
Blue Coat SG Appliance Release Notes
54
Health Checks
❐ Health check names are limited to 31 characters. If using the Management Console, the
characters icap_hc_ are automatically added to the prefix of the health check name,
making the useable number of characters even smaller. To use the full allotment of
characters, use the CLI. (B#58082a)
❐ Health Check notification e-mails are sent depending upon the event log threshold. If
the event log threshold is set to less than Informational, notification e-mails are not sent
for Websense off-box or manually created health checks. (B#53917a)
HTTPS
❐ When you open the Visual Policy Manager or Bandwidth Management pages in the
Management Console through HTTPS, you might see a security information dialog
warning about a mixture of secure and non-secure content. This is due to a link on the
page that allows you to download the Java Virtual Machine from Sun's Web site. All
communication with the ProxySG is encrypted and remains secure. Some versions of
the Sun Java Virtual Machine might also be unable to share credentials with the
browser, causing a dialog box to appear asking again for your username and
password. In these cases, re-enter the same credentials that you used to first access the
Proxy SG. (B#45449a)
❐ Creating HTTPS services on 255.255.255.255:443 can result in a service that cannot
be deleted. This should not prevent the creation of other valid HTTPS services on the
same port. (B#50384a)
❐ HTTPS Reverse Proxy: If a service for HTTPS reverse proxy is created on an IP:port,
the same port cannot be used for creation of TCP tunnel services. However, if a TCP
tunnel service is created on a specific port, an HTTPS reverse proxy service can be
created on the same IP and port. (B#54377a)
❐ HTTPS Reverse Proxy: When an HTTPS reverse proxy is created on IP 255.255.255.255,
it cannot be deleted. (B#54390a)
ICAP
❐ When enabling RESPMOD, cached JPG files are not refreshed when a PNC header is
received. (B#79404a, SR-2-44961061)
❐ Under certain configuration and load scenario, CPU consumption may be 10% higher
than it was in SGOS 4.1.3. (B#55771a)
❐ If the ProxySG is sending patience text, an ICAP error occurs while scanning the
content, and policy is configured to fail close or to deny for that ICAP error, the
ProxySG might not send a 421 error code to the client and client connection might
eventually time out. (B#55818a)
❐ If multiple clients request the same object within 10 seconds of completing a scan that
had resulted in an ICAP error and the object was cached because of policy, the object
might get re-scanned for subsequent requests, instead of using the previous scan result
for the next 10 seconds. (B#55925a)
❐ If you try to save a download by right-clicking the link but that download resulted in a
patience page, then the patience page response is saved rather than the actual contents
of the download. (B#56061a)
Comentarios a estos manuales