Page 1

01 Unpack the ApplianceVerify the contents of the shipping package for the ProxySG appliance.

SG S200 SG S400 SG S500

AC power cords (number included) 1 2 2

Grounding hardware √

Null-modem serial cable √ √ √

Two/four post slide-rail kit Optional √ √

Rack-mount ears √ √

Safety and Regulatory Compliance Guide √ √ √

Quick Start Guide (this document) √ √ √

Software License Agreement √ √ √

Hardware Warranty √ √ √

02 Connect CablesSymantec recommends plugging in cables, verifying LEDs, and configuring and licensing the appliance before rack-mounting. If you would rather rack-mount the appliance before performing configuration tasks, skip to Step 6—Rack-Mount the Appliance.

The following procedure describes a typical in-line deployment for SG S200, SG S400, and SG S500 appliances (as shown in the above illustration). For information on other deployments, see the First Steps WebGuide at: http://www.symantec.com/docs/DOC9779

Note: Network cables are not included with the appliance. Make sure to use only straight-through Ethernet cables. For 1000Base-T operation, Symantec recommends Category 5E cables or better (Category 6 or 6A) for distances of 330 feet (100 meters).

To deploy the appliance and connect its cables:

a. Disconnect the Ethernet cable (if there is one) between the LAN switch and WAN router.

b. Connect the appliance to the LAN switch with a network cable:

o For SG S200 and SG S400 appliances, connect the 2:1 port to the LAN switch.

o For SG S500 appliances, connect the 1:1 port to the LAN switch.

o The appliance auto-negotiates 10/100/1000 Base-T speed and duplex settings.

c. Connect the appliance to the WAN router with a network cable:

o For SG S200 and SG S400 appliances, connect the 2:0 port to the WAN router.

o For SG S500 appliances, connect the 1:0 port to the WAN router.

d. Connect the appliance’s DB9 serial port to a serial terminal or workstation with terminal emulation software. Use the included null-modem cable. The serial connection is used to perform the appliance’s initial configuration.

e. For SG S500 appliances, attach the lug-equipped end of the included grounding wire (10 AWG) to both grounding studs on the appliance, securing it with the star washers and M5 nuts. Attach the other end of the grounding wire to a proper earth-ground.

f. Connect the included AC power cord to the appliance’s power inlet on the rear panel. Connect the other end of the power cord to a power source. If the appliance has a second (redundant) power supply, connect it as well.

03 Power on the Appliance and Verify LEDsTo verify the appliance is operational:

a. Confirm the appliance’s power cords are securely connected to a power source.

b. If the appliance does not automatically power on, press the rear soft power switch.

Note: The state of the appliance’s soft power switch (on or off) is retained when power is removed. This may necessitate pressing the power switch when reapplying power to the appliance.

c. As the appliance boots, verify the following:

o The Power LED turns amber.

o Near the end of the boot cycle, the Power LED alternates between amber and green, indicating an unconfigured state.

o Following the initial configuration (see Step 4), the Power LED turns green. In addition, the LCD displays system statistics, which can be scrolled through with the Left/Right Arrows.

The front-panel LEDs indicate the following states::

o Power LED (•) Off: Powered off (•) Amber: Booting (•) Amber/green alternating: Unconfigured

(•) Green: Powered on and configured o Sys Status LED (•) Off: No status

(•) Green: Healthy (•) Amber: Warning (*) Amber blinking: Critical (or not licensed)

04 Perform the Initial ConfigurationYou must have the following network information to initialize the appliance:

o Appliance IP address o Link settings (speed and duplex)

o Primary DNS server IP address o Admin ID and password

o Default Gateway IP address o Director IP address (if using Director)

o Subnet mask

To perform the initial configuration for the appliance:

a. Confirm the appliance’s DB9 serial port is connected to a serial terminal or workstation with terminal emulation software.

b. Open a terminal emulation program such as Microsoft HyperTerminal®, PuTTY, Tera Term, or ProComm™.

c. Configure the terminal emulation software to use the following settings:

o Baud rate: 9600 bps o Data bits: 1

o Parity: none o Stops bits: 8

o Flow control: none

d. Power on the appliance (if it is not already powered on) and, when prompted, press Enter three times.

e. Select how the appliance will be configured:

o Manual Setup: Configures the appliance with the Initial Configuration Wizard.

o Director-Managed Setup: Configures the application with Director. You will need the Director IP address and registration password for this option. For more information, refer to the manufacturer’s instructions included with Director.

f. Select how the appliance will be licensed:

o Caching Proxy: The appliance will be deployed with a Mach5 license, which enables the Sky Management Console, a simplified web interface that provides WAN acceleration and reporting. This option requires that you specify one of the following deployments:

• Physically in-path

• Virtually in-path with WCCP

o Forward Proxy: Filters traffic inside the network, allowing users to browse the Internet through the proxy.

o Reverse Proxy: Directs traffic to web application servers inside the network, while protecting them from threats.

g. When prompted, enter network configuration parameters. If the appliance is connected to a network, the Initial Configuration Wizard attempts to verify the DNS server address and auto-detect link settings.

Warning: Symantec recommends assigning each administrator a unique user ID and password and storing this information in a secure location. For more information, see the SGOS Administration Guide available at: https://support.symantec.com/en_US/Documentation.html

Note: Following the initial configuration, the System Status LED blinks amber, indicating the appliance has not yet been licensed (see Step 5).

05 License the ApplianceAfter the appliance is configured for network access, complete the installation by licensing the appliance. The ProxySG appliance relies on a base license that includes the primary operating components of the proxy, and add-on licenses that include optional components, such as GeoLocation, Web Application Firewall, and WebFilter.

To license the appliance:

a. Open a browser and enter the appliance’s IP address and port number. For example, an IP address of 192.168.2.42 with a port number of 8082 (the default) translates to the URL: https://192.168.2.42:8082

b. When prompted, enter the administrator User ID and Password previously specified during the initial configuration. The Management Console opens.

c. Activate the base license:

o In the Management Console, navigate to the Maintenance > Licensing > Install tab.

o Click Retrieve. The appliance contacts the Symantec licensing server and the base license is installed.

d. Activate the add-on licenses, if any were purchased:

o Go to https://support.symantec.com/ and log in with MySymantec credentials.

o Choose Licensing > Network Protection (Blue Coat) Licensing.

o Enter the Activation Code included in your e-fulfilment letter and click Next.

o Enter the appliance’s serial number and click Next.

o Follow the on-screen prompts to complete the activation.

o Repeat these steps to install any additional add-on licenses.

e. Download and install the updated license:

o In the Management Console, navigate to the Maintenance > Licensing > Install tab.

o Click Retrieve. The appliance contacts the Symantec licensing server and the updated license is installed.

Quick Start GuideProxySG S200, S400, S500

RouterSwitch

Main SiteLAN

ProxySG Appliance

http://www.symantec.com/docs/DOC9779https://support.symantec.com/en_US/Documentation.htmlhttps://support.symantec.com/

Copyright © 2017 Symantec Corp. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo, Blue Coat, and the Blue Coat logo are trademarks or registered trademarks of Symantec Corp. or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice. Part Number: 231-03314 Rev A.0

THE DOCUMENTATION IS PROVIDED “AS IS” AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. SYMANTEC CORPORATION PRODUCTS, TECHNICAL SERVICES, AND ANY OTHER TECHNICAL DATA REFERENCED IN THIS DOCUMENT ARE SUBJECT TO U.S. EXPORT CONTROL AND SANCTIONS LAWS, REGULATIONS AND REQUIREMENTS, AND MAY BE SUBJECT TO EXPORT OR IMPORT REGULATIONS IN OTHER COUNTRIES. YOU AGREE TO COMPLY STRICTLY WITH THESE LAWS, REGULATIONS AND REQUIREMENTS, AND ACKNOWLEDGE THAT YOU HAVE THE RESPONSIBILITY TO OBTAIN ANY LICENSES, PERMITS OR OTHER APPROVALS THAT MAY BE REQUIRED IN ORDER TO EXPORT, RE-EXPORT, TRANSFER IN COUNTRY OR IMPORT AFTER DELIVERY TO YOU.

Page 2SG S200, SG S400, SG S500 Quick Start Guide

06 Rack-Mount the ApplianceThe slide-rail mounting kit included with the SG S400 and SG S500 appliances (available as an option for SG S200 appliances) allows the appliance to be rack-mounted in a two- or -four-post equipment rack. The slide-rail kit includes the following parts:

Note: To rack-mount the appliance, you may need an M4 nut driver or adjustable wrench, #2 Phillips head screwdriver, and rack screws.

Note: The following procedure documents how to install the appliance in a four-post equipment rack. For comprehensive information on rack-mounting the appliance, including other configurations, see the S-Series Maintenance and Upgrade Guide at: http://www.symantec.com/docs/DOC9795

To install the appliance in a four-post equipment rack:

a. Disassemble the two slide-rail assemblies:

o Fully extend each slide-rail by sliding out the inner rails until they reach the stop.

o Release the white slide latches (toward the rear of the inner rails) and slide the inner rails all the way out.

o Slide-rails are symmetrical and can be used with either side of the chassis.

b. Attach the two inner rails to the appliance:

o Align each inner rail to the mounting posts on each side of the chassis. Slide the rail toward either the front (SG S200 and SG S400) or rear (SG S500) of the chassis until each of the mounting posts snap into place.

o Secure the inner rails to the appliance with M3 screws:

• For SG S200 and SG S400 appliances, use one M3 screw in the center of each rail.

• For SG S500 appliances, use two M3 screws in each rail.

c. For SG S200 and SG S400 appliances, install the two rack ears. Align them with the mounting posts on the chassis sides near the front of the appliance and secure them with the included fasteners.

d. Assemble the two slide-rails and install them in the rack:

o Loosely attach Rail_C to Rail_A. Secure the rails with three M3 screws inserted through the slot in Rail_C and screwed into three holes in Rail_A. Make sure the screws are equidistant from each other so the load will be evenly distributed on the rail. Do not yet fully tighten the screws.

Note: The precise attachment location of the screws will depend on how far Rail_C will extend or retract to fit the rack. It may be necessary to remove Rail_C from Rail_A to determine the proper installation length.

o Install the assembled slide-rails in the rack:

• Secure the front bracket for Rail_A to the outside front of the rack using two rack screws. Do not yet fully tighten the screws. You will do so after the appliance is installed in the rack.

• Extend or retract Rail_C to align the rear bracket with the outside rear of the rack. Secure the bracket with two M3 screws. Do not yet fully tighten the screws. You will do so after the appliance is installed in the rack.

• Tighten the side-mounting screws for Rail_C.

• Verify the slide-rail assemblies are installed at the same rack eight.

e. Install the appliance in the rack:

o Align the inner rails attached to the appliance with the slide-rails in the rack and slide the appliance half-way into the track.

o Press the gray locking tabs on the inner rails to slide the appliance all the way into the rack.

o Slide the appliance out of the rack, far enough to access the rack screws. Fully tighten the rack screws for the front and rear brackets to secure the slide-rails to the rack.

o Gently push the appliance all the way to the back of the rack and tighten the thumbscrews on the retaining ears to prevent the appliance from sliding out.

f. Reconnect the cables as documented in Step 2—Connect Cables and verify the appliance is functioning as in Step 3—Power On the Appliance and Verify LEDs.

Technical Support o Contact Information

https://support.symantec.com/en_US/contact-support.html

o MySymantec https://www.mysymantec.com

DocumentationProxySG First Steps WebGuide

o http://www.symantec.com/docs/DOC9779

Appliance Documentation o S-Series Maintenance and Upgrade Guide

http://www.symantec.com/docs/DOC9795

o S200 Series Safety and Regulatory Compliance Guide http://www.symantec.com/docs/DOC10311

o S400 Series Safety and Regulatory Compliance Guide http://www.symantec.com/docs/DOC9996

o S500 Series Safety and Regulatory Compliance Guide http://www.symantec.com/docs/DOC10248

CAUTION: Before rack-mounting the appliance:

o Power off the appliance and disconnect all cables.

o Verify that the weight of the system does not exceed the rack’s fully populated weight limit. For more information, refer to the manufacturer’s instructions included with the rack.

o For weight stability, load the rack from the bottom up.

o Read the “Rack Mount Warnings” section of the Safety and Regulatory Compliance Guide.

o Take adequate safety and grounding measures to avoid creating an electrical shock hazard and to prevent bodily injury.

Rail_C

Rail_A

Inner Rail (2)

Rail_A (2)

Rail_C (2)

Rail_B (4) (used only for 2-post racks)

M4x4L screws (4)

M4x5L screws/washers (4)

M6 rack screws/washers (8)

M6 cage nuts (8)

Rail_C

Locking tab

https://support.symantec.com/en_US/contact-support.htmlhttps://www.mysymantec.comhttp://www.symantec.com/docs/DOC9779http://www.symantec.com/docs/DOC9795http://www.symantec.com/docs/DOC10311http://www.symantec.com/docs/DOC9996http://www.symantec.com/docs/DOC10248