
Blue Coat SG Appliance Release Notes
34
HTTP Changes
SGOS 4.2.2 contains better HTTP response header parsing support.
This enhancement eliminates the limitations of previous releases:
❐ Response headers that are larger than approximately 8 KB were not parsed.
❐ Length of any individual header cannot be larger than 8 KB.
❐ Only up to 125 response headers were parsed.
❐ Response header continuation was not supported.
❐ HTTP compression level can now be controlled by policy.
ICAP Performance Enhancements
The max-cache-size dependency for scanning has been removed, resolving a number of
issues surrounding patience pages and improving performance. Among them:
❐ When the HTTPS proxy was enabled, the patience page did not show the progress
correctly.
❐ If a cached object contained a virus and was sent for a rescan, ProxySG still served it.
❐ Requests to some HTTPS sites were resulting in a 400 BAD request.
❐ The ProxySG gave a "Connection failure" error page for ICAP 500 Server error
responses.
❐ The ProxySG crashed when ICAP worker creation failed while scanning cached
content.
❐ Certain non-cacheable file sizes were not served when the patience page was enabled.
❐ The ProxySG was not maintaining persistent connections to the ICAP server.
❐ ICAP health checks were always failing with response timeout.
❐ FAIL_OPEN for scan_cached_object case did not work.
❐ A patience-page loop existed as expires headers set in the past overrode the four-hour
expiration on non-cacheable objects.
Internationalization--General Support
For management interfaces, the only character encodings supported are ASCII and UTF-8.
(ASCII is a subset of UTF-8.) This affects the CLI, the encoding of CPL source files,
exception pages, and access logs. Libraries such as Shift-JIS and Big5 (Chinese) are not
supported.
For proxy network traffic (such as HTTP requests from a client workstation and instant
messaging), a variety of different character encodings are supported, including Shift-JIS
and Big5 (Chinese).
Generally speaking, the Blue Coat internationalization feature provides support for:
❐ Non-ASCII user names, group names and passwords (in the most common cases
only).
❐ Exception pages.
❐ Non-ASCII instant messaging (in the common cases only).
❐ Director.
Comentarios a estos manuales