat Training, available at:
prevent bodily injury. Training https://www.bluecoat.com/support/training
3. Mount the slide-rail assemblies into the four-post rack (Figure 7): Deployment Planning and Blue Coat Professional Services, available at:
To install the ASG-S400 into a four-post equipment rack, you need the following items: a. Place the assembled slide-rail against the equipment rack and attach the Rail_A front bracket Consultation https://www.bluecoat.com/support/consulting-services
to the outside face of the rack using (2) rack screws. Do not fully tighten! The Rail_A front Technical Support Blue Coat Support, available at:
 M4 Nut driver / Adjustable wrench  #2 Phillips head screwdriver bracket will be tightened after the appliance is secured in step 4c. https://www.bluecoat.com/support/overview
 Equipment rack specific screws (please refer to your equipment rack guide for more information) b. Extend (or retract) Rail_C to align the mounting face of the bracket against the outside face of
the equipment rack and attach with (2) rail screws. Do not fully tighten! The Rail_C bracket will
be tightened after the appliance is secured in step 4c.
c. Tighten the Rail_C side mounting screws. 83 Troubleshooting
d. Repeat steps 3a-3c for the other side. Ensure both slide-rail assemblies are at the same
This section describes how to troubleshoot several hardware problems.
height in the rack.
Problem: The system does not power up.
Solution: Check the power cords and verify that the outlet is receiving power.

Problem: The System and Power LEDs are green, but there is no network connectivity.
Solution: Check the network connections to verify that they are not loose. Otherwise, the problem might
be a bad network cable or an issue with the router/switch.
Problem: The System Management LED blinks amber even after the appliance has finished booting.
Solution: If the appliance does not have a valid license installed, the System Management LED blinks
amber.
Note:  You must remove the inner rail from Rail_A before starting the installation. For more infor-
mation on this task, refer to the S400 Series Maintenance and Upgrade WebGuide.
 Rail_B is not used in the four-post slide-rail installation. These items should be set aside
for future use. Service Information
How to Contact Support — For the current list of regional customer support phone numbers, go to:
http://www.bluecoat.com/support/technical-support/contact-service-support
When contacting Blue Coat Systems for technical phone support or to set up an RMA, be prepared to
To install the ASG-S400 appliance into a four-post equipment rack, follow the steps below: provide your serial number to verify entitlement. If you do not have your serial number, supply Blue Coat
1. Attach the inner rail to the appliance (Figure 5): with your Support Contract Number, which can be found on your Support Contract Certificate.
a. Align the inner rail to the four mounting posts on the side of the chassis and lock the rail into position If you have purchased a Support Contract but have not received a Support Contract Certificate, go to:
by sliding it towards the rear of the appliance. Ensure that all four mounting posts snap into the slots http://www.bluecoat.com/support/technical-support/contact-service-support
on the inner rail. BlueTouch Online — BlueTouch Online https://bto.bluecoat.com allows you to create new technical
b. Install (1) M3 screw to secure the inner rail to the appliance. support cases and review and comment on open cases at any time. You also have access to exclusive
Blue Coat support materials, installation notes, and updates.
c. Align the retaining ear against the raised mounting posts and install (2) M3L4 screws to secure the
rack mount ear to the appliance. Ensure that the captive screw faces the front. To obtain a BlueTouch Online login, go to:
4. Secure the ASG-S400 appliance into the equipment rack (Figure 8): https://www.bluecoat.com/forms/contact
d. Repeat steps 1a-1c for the opposite inner rail.
a. Align the grooves on the inner rail with those on Rail_A, and slide the appliance half-way Blue Coat Support Offerings — For a list, see http://www.bluecoat.com/support/
into the rack.
b. Depress the gray tab on the inner rail to slide the appliance fully into the equipment rack. Americas: Rest of the World:
c. Withdraw the appliance to access the rack mounting screws and tighten the Rail_A and Rail_C Blue Coat Systems Inc. Blue Coat Systems International SARL
rack mounting screws that secure the slide-rails to the equipment rack (See Figure 7, inset a 384 Santa Trinita Ave 3a Route des Arsenaux
and b). Sunnyvale, CA 94085 1700 Fribourg, Switzerland

d. Push the appliance fully into the equipment rack.

e. Tighten the thumbscrews on the retaining ears to prevent the unit from sliding out of the
equipment rack. Recycling Information
RECYCLE YOUR OLD BLUE COAT APPLIANCE! — Blue Coat offers an easy and sustainable way to
recycle your decommissioned Blue Coat appliances. Simply use your new shipping box to send us your
old appliance, absolutely free of charge. For details and shipping information, please visit:
http://www.bluecoat.com/support/recycling-blue-coat-products

WHY RECYCLE? — According to the latest figures on E-Waste and Recycling from the Environmental
Protection Agency (EPA), the recycling rate for electronic waste in the United States is under 20%. The
remaining 80% of waste products end up in landfills or incinerators.
Without proper recycling, toxic chemicals and other hazardous materials pose serious environmental and
health risks. By offering a free and easy-to-use Product Take-Back program to its customers, Blue Coat
enables businesses to efficiently and responsibly dispose of their used technology. Find out how!

1. Fast and easy to use

Use your new appliance carton to ship us your old technology.
2. Assemble the slide-rails (Figure 6): 2. Protects people and the planet
Responsible technology recycling is good for business and the environment.
a. Loosely attach Rail_C to Rail_A. The precise attachment location depends on how far Rail_C must 3. Free for our customers
be extended (or retracted) to fit your specific equipment rack model. It might be necessary to We cover the costs, including shipping.
remove Rail_C from Rail_A to determine the proper installation length for your network rack.
Temporarily mount Rail_C to Rail_A by doing the following: To take advantage of this offer, visit http://www.bluecoat.com/support/recycling-blue-coat-products and
follow the simple instructions.
1. Approximate the slide-rail installation length by lining up the front and rear mounting faces
against the equipment rail. Be sure that the slide-rail mounting faces are on the outside of the
equipment rack vertical rails. To view an online version of this document, go to:
https://bto.bluecoat.com/products/advanced-secure-gateway
2. Temporarily install (3) M3 screws through the slotted hole located on Rail_C after the
installation length has been determined. Be sure to install the screws equidistantly to
distribute the loads placed on the rail.
b. Repeat step 2a for the opposite slide-rail.
5. Reconnect the cables. Follow the instructions in 2 Connect the Cables

© 2015 Blue Coat Systems, Inc. All rights reserved. BLUE COAT, PROXYSG, PACKETSHAPER, CACHEFLOW, INTELLIGENCECENTER, CACHEOS, CACHEPULSE, CROSSBEAM, K9, DRTR, MACH5, PACKETWISE, POLICYCENTER, PROXYAV, PROXYCLIENT, SGOS, WEBPULSE, SOLERA NETWORKS, DEEPSEE, DS APPLIANCE, SEE EVERYTHING. KNOW EVERYTHING., SECURITY EMPOWERS BUSINESS, BLUETOUCH, the Blue Coat shield, K9, and Solera Networks logos and other Blue Coat logos are registered trademarks or trademarks of Blue Coat Systems, Inc. or its affiliates in
the U.S. and certain other countries. This list may not be complete, and the absence of a trademark from this list does not mean it is not a trademark of Blue Coat or that Blue Coat has stopped using the trademark. All other trademarks mentioned in this document owned by third parties are the property of their respective owners. This document is for informational purposes only.

BLUE COAT MAKES NO WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT. BLUE COAT PRODUCTS, TECHNICAL SERVICES, AND ANY OTHER TECHNICAL DATA REFERENCED IN THIS DOCUMENT ARE SUBJECT TO U.S. EXPORT CONTROL AND SANCTIONS LAWS, REGULATIONS AND REQUIREMENTS, AND MAY BE SUBJECT TO EXPORT OR IMPORT REGULATIONS IN OTHER COUNTRIES. YOU AGREE TO COMPLY STRICTLY WITH THESE LAWS, REGULATIONS AND REQUIREMENTS, AND
ACKNOWLEDGE THAT YOU HAVE THE RESPONSIBILITY TO OBTAIN ANY LICENSES, PERMITS OR OTHER APPROVALS THAT MAY BE REQUIRED IN ORDER TO EXPORT, RE-EXPORT, TRANSFER IN COUNTRY OR IMPORT AFTER DELIVERY TO YOU.