Blue Coat Systems, Inc.

Product Use Guide –

Product-Specific Usage Rights and Restrictions
CY Q3 Addendum for ASG and ICSP (and updates to MAA)
as of 11 December 2014
Advanced Secure Gateway (ASG)
The Advanced Secure Gateway physical appliance (“ASG”) is sold with a perpetual software license. ASGs are
restricted by maximum concurrent client IP addresses as set forth in the purchased license. When the maximum
number of client IPs is reached, the appliance will (depending on the user configuration) either bypass new
connections or queue new connections for later handling. The highest sold level of each platform (e.g., ASG-S400)
will not cap the number of client IPs, but will process traffic from devices until the appliance exhausts available
resources.

Several optional add-on features are also available for additional fees. The following options are for use only on the
specific licensed ASG for which the option is purchased unless otherwise noted.
• ASG appliances come with software with the capability to run on-box Content Analysis functions. Content
Analysis requires a separately purchased applicable File Inspection subscription to provide the additional
Content Analysis on-box functionality. A File Inspection subscription (designed to provide virus protection
and file whitelisting functionality) provides updates to pattern files containing information to identify viruses
or malicious software and is sold on a per user basis. File Inspection subscriptions may not be used for more
than the number of users for which the subscription has been purchased. A user means, for purposes of File
Inspection, any person that may access the internet via one or more Blue Coat gateway devices (such as
ProxySGs, SWG VAs and/or ASGs) that are configured to utilize any File Inspection functionality. End
users without Internet access need not be counted. If a File Inspection subscription expires or terminates,
services will cease to update and the File Inspection functionality will be lost. Content Analysis includes the
capability to direct files to off-box sandbox technologies but such technologies must be separately purchased
and are subject to additional restrictions.
• Blue Coat WebFilter (BCWF). BCWF is available as either a perpetual or a subscription license as set forth
below. Both license types are sold on a per-user basis. BCWF may be used for no more than the licensed
number of BCWF users. A user means, for purposes of BCWF, any end user that may access, at any time,
the Internet via one or more Blue Coat gateway devices (such as ProxySGs, SWG VAs and/or ASGs) that
utilizes BCWF. End users without Internet access need not be counted.
o A perpetual license provides a one-time download of the BCWF database on the ASG, but this
license does not allow database updates or use of Blue Coat’s WebPulse service. Database updates
and dynamic ratings using Blue Coat WebPulse service require a valid BCWF support contract in
addition to a BCWF perpetual license.
o Subscription licenses are for the applicable term and must be renewed timely for continuous service.
• Flash Capability Option. The Flash option, offered with a perpetual license, enables the ASG to control,
cache and/or split Adobe Flash RTMP, RTMPT, and encrypted RTMP/T traffic.
• Encrypted Tap. The Encrypted Tap option, offered with a perpetual license, enables the ASG to process
encrypted traffic and output the decrypted content for inspection by separately-purchased external system(s).
• CachePulse. The CachePulse option, offered on a subscription basis for a specific term, provides caching
rules and instruction updates. The CachePulse updates require that the ASG appliance has a valid support
contract in addition to a CachePulse subscription license.

Page 1 of 2
 Industrial Control Systems Protection (ICSP)
ICSP is an appliance sold with a perpetual software license. ICSP requires an anti-virus (AV) subscription to
function. Subscriptions include updates to pattern files containing information to identify viruses or
malicious software. An ICSP (and the applicable subscription) may be used for no more than the number of
Windows Driver Agents (Agents) for which the perpetual bundle has been purchased. A Windows Driver
Agent, for purposes of ICSP, means any Windows ™ system running the driver to enforce access to data
contained within a USB drive which has not been scanned and certified by the ICSP Control Station.

Malware Analysis
The following addition applies to the Malware Analysis (MA), and supplements the terms for the MA set forth in
the Product Use Guide date September 12, 2014 (“Guide”).

In addition to the appliance MAA license described in the Guide, an updating subscription license is required
per appliance in order to receive Web and File Reputation services (in addition to access to profile plugins, and
detection pattern updates as described in the Guide) provided as part of the MA’s functionality.

© 2014 Blue Coat Systems, Inc. All rights reserved. Blue Coat, the Blue Coat logos, ProxySG, PacketShaper,
CacheFlow, IntelligenceCenter, CacheOS, CachePulse, Crossbeam, K9, the K9 logo, DRTR, MACH5, Packetwise,
PolicyCenter, ProxyAV, ProxyClient, SGOS, WebPulse, Solera Networks, the Solera Networks logos, DeepSee,
“See Everything. Know Everything.”, “Security Empowers Business”, and BlueTouch are registered trademarks or
trademarks of Blue Coat Systems, Inc. or its affiliates in the U.S. and certain other countries. This list may not be
complete, and the absence of a trademark from this list does not mean it is not a trademark of Blue Coat or that
Blue Coat has stopped using the trademark. All other trademarks mentioned in this document owned by third
parties are the property of their respective owners. This document is for informational purposes only. Blue Coat
makes no warranties, express, implied, or statutory, as to the information in this document. Blue Coat products,
technical services, and any other technical data referenced in this document are subject to U.S. export control
and sanctions laws, regulations and requirements, and may be subject to export or import regulations in other
countries. You agree to comply strictly with these laws, regulations and requirements, and acknowledge that
you have the responsibility to obtain any licenses, permits or other approvals that may be required in order to
export, re-export, transfer in country or import after delivery to you.

END

Page 2 of 2