1. 1Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. 2013 BCWF CATEGORY CHANGES John Ahlander Sr. Director, Product Management

2. 2Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. CATEGORY CHANGES SUMMARY  Drivers: Customer Requests Competitive Alignment Internet Trends Internal Categorization Challenges  Results: 4 New Categories 13 Category Name Changes 2 Category Removals 6 Category Definition Clarifications  Full Release: November 12, 2013

3. 3Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. CATEGORY ADDITIONS (4) Servers used for management/monitoring of internet connected devices (a growing trend) Examples: router mgmt., surveillance cameras, home automation Internet Connected Devices Potentially illegal software or media downloads Split from the Hacking category to differentiate legal vs. security concern Other companies also have this category Piracy/Copyright Concerns Descriptions, tools for white hat/defensive security Pull from Hacking and Computers/Internet to allow security teams to get to these sites Other companies also have this category Computer/Information Security Sites promoting Marijuana cultivation/use and associated paraphernalia Split from “Illegal Drugs” to allow compliance in different legal jurisdictions Marijuana

4. 4Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. CATEGORY NAME CHANGES (1-4) Added “Malnets” to clarify inclusion in this category Malicious Sources  Malicious Sources/Malnets Customer confusion on what is included Examples: Dropbox, Carbonite, HighTail, Mediafire Online Storage  File Storage/Sharing Web ads and analytics have very similar marketing/customer tracking purposes Examples: Double Click, Omniture, facebook “likes” Web Advertisements  Web Ads/Analytics After analytics moves, expanding to include safe servers that provide internet infrastructure services Examples: CRLs, OCSPs, Shared auth, classification services Non-viewable  Non- Viewable/Infrastructure

5. 5Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. CATEGORY NAME CHANGES (5-8) Modernize name, since this includes many forms of connected technology, not just “desktop” computers (e.g. mobile devices) Computers/Internet  Technology/Internet Customer confusion on why sites were in this category “Greeting Cards” name did not localize properly Examples: hallmark.com, evite.com Greeting Cards  E-Cards/Invitations Clarification of “applications” term, which can be very broad. Only includes office productivity and business enablement services. Examples: Google calendar, Salesforce, Quickbooks Web Applications  Office/Business Applications Inclusion of SMS (mobile texting) to clarify category Chat/Instant Messaging  Chat (IM)/SMS

6. 6Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. CATEGORY NAME CHANGES (9-13) Clarification for customers on sites included Remove emphasis on groups, since also individual Broaden to include social advocacy, not just political Political/Activist Groups  Political/Social Advocacy Clarify to only include personal sites, regardless of format Exclude non-personal blog (Blue Coat security blog) Blog/Personal Pages  Personal Sites Customer confusion on what “open/mixed” meant Always meant “mixed w/ pornography”, now clarifies Examples: Google image search, Youtube, Tumblr Open/Mixed Content  Mixed Content/Potentially Adult Alternative nomenclature perceived as prejudicial Sexual topics, excl. pornography and sex education Examples: myriad types of fetishes, swingers Alternative Sexuality/Lifestyle  Sexual Expression Substances/Drugs controlled by law in different regions of the world May be illegal in some location and not in another, but generally controlled in most locations Illegal Drugs  Controlled Substances

7. 7Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. CATEGORY REMOVALS (2) No longer needed as a standalone category. No sites today in category. Removing container. Sites have been moved to the appropriate content category (political, dating, news, porn, sex ed., etc.) LGBT No longer needed as a standalone category. Was popular years ago, not now. Sites will go into either “Scam/Questionable” or “Business/Economy” depending on legitimacy Pay to Surf

8. 8Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. DEFINITION CLARIFICATIONS (6) Include blog hosting sites Web Hosting Include Web API embeds (e.g. facebook “like” button) Web Ads/Analytics Include 3 rd -party authentication (google/twitter/facebook auth) Non- Viewable/Infrastructure Include prescription medications Health Include insurance Financial Services Move photographer sites to business Entertainment

9. 9Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.9 If you have ProxySG, what do you need to do? PROXY SG CONSIDERATIONS

10. 10Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. STAGED ROLLOUT October 15 th :  Category names for new and renamed categories introduced  Released as part of the normal WebFilter database download  Will automatically appear in the policy editor November 12 th :  Sites moved to their new categories  Deleted categories removed from the WebFilter database  Changes become fully effective These two stages provide a 4-week window to update your local policy to reflect the changes without disrupting service

11. 11Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. CREATING POLICY FOR NEW CATEGORIES  New categories can be referenced in CPL policy at any time  On October 15th, new categories will show up in the VPM  No URLs will be assigned to these categories until Nov. 12 th  Policies for new categories will not take effect until Nov. 12 th

12. 12Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. POLICY CHANGES FOR RENAMED CATEGORIES  ProxySG will automatically track renamed categories  When new names introduced, existing policy will still continue to function properly  Old names treated as deprecated aliases for new names for policy evaluation If you maintain policy via the VPM  Category names will be updated automatically the next time policy is changed via VPM Both renamed BCWF categories and locally-defined categories with same names If you maintain policy via CPL  Recent versions of ProxySG automatically update the renamed categories in CPL  In older versions of ProxySG, old category names in CPL will generate a benign warning: “ Obsolete category name: ‘Illegal Drugs’ is now ‘Controlled Substances’ ” Warning can be resolved by updating policy to reference the new names directly

13. 13Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. TESTING OPTIONS FOR WEBFILTER ON PROXYSG On October 15 th, the following will be available:  Test URLs for all categories in WebFilter database A single test URL will be available for each new BCWF category Format: testrating.webfilter.bluecoat.com/ Example: testrating.webfilter.bluecoat.com/Spam Full link list: sitereview.bluecoat.com/cattest.jsp  Separate test DB Final state DB (new, renames, deletes) with single test URL sitereview.bluecoat.com/2013_BCWF_Update_Test_Database.jsp

14. 14Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. YOUR POLICY IMPACT Q: What are the policy recommendations for the new categories? Follow your acceptable use and security policies Review “Piracy/Copyright Concerns”, “Marijuana” categories for legal liability Review “Computer/Information Security” category for security Q: How can I keep the same effective policy as before? Renamed categories will automatically map forward Use same policy (block/allow) for new category as you have with original category o Internet Connected Devices split out from Computers/Internet o Piracy/Copyright Concerns split out from Hacking o Computer/Info. Security split mainly from Hacking, some from Computers/Internet o Marijuana split out from Illegal Drugs Q: What will happen if I don’t change my ProxySG policy? All renamed categories will function the same as before All new categories will be allowed (assuming a default allow policy)

15. 15Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.15Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. If you have ProxyClient, what do you need to do? PROXY CLIENT CONSIDERATIONS

16. 16Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. PROXYCLIENT CONSIDERATIONS Required ProxyClient components  ProxySG Client Manager (CM) version 5.4 or later  ProxyClient version 3.1.3 or later Creating New Policy Reflecting New/Renamed Categories  Oct. 15 th : New/renamed categories appear in Client Manager  Between Oct. 15th and Nov. 12th, update policy  No URLs will be included in new categories until Nov. 12 th  Policy must be modified by Nov. 12th to work as desired

17. 17Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.17Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. If you have Cloud Web Security Service, what do you need to do? CLOUD WEB SECURITY SERVICE CONSIDERATIONS

18. 18Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. STAGED ROLLOUT October 15 th :  Category names for new and renamed categories introduced  Will automatically appear in the policy editor and reporting  Ability to update policy and custom reports November 12 th :  Sites moved to their new categories  Deleted categories removed from the WebFilter database  Changes become fully effective These two stages provide a 4-week window to update your policy to reflect the changes without disrupting service

19. 19Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. CREATING POLICY FOR NEW CATEGORY NAMES  Oct. 15 th : new category names will show in the control portal Policy can be created using new category names No URLs will be assigned to new categories until Nov. 12 th Policies using new categories will not take effect until Nov. 12 th  Renamed categories will automatically switch over Existing policy will function as before

20. 20Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.20Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. If you have PacketShaper, what do you need to do? PACKETSHAPER CONSIDERATIONS

21. 21Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. PACKETSHAPER CONSIDERATIONS If you are running PacketShaper 8.6+ with URL categorization…  Renamed categories will still hit their previously defined classes May want to change class name to match the new category name  New categories will be auto-discovered, if configured  Classes for deleted categories will no longer have hits It is recommended to update/remove classes with those categories Note: None of these changes are required for the categorization to continue working in PacketShaper, but they may be necessary to obtain the full value of the new and changed categories.

22. 22Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. IMPORTANT DATES MilestoneDate Customer NotificationSep. 10, 2013 SiteReview UpdatedOct. 8, 2013 Customer Pilot (Test DB)Oct. 8, 2013 New/renamed category namesOct. 15, 2013 Reporter 9.4.4.3 ReleasedOct. 18, 2013 Site data moves into new categories & deleted categories removed Nov. 12, 2013

23. 23Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. RESOURCES  Blue Coat Support customercare@bluecoat.com  Online Resources FAQ: kb.bluecoat.com FAQ2806kb.bluecoat.com Category definitions and sample sites: sitereview.bluecoat.comsitereview.bluecoat.com Test categorizations: sitereview.bluecoat.com/testcategories.jspsitereview.bluecoat.com/testcategories.jsp  Local Blue Coat Sales/SE

24. 24Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. Questions?

25. 25Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. THANK YOU FOR JOINING TODAY!  Please provide feedback on this webcast to: supportnewsletter@bluecoat.com Webcast replay and slide deck found here: https://bto.bluecoat.com/training/custom er-support-technical-webcasts https://bto.bluecoat.com/training/custom er-support-technical-webcasts (requires BTO login)

26. 26Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.

27. 27Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. CURRENT CATEGORY SET  Abortion  Adult/Mature Content  Alcohol  Alternative Sexuality/Lifestyles  Alternative Spirituality/Belief  Art/Culture  Auctions  Audio/Video Clips  Blogs/Personal Pages  Brokerage/Trading  Business/Economy  Charitable Organizations  Chat/Instant Messaging  Child Pornography  Computers/Internet  Content Servers  Dynamic DNS Host  Education  Email  Entertainment  Extreme  Financial Services  For Kids  Gambling  Games  Government/Legal  Greeting Cards  Hacking  Health  Humor/Jokes  Illegal Drugs  Informational  Internet Telephony  Intimate Apparel/Swimsuit  Job Search/Careers  LGBT  Malicious Outbound Data/Botnets  Malicious Sources  Media Sharing  Military  News/Media  Newsgroups/Forums  Non-viewable  Nudity  Online Meetings  Online Storage  Open/Mixed Content  Pay to Surf  Peer-to-Peer (P2P)  Personals/Dating  Phishing  Placeholders  Political/Activist Groups  Pornography  Potentially Unwanted Software  Proxy Avoidance  Radio/Audio Streams  Real Estate  Reference  Religion  Remote Access Tools  Restaurants/Dining/Food  Scam/Questionable/Illegal  Search Engines/Portals  Sex Education  Shopping  Social Networking  Society/Daily Living  Software Downloads  Spam  Sports/Recreation  Suspicious  Tobacco  Translation  Travel  TV/Video Streams  Vehicles  Violence/Hate/Racism  Weapons  Web Advertisements  Web Applications  Web Hosting

28. 28Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved. NEW CATEGORY SET  Abortion  Adult/Mature Content  Alcohol  Alternative Spirituality/Belief  Art/Culture  Auctions  Audio/Video Clips  Brokerage/Trading  Business/Economy  Chat (IM)/SMS  Child Pornography  Computer/Information Security  Content Servers  Controlled Substances  Cultural/Charitable Organizations  Dynamic DNS Host  E-Cards/Invitations  Education  Email  Entertainment  Extreme  File Storage/Sharing  Financial Services  For Kids  Gambling  Games  Government/Legal  Hacking  Health  Humor/Jokes  Informational  Internet Connected Devices  Internet Telephony  Intimate Apparel/Swimsuit  Job Search/Careers  Malicious Outbound Data/Botnets  Malicious Sources/Malnets  Marijuana  Media Sharing  Military  Mixed Content/Potentially Adult  News/Media  Newsgroups/Forums  Non-viewable/Infrastructure  Nudity  Office/Business Applications  Online Meetings  Peer-to-Peer (P2P)  Personal Sites  Personals/Dating  Phishing  Piracy/Copyright Concerns  Placeholders  Political/Social Advocacy  Pornography  Potentially Unwanted Software  Proxy Avoidance  Radio/Audio Streams  Real Estate  Reference  Religion  Remote Access Tools  Restaurants/Dining/Food  Scam/Questionable/Illegal  Search Engines/Portals  Sex Education  Sexual Expression  Shopping  Social Networking  Society/Daily Living  Software Downloads  Spam  Sports/Recreation  Suspicious  Technology/Internet  Tobacco  Translation  Travel  TV/Video Streams  Uncategorized  User-Defined  Vehicles  Violence/Hate/Racism  Weapons  Web Ads/Analytics  Web Hosting