Can you move the machine account created by IWA Direct to a different container?
Some policies require all machine accounts be moved from the default Active Directory OU, Computers. However, when IWA Direct is configured in SGOS 220.127.116.11 it creates a machine object in the the Computers OU of your Active Directory tree structure.
While it is physically possible to move the object and in fact the ProxySG will locate the object in its new context after a reboot, Blue Coat does not currently support this configuration.
Blue Coat are looking into adding this functionality into newer versions of IWA Direct