Vendor lineage
Blue Coat & Packeteer - the checkpoint companies
CacheFlow's pivot made the proxy a security platform; PacketShaper created traffic shaping - together, the prehistory of the SSE category.
Two 1996 companies that answered the same question - what happens at the checkpoint - for content and for bandwidth. Blue Coat (born CacheFlow) made the inline proxy the enterprise web's enforcement point, SSL inspection included; Packeteer's PacketShaper taught the WAN that traffic has identity. Merged in 2008, carried through Symantec into Broadcom, their architecture is what every cloud secure web gateway runs today.
The profile covers the legendary CacheFlow IPO, the 2002 pivot to Blue Coat, PacketShaper's category creation, the 2008 acquisition, the private-equity years, and the Symantec-to-Broadcom passage.
Founding stories
CacheFlow (Blue Coat Systems from 2002)
CacheFlow built appliances that stored the web closer to its readers - and rode the bubble to one of the most spectacular IPO first days of 1999. When the caching market deflated with the bubble, the company executed one of the era's cleanest pivots: the same box in the same place - between users and the internet - resold as a SECURITY control. Renamed Blue Coat in 2002, the ProxySG became the enterprise web proxy: authentication, filtering, and eventually SSL inspection, the checkpoint through which corporate web traffic learned to pass.
Packeteer
Packeteer's PacketShaper answered a question routers of the day could not: not WHETHER traffic passes, but HOW MUCH, of WHAT, and WHO goes first. Classifying flows by application and enforcing per-class rates, it created the traffic-shaping category outright - the WAN's referee in the era when a single FTP transfer could starve a branch office - and gave the industry the vocabulary of application-aware bandwidth control.
The timeline
- The CacheFlow IPO
November 1999: one of the dot-com era's legendary first-day pops - web caching priced as the future, months before the future changed its mind.
- The pivot to Blue Coat
Caching becomes proxying becomes security: the renamed Blue Coat sells the same topological position - inline, between users and the web - as policy enforcement. The ProxySG line defines the enterprise secure web gateway for a decade.
- Packeteer joins
Blue Coat acquires Packeteer (~$268 million), pairing the proxy's content control with PacketShaper's bandwidth control - visibility and enforcement of the WAN in one portfolio.
Deal figure per the public record.
- Private equity years
Thoma Bravo takes Blue Coat private (~$1.3 billion, 2011); Bain buys it (~$2.4 billion, 2015) - the SSL-inspection franchise compounding quietly outside the public markets.
- Symantec
June 2016: Symantec acquires Blue Coat for ~$4.65 billion and installs Blue Coat's Greg Clark as Symantec's CEO - the proxy company effectively taking over its buyer.
Deal figure per the public record.
- Into Broadcom
Symantec's enterprise business - ProxySG lineage included - sells to Broadcom (~$10.7 billion). The 1996 caching box's descendants now enforce web policy under their third corporate flag.
Flagship products and solutions
- ProxySGThe enterprise secure web gateway - authentication, categorization, and SSL inspection at the choke point Blue Coat made standard.
- PacketShaperThe application-aware traffic shaper that created its category - per-application visibility and rate control on the WAN.
- SSL Visibility appliancesThe dedicated decrypt-and-feed line that made 'inspect the encrypted' an architecture rather than a hack.
Key innovations
- The proxy as a security platformBlue Coat proved the inline forward proxy was the natural enforcement point for the web era - the architectural ancestor every SSE and SWG cloud on these pages descends from.
- Application-aware bandwidth controlPacketShaper's classify-then-shape model taught the industry that traffic has identity - the thinking QoS, SD-WAN steering, and app-aware firewalls all inherit.
Main markets
The lineage persists inside Broadcom's Symantec enterprise portfolio - and conceptually everywhere: every cloud proxy inspecting TLS at scale is running Blue Coat's play.
Analyst standing
- A consolidated entry because the two companies answered the same question - what happens at the checkpoint - for content and for bandwidth; together they are the prehistory of the SSE category this site's Zscaler and Netskope chapters teach.