My ProxySG appliance does not have direct access to the Internet and the health check for the DRTR is failing.
If you have an gateway ProxySG appliance that does not have access to the Internet, this might be the reason that the health check for the DRTR service is failing. You can verify that by running a packet capture using the Management console.
Select Maintenance > Service Information > Packet Capture.
Set the filter to be 'host sp.cwfservice.net' for SGOS 6.5 and 'webpulse.es.bluecoat.com' for SGOS 6.6.
Start the PCAP.
Run the health check for the DRTR service from Configuration > Health Check> General and click Test Now.
Stop the PCAP and open the file with Wireshark. You will see SYN packets with no replies going from the ProxySG appliance.
To solve this issue:
You must configure a forward proxy in Configuration > Forwarding > Forwarding Hosts.
Then select Configuration > Content Filter > Blue Coat WebFilter > Dynamic Categorization Enabled.
In the WebPulse Protocol > Forwarding target, select the forwarding upstream proxy that you previously configured.
Imported Document ID: 000009675
Subscribing will provide email updates when this Article is updated. Login is required.