bcs_ds_module_summaries_bcpsp_en_v3b.pdf

2
Security Empowers Business DATASHEET MODULE SUMMARIES: BCPSP This document gives brief summaries of the modules in the Blue Coat Certified PacketShaper Professional (BCPSP) course. Module 1: PacketShaper System Architecture This module is the first one in the BCPSP course and talks at a very high level the system architecture details of the Blue Coat PacketShaper. This module provides a high-level overview of core PacketWise technologies, specifically those designed to improve the Internet and WAN user experience. Also described are the processes behind how network traffic passes through the PacketShaper and the fundamentals of the PacketShaper storage and file system. How PacketShaper’s hardware and system limitations can affect performance are also dealt in the later sections of the module. Module 2: PacketShaper Deployment Deploying the PacketShaper correctly is the most important choice that a user makes – second only to deciding to buy Blue Coat products. Different deployments allow you to implement different features and define the overall security option for a network. This module discusses various methods to deploy the Blue Coat PacketShaper in a network environment. PacketShaper is a complete performance solution, incorporating monitoring features and control features to correct and prevent problems. This module describes inline and non-inline deployment scenarios in detail. Module 3: Failover and High Availability This module focuses on failover – PacketShaper’s ability to monitor the network’s link speed and compensate for a failed router and lower speeds – and high availability – a deployment that meant to ensure 100% availability for critical applications. This module also goes into more detail about the Direct Standby deployment introduced in the BCPSA course. Module 4: Advanced Classification This module describes classification and other associated processes in a more detailed manner. Traffic inspection is the preliminary step before traffic discovery and classification and can help to identify applications that are mission-critical and ones that are mysterious in nature. Other topics described in this module include creating traffic trees to classify traffic, creating traffic classes through the CLI and using the CLI command synthetic add to generate synthetic transactions at predefined intervals to analyze real life traffic scenarios. Module 5: WebPulse WebPulse is an integral part of Blue Coat’s multi-layered defense system. This module discusses the cloud-computing aspects of WebPulse; following that with a discussion of the technologies that Blue Coat uses as part of WebPulse, including dynamic categorization, WebFilter. The URL Categorization and web application identification features in the PacketShaper made possible using these capabilities of the WebPulse service. Module 6: Traffic Tree Management Application discovery and the creation of a corresponding traffic tree are prerequisites for understanding application behavior and controlling its performance. Traffic trees are very flexible in that you can customize your tree’s classes using many types of criteria including application, location, protocol, host lists, addresses, and many other strategies. This module describes how traffic tree helps to identify, manage, and optimize bandwidth allocation in your specific network environment. Various traffic tree designs supported by PacketShaper are discussed. Module 7: Advanced Bandwidth Management This module, an advanced version of the Partitions module in the BCPSA course, provides details on how to use policies effectively, and partitions to manage bandwidth issues in your deployments. Characterize traffic flowing through your network based on its behavior with respect to the following – importance, time sensitivity, size and jitter. Once you have characterized the traffic, it is easy to manage it by applying either partitions or policies or a combination of both. Module 8: PacketShaper Reporting Tools Blue Coat PacketShaper measures many characteristics of passing traffic and stores associated metrics onboard for up to two months, providing the capability to create pre-configured or custom reports. Reports are accessible through PacketShaper’s web UI. This module walks you through the various tools available from Blue Coat to manipulate various data collected by the PacketShaper. BLUE COAT CERTIFIED PACKETSHAPER PROFESSIONAL (BCPSP) V4.1.0 Module Summaries (July 2014)

Upload: ksbt8210

Post on 06-Dec-2015

1 views

Category:

Documents


0 download

TRANSCRIPT

Security Empowers Business

DA

TAS

HE

ET

MODULE SUMMARIES:

BCPSP

This document gives brief summaries of the modules in the Blue Coat Certified PacketShaper Professional (BCPSP) course.

Module 1: PacketShaper System ArchitectureThis module is the first one in the BCPSP course and talks at a very high level the system architecture details of the Blue Coat PacketShaper. This module provides a high-level overview of core PacketWise technologies, specifically those designed to improve the Internet and WAN user experience. Also described are the processes behind how network traffic passes through the PacketShaper and the fundamentals of the PacketShaper storage and file system. How PacketShaper’s hardware and system limitations can affect performance are also dealt in the later sections of the module.

Module 2: PacketShaper DeploymentDeploying the PacketShaper correctly is the most important choice that a user makes – second only to deciding to buy Blue Coat products. Different deployments allow you to implement different features and define the overall security option for a network. This module discusses various methods to deploy the Blue Coat PacketShaper in a network environment. PacketShaper is a complete performance solution, incorporating monitoring features and control features to correct and prevent problems. This module describes inline and non-inline deployment scenarios in detail.

Module 3: Failover and High AvailabilityThis module focuses on failover – PacketShaper’s ability to monitor the network’s link speed and compensate for a failed router and lower speeds – and high availability – a deployment that meant to ensure 100% availability for critical applications. This module also goes into more detail about the Direct Standby deployment introduced in the BCPSA course.

Module 4: Advanced ClassificationThis module describes classification and other associated processes in a more detailed manner. Traffic inspection is the preliminary step before traffic discovery and classification and can help to identify applications that are mission-critical and ones that are mysterious in nature. Other topics described in this module include creating traffic trees to classify traffic, creating traffic classes through the CLI and using the CLI command synthetic add to generate synthetic transactions at predefined intervals to analyze real life traffic scenarios.

Module 5: WebPulseWebPulse is an integral part of Blue Coat’s multi-layered defense system. This module discusses the cloud-computing aspects of WebPulse; following that with a discussion of the technologies that Blue Coat uses as part of WebPulse, including dynamic categorization, WebFilter. The URL Categorization and web application identification features in the PacketShaper made possible using these capabilities of the WebPulse service.

Module 6: Traffic Tree ManagementApplication discovery and the creation of a corresponding traffic tree are prerequisites for understanding application behavior and controlling its performance. Traffic trees are very flexible in that you can customize your tree’s classes using many types of criteria including application, location, protocol, host lists, addresses, and many other strategies. This module describes how traffic tree helps to identify, manage, and optimize bandwidth allocation in your specific network environment. Various traffic tree designs supported by PacketShaper are discussed.

Module 7: Advanced Bandwidth ManagementThis module, an advanced version of the Partitions module in the BCPSA course, provides details on how to use policies effectively, and partitions to manage bandwidth issues in your deployments. Characterize traffic flowing through your network based on its behavior with respect to the following – importance, time sensitivity, size and jitter. Once you have characterized the traffic, it is easy to manage it by applying either partitions or policies or a combination of both.

Module 8: PacketShaper Reporting ToolsBlue Coat PacketShaper measures many characteristics of passing traffic and stores associated metrics onboard for up to two months, providing the capability to create pre-configured or custom reports. Reports are accessible through PacketShaper’s web UI. This module walks you through the various tools available from Blue Coat to manipulate various data collected by the PacketShaper.

BLUE COAT CERTIFIED PACKETSHAPER PROFESSIONAL (BCPSP) V4.1.0

Module Summaries (July 2014)

Security Empowers Business

Security Empowers Business

DA

TAS

HE

ET

Blue Coat Systems Inc. www.bluecoat.com

Corporate Headquarters Sunnyvale, CA

+1.408.220.2200

EMEA Headquarters Hampshire, UK

+44.1252.554600

APAC Headquarters Singapore

+65.6826.7000

© 2014 Blue Coat Systems, Inc. All rights reserved. Blue Coat, the Blue Coat logos, ProxySG, PacketShaper, CacheFlow, IntelligenceCenter, CacheEOS, CachePulse, Crossbeam, K9, the K9 logo, DRTR, Mach5, Packetwise, Policycenter, ProxyAV, ProxyClient, SGOS, WebPulse, Solera Networks, the Solera Networks logos, DeepSee, “See Everything. Know Everything.”, “Security Empowers Business”, and BlueTouch are registered trademarks or trademarks of Blue Coat Systems, Inc. or its affiliates in the U.S. and certain other countries. This list may not be complete, and the absence of a trademark from this list does not mean it is not a trademark of Blue Coat or that Blue Coat has stopped using the trademark. All other trademarks mentioned in this document owned by third parties are the property of their respective owners. This document is for informational purposes only. Blue Coat makes no warranties, express, implied, or statutory, as to the information in this document. Blue Coat products, technical services, and any other technical data referenced in this document are subject to U.S. export control and sanctions laws, regulations and requirements, and may be subject to export or import regulations in other countries. You agree to comply strictly with these laws, regulations and requirements, and acknowledge that you have the responsibility to obtain any licenses, permits or other approvals that may be required in order to export, re-export, transfer in country or import after delivery to you. v.DS-MODULE-SUMMARIES-BCPSP-EN-v3b-0814

Module 9: Advanced ReportingThis module focuses on some basic CLI commands that can identify many simple performance issues before contacting Blue Coat Technical Support.

Module 10: PacketShaper XpressThis module covers the PacketShaper’s Xpress feature for compression of network traffic. Xpress will compress traffic essentially creating extra space for other traffic passing through the link. PacketShaper achieves this by creating special tunnels between two appliances. This is one of PacketShaper’s most powerful and useful features. It automatically checks traffic to see if compression will create savings. Xpress is not deployed if traffic is already compressed, or if it does not create link savings.

Module 11: Understanding Adaptive ResponseIn today’s complex enterprise environment, hardware and network problems are major causes of performance issues. It becomes very difficult to reduce the impact from such issues even when once has monitoring capabilities running 24/7 throughout your network. One of the built-in solutions that come with the Blue Coat PacketShaper product line is Adaptive Response. This feature makes it easier to monitor your network by enabling an individual PacketShaper to monitor unit, application, and network health, hosts, traffic classes, links, and partitions. A color-coded summary lets you identify potential problems at a glance.

Module 12: Network Management and MonitoringThis module covers authentication and event notification with PacketShaper. There are three main methods for authentication (local, RADIUS, TACACS+). Each is covered briefly in this module, but the focus for this course has been on the local account. This module also focuses on Event Notification, which can be used to report on failed login attempts, among other things. PacketWise’s support for SNMP using SNMP agent and PacketShaper enterprise MIB is also briefly covered.

Module 13: Blue Coat Intelligence CenterBlue Coat IntelligenceCenter is a central management solution designed specifically for use with Blue Coat PacketShaper and PolicyCenter. Using its features, you can obtain enterprise-wide visibility of your network and the traffic flowing through it, get a centralized location for application performance reporting, and access all your compatible appliances and databases through one location.

Module 14: Introduction to Policy CenterAs your network gets larger and you deploy more Blue Coat PacketShaper appliances, it becomes more difficult to manage configuration changes. PolicyCenter is a software management system that maintains multiple PacketShaper configurations on a single Windows 2000 or Windows 2003 server. With PolicyCenter the configurations of all the units on the network are stored in a single place, they are managed very efficiently.

Module 15: User AwarenessThis module discusses PacketShaper’s User Awareness feature. This feature provides a method of managing network bandwidth usage by Active Directory user or groups. Installing the Blue Coat Authentication and Authorization Agent (BCAAA) on a dedicated Windows 2008 member server and enabling PacketShaper to function as a BCAAA client provides classification of activity by user or user group.