Barracuda Web Application Firewall

Deploying and Provisioning the Barracuda Web Application Firewall on Microsoft Azure

This guide will walk you through the steps to deploy and provision the Barracuda Web Application Firewall on Microsoft Azure.


The Barracuda Web Application Firewall on Microsoft Azure supports ONLY One-Arm Proxy mode deployment. For more information, see Configuring One-Arm Proxy Mode.

You can deploy and provision the Barracuda Web Application Firewall on Microsoft Azure using the Azure Management Portal or Azure Preview Portal.

In this article:

Azure Management Portal

To deploy and provision the Barracuda Web Application Firewall on Azure Management Portal, perform the following steps:

  1. Log into the Azure Management Portal.
  2. On the VIRTUAL MACHINES page, click NEW at the bottom of the screen.
  3. In the NEW window, navigate to COMPUTE > VIRTUAL MACHINE > FROM GALLERY.
  4. On the Choose an Image page, search for Barracuda Web Application Firewall image. Select the Barracuda Web Application Firewall image (BYOL or Hourly/Metered as per your requirement) and click Next (->) to continue.
  5. On the Virtual machine configuration page:
    1. Enter a name in the VIRTUAL MACHINE NAME field.
    2. Select the TIER (BASIC or STANDARD).
    3. Select a size for the virtual machine from the SIZE drop-down list based on the Barracuda Web Application Firewall license.

      See Licensing Options to verify the recommended instance type for your Barracuda Web Application Firewall model.

    4. In the NEW USER NAME field, enter a username. This entry is not used by the Barracuda Web Application Firewall.
    5. Clear the UPLOAD COMPATIBLE SSH KEY FOR AUTHENTICATION check box.
    6. Select the PROVIDE A PASSWORD check box and enter a password in NEW PASSWORD. Re-enter the password in CONFIRM and click Next (->). This entry is not used by the Barracuda Web Application Firewall.

      The username and password values specified will NOT be used further, but are mandatory fields for a successful configuration.

  6. On the second page of Virtual machine configuration:Click on (√).
    1. Select Create a new cloud service from the CLOUD SERVICE drop-down list.
    2. Enter a name in the CLOUD SERVICE DNS NAME field.
    3. Select a region from the REGION/AFFINITY GROUP/VIRTUAL NETWORK drop-down list.
    4. Select a subnet from the VIRTUAL NETWORK SUBNETS drop-down list.
    5. Select None for AVAILABILITY SET.
    6. Configure the ENDPOINTS to access the web interface of the Barracuda Web Application Firewall. By default, the Barracuda Web Application Firewall web interface listens on port 8000 for HTTP and port 443 for HTTPS. Make sure these ports (8000 and 443) are configured as ENDPOINTS on the Barracuda Web Application Firewall. Specify values for the following fields to configure the endpoints.
      1. NAME: a name of your choice (e.g.: GUI8000)
      2. PROTOCOL: TCP
      3. PUBLIC PORT: 8000
      4. PRIVATE PORT: 8000
    7. Follow the same steps to open other ports.
    8. Click Next (->) to continue.

After clicking on (√), Microsoft Azure begins provisioning the Barracuda Web Application Firewall. You can check the status of the provisioned Barracuda Web Application Firewall from the Microsoft Azure Management Portal under VIRTUAL MACHINES. You will see Starting (Provisioning) in the beginning on the Microsoft Azure Management Portal. Allow a few minutes before taking any further actions in the Portal. During this time, the Microsoft Azure Linux Agent and Barracuda Web Application Firewall image boot up.

Make sure you do not restart the Barracuda Web Application Firewall while it is provisioning.

Azure Preview Portal

To deploy and provision the Barracuda Web Application Firewall on Azure Preview Portal, perform the following steps:

  1. Log into the Azure Preview Portal.
  2. Click NEW at the bottom of the screen, and then click Everything (->).
  3. In the Gallery section, select Virtual machines and look for Barracuda Web Application Firewall image.
  4. Select Barracuda Web Application Firewall (BYOL or Hourly/Metered as per your requirement), go through the Product Overview and Legal Terms, and then click Create.
  5. On the Create VM page:
    1. Enter the host name in the HOST NAME field.
    2. Enter a username in the USER NAME field . This entry is not used by the Barracuda Web Application Firewall.
    3. In the SSH AUTHENTICATION KEY field, enter the RSA encrypted OpenSSH public key.
    4. Select the PRICING TIER based on your requirement.
    5. In the OPTIONAL CONFIGURATION section, select the Network and Storage account for the Barracuda Web Application Firewall.
    6. Select a group in RESOURCE GROUP.
    7. Choose the subscription for the instance and click Create.

After clicking on Create, Microsoft Azure begins provisioning the Barracuda Web Application Firewall. You can check the status of the provisioned Barracuda Web Application Firewall from the Microsoft Azure Preview Portal. Allow a few minutes before taking any further actions in the Portal. During this time, the Microsoft Azure Linux Agent and Barracuda Web Application Firewall image boot up.

Make sure you do not restart the Barracuda Web Application Firewall while it is provisioning.

When the Barracuda Web Application Firewall is deployed using the Azure Preview Portal, it will automatically open port 8000 as endpoint to access the web interface of the Barracuda Web Application Firewall. Configure additional endpoints which you want to use for creating services on the Barracuda Web Application Firewall.

PowerShell

If you are using PowerShell, you can confirm that you have the endpoint set up using the command below:

Get-AzureVM [vmname] -ServiceName [servicename] | Get-AzureEndpoint

If the endpoint is not added, use the following command to add an endpoint:

Get-AzureVM [vmname] -ServiceName [servicename] |  Add-AzureEndpoint -Protocol tcp -LocalPort 8000 -PublicPort 8000 -Name Admin |  Update-AzureVM

Next Step

Continue with the Barracuda Web Application Firewall Quick Start Guide - Microsoft Azure for licensing and initial configuration of your virtual machine.

 


Feedback Did you find this article helpful: |

Still need help?

If you have a technical issue with the product, please contact Barracuda Networks Technical Support.