Proxy SG Virtual Appliance (SGVA and SG-VA) license installation FAQ
search cancel

Proxy SG Virtual Appliance (SGVA and SG-VA) license installation FAQ

book

Article ID: 166874

calendar_today

Updated On:

Products

SGVA SG-VA ISG Proxy

Issue/Introduction

Q1. Does the SWG VA appliance need internet access to install license for the first time?

A. Yes, it needs an internet connection to communicate with the licensing server for retrieving initial Birth certificate also known as appliance key.

Q2. What are the Blue Coat licensing servers?

A. The following are the Blue Coat licensing servers: 

validation.es.bluecoat.com 
bto-services.es.bluecoat.com 
device-services.es.bluecoat.com 
download.bluecoat.com 
services.bluecoat.com 
abrca.bluecoat.com

Q3. Why SWG VA needs constant communication with licensing servers?

A. To prevent licensing issues (duplicate serial numbers), the SWG VA also communicates with https://validation.es.bluecoat.com. Communication attempts to https://validation.es.bluecoat.com occur every hour.  The license is suspended after 7 days if no communication can be made to https://validation.es.bluecoat.com. Once communication is restored, the license is un-suspended and the accumulated failure count starts are reset. it may take few hours for the warning message to disappear from the web UI, after the communication is restored.

Q4. Can I deploy the SWG VA in a closed network or in proxy chaining deployment?

A. In a closed network or proxy chaining mode, the SWG VA still needs a TCP connection over port 443 either directly or via the upstream proxy on the hosts mentioned above.

Note: Refer to the Secure Web Gateway Virtual Appliance Initial Configuration Guide for details on required configuration using forwarding host for SWG VA in proxy chaining mode.

 

Cause

SWG VA can not access the required licensing server hosts.

Resolution

Ensure that the SWG VA has access to the hosts listed in this article.