Basic Troubleshooting Steps on Blue Coat ProxySG..!!

 How to Configure and how to take a Policy Trace on Blue Coat ProxySG

To configure Policy Trace on Blue Coat ProxySG follow the below steps

 To prevent any trace logs, please do the following

 Login to the ProxySG Management Console with Admin Account
 Navigate to Configuration Policy Policy Options Default Policy Tracing
 Check No default tracing of policy execution Apply

 Now navigate to Configuration Policy Visual Policy Manager Launch

 In VPM Layer go to Policy Add Web Access Layer (Need to be the last Layer) For
your ease of identification you can set the name as “Policy_Trace” OK
 In the newly created layer, click on Add Rule to add a new Rule
 Select the Source You need to select the Source as the Client Machine’s IP Address
from where you can reproduce the issue
 Right click on Source Set
 Select Client IP Address/Subnet

 Add the Client Machine’s IP Address (Subnet Mask is not necessary)

 Select the newly added IP Address Click OK
 Keep Destination, Service and Time as Any
 Action should be None (Right click on Action Select Delete)
 Now right click on Track Set

 Click on New Trace

 Give a name to the Trace and Trace file Enable the Trace

 Click OK
 Select the newly created Trace file OK Install Policy

 You have configured the Policy Trace on ProxySG

 Disable the Policy Trace Layer after doing the troubleshooting or else it may increase the
load on ProxySG
 Now before reproducing the issue, open the Browser Type https://x.x.x.x:8082/Policy
 Press Enter
 Where x.x.x.x is your ProxySG’s IP Address
 Click on Delete all Policy Trace (Ensure you do this before Reproduce the issue) to
delete any already existing logs
 Now reproduce the issue
 Once you reproduced the issue (i.e., once you get the error) Refresh the browser you will
get the Trace File
 Analyze the Trace File

 How to take the Packet Capture from Blue Coat ProxySG

 Login to the ProxySG Management Console with Admin Account

 Navigate to Maintenance Service Information Packet Capture
 Set the Capture Filter (change the PCAP filter to the Client IP and destination URL/IP
tested)
 Sample Capture Filter Syntax: ip host <Client IP Address> or host <Destination URL/IP>
port 53

 Click on Start Capture Select Capture all matching packets Start Capture
  Click OK Reproduce the issue
 Once you get the error Stop the Capture by clicking Stop Capture

 Click OK Download the Capture and Analyze it with the help of Wireshark application

To upload the troubleshooting information to Blue Coat TAC to an already opened Service
Request (Case), please do the following
 Navigate to Maintenance Service Information Send Information Send Service
Information
 Enter the Service Request Number (Case Id)
 Select the Information which you want to upload normally you can select Event Log,
Sysinfo, Policy Trace Files and Packet Capture Click on Send

 To know the progress of Upload click on View Progress

Prepared by: Priyesh MP