Blue Coat Systems


Blue Coat Systems was a company that provided hardware, software, and services designed for cybersecurity and network management. In 2016, it was acquired by and folded into Symantec.
The company was known as CacheFlow until 2002.
The company had "a broad security portfolio including hardware, software and services." The company was best known for web gateway appliances that scan internet traffic for security threats, authenticate users and manage encrypted traffic, as well as products to monitor and filter employee internet activity. It also produced consumer products, such as parental control software. The company's products were initially sold to internet service providers, but later products were intended for large companies.

History

In March 1996, the company was founded as CacheFlow, Inc. in Redmond, Washington by Michael Malcolm, a computer scientist and professor at the University of Waterloo, Joe Pruskowski, and Doug Crow. The company initially raised $1 million in seed money from a dozen angel investors.
The company's goal was to develop appliances that would increase website speed by storing frequently accessed web data in the cache.
In October 1996, Benchmark Capital purchased 25% of the company for $2.8 million, equivalent to a price of 87.5 cents per share. By February 1997, the company had raised $5.1 million. In December 1997, U.S. Venture Partners acquired 17% of the company for $6 million.
In 1997, the company moved its headquarters to Silicon Valley.
In January 1998, the company released its first product, the CacheFlow 1000. It cached website objects that users were likely to use repeatedly, to increase load speed. In October 1999, the CacheOS operating system was released.
In April 1998, the company released the CacheFlow 100.
In mid-1998, during the dot-com bubble, the company made its first sales, earning just $809,000 over three months, and investors started pushing for an initial public offering.
In March 1999, Technology Crossover Ventures invested $8.7 million for 7% of the company, equivalent to a price of $4.575 per share.
In September 1999, the company released the CacheFlow 500, with a list price of $9,995. A competitive review of caching appliances in PC Magazine gave the CacheFlow 500 Editor's Choice. The editor said it had "excellent performance", a "plug-and-go" setup, and "good management tools. The review noted that its "most noteworthy features" were its DNS caching and object pipelining techniques, which allowed page data to be delivered in parallel, rather than sequential, streams.
In early November 1999, Marc Andreessen invested $3.1 million in shares, at a price of $11.04 per share.
On November 19, 1999, during the peak of the dot-com bubble, the company became a public company via an initial public offering, raising $132 million. Shares rose fivefold on its first day of trading. However, the company was not profitable and its product was unproven. At that time, the company had $3.6 million in revenue and $6.6 million in losses in the prior 3 months. The company had initially hoped to price its shares at $11-13 each and raise $50 million but due to strong demand, it priced its shares at $26 each. One month later, they traded as high as $182 each.
In 1999, board of directors member Andrew Rachleff of Benchmark Capital, an investor, brought in Brian NeSmith, who had just sold his company, Ipsilon Networks, to Nokia for $120 million, as chief executive officer.
In 2000, it introduced the CacheFlow Server Accelerator product family, which offloads content delivery tasks from web servers. Tests by Network World found the Server Accelerator 725 increased website load speed eight-fold. The CacheFlow Client Accelerator 600 product family was also introduced in 2000. It was the company's first product family for corporate networks, caching Web or multimedia content directly on the corporate network.
Revenues grew from $7 million in 1998, to $29 million in 1999 and $97 million in 2001. It already had 25% of the overall market for caching and 35% of the caching appliance market and was still not profitable.
In March 2000, the company integrated its products with those of Akamai Technologies.
In May 2000, the company updated CacheFlow OS to cache multimedia content, including RealNetworks' RealSystem, Microsoft's Windows Media and Apple's Quicktime formats.
In June 2000, the company acquired Springbank Networks, an internet device company, for $180 million.
In December 2000, the company acquired Entera, a digital content streaming company, for $440 million.
In 2001, new features specifically for streaming media were introduced under the name "cIQ".
Later in 2001, the company was renamed to Blue Coat Systems to focus on security appliances and simultaneously released the SG800. The appliance sat behind corporate firewalls to filter website traffic for viruses, worms and other harmful software. It had a custom operating system called Security Gateway and provided many of its security features through partners, like Symantec and Trend Micro.
The company lost 97% of its value from October 2000 to March 2001 as the dot-com bubble burst. The company continued to lose money. By 2002, several competing internet caching companies had abandoned the market, due to slow adoption of caching technology and most of CacheFlow's revenues came from its IT security products.
In February 2002, the company closed its Redmond, WA office and laid off about 60 workers there. Around a dozen Redmond workers were offered transfers to the Sunnyvale, CA office.
In April 2002, the company launched fifth version of its operating system. The Security Gateway 600/6000 Series was the company's newest product family. It had a range of security features, such as authentication, internet use policies, virus scanning, content filtering, and bandwidth restrictions for streaming video applications.
In August 2002, the company started adding IT security features.
Also in August 2002, the company changed its name to Blue Coat Systems. The new name was intended to evoke the image of a police officer or guard. It then focusing on internet security appliances. Its products were primarily used to control, monitor and secure internet use by employees. For example, a company could limit employee access to online gaming and video streaming, as well as scan attachments for viruses.
The shift in focus was followed by smaller losses and revenues at first and eventually company growth. Losses in 2002 after the rename were $247 million, about half of the prior year's losses.
By 2003, the company had 250 employees and $150 million in annual revenue.
In 2003, 3 new products were introduced for small and medium-sized businesses with 50, 100 or 250 users in bundles with Websense; and Secure Computing, although the Websense partnership was later at least partially dismantled and the two vendors were "slinging mud at each other" in the VAR community. This was followed by a second generation of the ProxySG product family, which added security features for instant messaging. A review in eWeek said the new ProxySG line was effective and easy to deploy, but the ongoing maintenance fees were expensive.
In October 2003, the company acquired Ositis Software, maker of antivirus appliances, for $1.36 million.
In July 2004, the company acquired Cerberian, a URL filtering company, for $17.5 million.
In 2005, the company introduced an anti-spyware appliance called Spyware Interceptor and the following year it announced upcoming WAN optimization products. This was followed by SSL-VPN security appliances to secure remote connections.
In 2005, the company was profitable for the first time.
In 2006, the company introduced a free web-tool, K9 Web Protection, that can monitor internet traffic, block certain websites, identify phishing scams. In a November 2008 review, PC World gave it 4.25 out of 5 stars.
In March 2006, the company acquired Permeo Technologies, an end point security company, for $60 million.
In June 2006, the company acquired NetCache assets from NetApp, which were involved in proxy caching, for $30 million.
In June 2008, the company acquired Packeteer, engaged in WAN optimization, for $268 million.
In 2009, the company introduced a plugin for PacketShaper to throttle applications such as Spotify. A review of the PacketShaper 12000 in IT Pro gave it four out of five stars. The review said that "you won't find superior WAN traffic management anywhere else," but "the hardware platform could be more up to date considering the price."
In November 2009, the company went through a restructuring that included layoffs of 280 of its 1,500 employees and the closing of facilities in Latvia, New Jersey and the Netherlands.
In February 2010, the company acquired S7 Software Solutions, an IT research and development firm based in Bangalore, for $5.25 million.
In August 2010, Michael J. Borman was named president and CEO of the company.
In August 2011, CEO Michael Borman was fired for failing to meet performance goals and was replaced with Greg Clark.
In December 2011, Thoma Cressey Bravo acquired the company for $1.3 billion.
In March 2012, David Murphy was named chief operating officer and president of the company.
In December 2012, the company acquired Crossbeam Systems, maker of the X-Series of security appliances.
In May 2013, the company acquired Solera Networks, involved in big data security.
In December 2013, the company acquired Norman Shark, an anti malware firm.
In 2014, Elastica's technology was incorporated into Blue Coat products, with its Audit subscription service being merged into the Blue Coat Appfeed in the ProxySG gateways.
In June 2015, the company acquired Perspecsys, involved in cloud security.
Also in March 2015, the company integrated technologies from its acquisitions of Norman Shark and Solera Networks to create a cloud-based product family called the Global Intelligence Network.
Also in March 2015, the company pressured security researcher Raphaël Rigo into canceling his talk at SyScan '15. Although Raphaël's talk did not contain any information about vulnerabilities on the ProxySG platform, the company still cited concerns that the talk was going to "provide information useful to the ongoing security assessments of ProxySG by Blue Coat." The canceling of the talk was met with harsh criticism by various prominent security researchers and professionals alike who generally welcome technical information about various security products that are widely used.
In March 2015, Bain Capital acquired the company from Thoma Bravo for $2.4 billion. Bain indicated that it hoped to launch another IPO and several months later, anonymous sources said the company was looking for investment banks for that purpose.
In August 2015, the company launched the Alliance Ecosystem of Endpoint Detection and Response to share information about IT security threats across vendors and companies. Its first channel program was started that March and the Cloud Ready Partner Program was announced the following April.
In November 2015, the company acquired Elastica, involved in cloud security, for $280 million.
By 2015, the company had $200 million in annual profits and about $600 million in revenues, a 50% increase from 2011.
On June 2, 2016, the company once again filed plans for an initial public offering. However, on June 13, 2016, the company abandoned its IPO plans and announced that Symantec agreed to acquire the company for $4.65 billion. The acquisition was completed on August 1, 2016 and the company's products were integrated into those of Symantec.
Blue Coat CEO Greg Clark was named CEO of Symantec and Blue Coat COO Michael Fey was named president and COO of Symantec.

Use by repressive regimes

Blue Coat devices are what is known as a "dual-use" technology, because they can be used both to defend corporate networks and by governments to censor and monitor the public's internet traffic. The appliances can see some types of encrypted traffic, block websites or record website traffic.
In October 2011, the U.S. government examined claims made by Telecomix, a hacktivist group, that Syria was using Blue Coat Systems products for internet censorship. Telecomix released 54GB of log data alleged to have been taken from 7 Blue Coat web gateway appliances that depict search terms, including "Israel" and "proxy", that were blocked in the country using the appliances. The company later acknowledged that its systems were being used in Syria, but asserted the equipment was sold to intermediaries in Dubai for use by an Iraqi governmental agency.
Despite the systems consistently sending "heartbeat" pings directly back to Blue Coat, the company claimed not to be monitoring the logs to identify from which country an appliance is communicating. Blue Coat announced that it would halt providing updates, support and other services for systems operating in Syria. In April 2013, the Bureau of Industry and Security announced a $2.8 million civil settlement with Computerlinks FZCO, a Dubai reseller, for violations of the Export Administration Regulations related to the transfer to Syria of Blue Coat products.
The company's devices were also used to block the public from viewing certain websites in Bahrain, Qatar, and U.A.E., among others. By 2013, Citizen Lab had published 3 reports regarding the company's devices being found in countries known for using technology to violate human rights. It identified 61 countries using Blue Coat devices, including those known for censoring and surveilling their citizens' internet activity, such as China, Egypt, Russia, and Venezuela. However, "it remains unclear exactly how the technologies are being used, but experts say the tools could empower repressive governments to spy on opponents."