| 5Introduction to the Symantec ProxySG Secure Web Gateway |
|
- Describe the functions of a proxy server
- Differentiate proxy servers from firewalls
- Describe the key features and benefits of the Symantec ProxySG
- List the various ProxySG models
- Access online Symantec community resources
|
| ProxySG Security Deployment Options |
|
- Describe the three network deployment options
- Describe the three possible roles of the ProxySG
|
| ProxySG Management Console |
|
- Describe the relationship between the Management Console and the ProxySG CLI
- Describe the primary function of the major areas of the Management Console
- Use the Management Console toaccess on-box help and Symantec product documentation
|
| Traffic Interception using Proxy Services |
|
- Understand the functions of proxyservices, listeners, and proxy types
- Describe the three most commonproxy services
- Explain how the intercept andbypass settings affect whathappens to network traffic passingthrough the ProxySG
|
| Hypertext Transfer Protocol |
|
- Understand how a connection is initiated over the transport layer
- Identify the components of an HTTP URL
- Explain the two types of HTTP messages: request and response
|
| Introduction to the Visual Policy Manager |
|
- Describe the relationship amongthe VPM, CPL, and the Management Console
- Describe the default processing order for policy layers and rules
- Describe triggers and actions thatcan be used in writing policy
|
| Filtering Web Content |
|
- Describe the main concepts of web filtering
- Describe the primary category databases
- Describe the category types available to policy
- Describe how Blue Coat Web Filterand Web Pulse work together
|
| Using Threat Intelligence to Defend the Network |
|
- Understand Intelligence Services asprovided by the Global Intelligence Network
- Understand Geolocation and Threat Risk Levels and how they can be used in policy
|
| Ensuring Safe Downloads |
|
- Describe how malware can be transmitted via HTTP
- Explain the methods, advantages,and disadvantages of file type detection
- Describe some of the considerations in deciding what content to block as possible malware sources
|
| Notifying Users of Internet Usage Policies |
|
- Explain the function and various components of built-in and custom exception pages
- Describe the function of Notify User objects
- Identify the types of pages that can be sent to users by using Notify User objects
- Describe splash pages and coaching pages using Notify User objects in the VPM
|
| Access Logging on the ProxySG |
|
- Describe, at a high level, how the ProxySG performs access logging
- Describe the components of a ProxySG access log facility
- Identify default log facilities and log formats
- Describe common use cases for periodic and continuous uploading of access logs
|
| ProxySG Initial Configuration |
|
- Access the ProxySG and perform initial configuration
- Describe the two SGOS editions and various license types
- Understand the optional capabilities available with SGOS
|
| Using Authentication Realms |
|
- Describe the benefits of enabling authentication on the ProxySG
- Describe, at a high level, the ProxySG authentication architecture
- Understand the use of IWA realms, with both IWA Direct and IWA BCAAA connection methods
|
| Understanding Authentication Credentials |
|
- Describe howNTLM and Kerberos authentication work in both IWA direct and IWA BCAAA deployments
- Configure the ProxySG to use Kerberos authentication
|
| Understanding Authentication Modes |
|
- Describe authentication surrogates and authentication modes
- Describe ProxySG authentication in both explicit and transparent deployment mode
|
| Understanding HTTPS |
|
- Describe authentication surrogates and authentication modes
- Describe ProxySG authentication in both explicit and transparent deployment mode
|
| Managing SSL Traffic on the ProxySG |
|
- Describe how the SSL proxy service handles SSL traffic
- Describe the standard keyrings that are installed by default on the ProxySG
- Identify the types of security certificates that the ProxySG uses
|
| Optimizing SSL Interception Performance |
|
- Configure the ProxySG to process SSL traffic according to best practices for performance
|
| SGOS Architecture |
|
- Identify key components of SGOS
- Explain the interaction among client workers and software workers in processing client requests
- Explain the significance of policy checkpoints
|
| Caching Architecture |
|
- Describe the benefits of object caching on the ProxySG.
- Explain the caching-related steps in a ProxySGtransaction.
- Identify and describe the HTTP request and response headers related to caching.
|
