Barracuda Web Application Firewall

Barracuda Web Application Firewall



Deploying the Barracuda Web Application Firewall Vx - Windows Azure

Last update: Monday, 17. Mar 2014

This guide will walk you through the steps to upload the Barracuda Web Application Firewall Vx to your Windows Azure account and provision it. Make sure you've completed the steps in the article Windows Azure before continuing with the instructions below.


The Barracuda Web Application Firewall Vx on Windows Azure supports ONLY One-Arm Proxy mode deployment. For more information, see Configuring One-Arm Proxy Mode.

In this article:

Upload the Barracuda Web Application Firewall Vx VHD on Windows Azure portal

Now install the Windows Azure module for Windows PowerShell and configure the connectivity as mentioned above.

  1. Click Start, click All Programs, click Windows Azure, right-click Windows Azure PowerShell, and then select Run as administrator.
  2. Enter the command below to upload the Barracuda Web Application Firewall Vx image from your workstation to the Windows Azure portal on Windows Azure PowerShell.

Add-AzureVhd -LocalFilePath <Local_path_of_the_vhd_file > -Destination <Uri_to_blob>

           where:            

  • LocalFilePath is the path on your local workstation where your Barracuda Web Application Firewall Vx Virtual Hard Disk (VHD) is stored.
  • Destination is the uri for the blob; i.e, this will be the URI of the container to which you want to upload the VHD on the Windows Azure Management Portal. To get the URI for the container, log in to your portal and navigate to STORAGE, and then click on CONTAINERS and look for the container you created above (under Create a Container in your storage account to store your Barracuda Web Application Firewall Vx image). Copy the URL next to your container name.

              Upload_BWAF_VHD.jpg

 

For example:

  Add-AzureVhd -LocalFilePath C:\Users\user1\Desktop\WAF_770.026_azure.vhd –Destination http://cudastorage02.blob.core.windows.net/images/WAF_770.026_azure.vhd

Create an IMAGE or a DISK from the Uploaded VHD

 Once the VHD upload has finished, you must create the image or disk out of the uploaded VHD. Follow these steps to create the image or disk from the uploaded VHD.

  1. Sign in to the Windows Azure Management Portal.  
  2. Navigate to VIRTUAL MACHINES, and then click IMAGES or DISKS.

    You can create ONLY one Barracuda Web Application Firewall Vx instance per disk, whereas an image allows you to create multiple instances of the Barracuda Web Application Firewall Vx.

  3. Click CREATE at the bottom of the screen.
  4. In the pop-window, enter the following details:
    1. NAME: Name to identify the created image or disk.
    2. DESCRIPTION: Description for the image (Available ONLY in IMAGES).
    3. VHD URL: Browse and select the uploaded VHD
    4. Check the The VHD contains an operating system check box and select LINUX for OPERATING SYSTEM FAMILY, and then click the check mark.

Provision the Barracuda Web Application Firewall Vx using the uploaded VHD on Windows Azure

Follow the steps below after uploading the Barracuda Web Application Firewall Vx image to Windows Azure to provision the Barracuda Web Application Firewall Vx.

  1. Log in to the Windows Azure Management Portal.

  2. Navigate to the VIRTUAL MACHINES page and then click on NEW at the bottom of the screen and select FROM GALLERY.


               VM_FROM_GALLERY.jpg

  3. Select MY IMAGES or MY DISKS and select the appropriate image/disk, and then click Next (->).

                Gallery_Image.jpg

  4. The configuration required in case of MY IMAGES and MY DISKS are as follows:

    1. In case of MY DISKS, configure VIRTUAL MACHINE NAME and SIZE, and then click Next (->).

      See Barracuda Web Application Firewall Vx Models on Windows Azure to verify the recommended instance type for your Barracuda Web Application Firewall Vx model.

       

       DISK_VM_Config.jpg

    2. In case of MY IMAGES:

      1. Configure VIRTUAL MACHINE NAME and SIZE.

        See Barracuda Web Application Firewall Vx Models on Windows Azure to verify the recommended instance type for your Barracuda Web Application Firewall Vx model.

      2. In the NEW USER NAME field, enter a random username. This entry is not used by the Barracuda Web Application Firewall.

      3. Clear the UPLOAD COMPATIBLE SSH KEY FOR AUTHENTICATION check box.

      4. Select the PROVIDE A PASSWORD check box and enter a password in NEW PASSWORD. Re-enter the password in CONFIRM and click Next (->). This entry is not used by the Barracuda Web Application Firewall.

         

        IMAGE_VM_Config.jpg

        The username and password values specified while configuring MY IMAGES will NOT be used further, but are mandatory fields for a successful configuration.

  5. Configure the CLOUD SERVICE DNS NAME and REGION/AFFINITY GROUP/VIRTUAL NETWORK. Select None for AVAILABILITY SET, and then click Next (->).

                 VirtualMachine_Configuration.jpg

  6. Configure the ENDPOINTS to access the web interface of the Barracuda Web Application Firewall Vx. By default, the Barracuda Web Application Firewall Vx web interface listens on port 8000 for HTTP and port 443 for HTTPS. Make sure these ports (8000 and 443) are configured as ENDPOINTS on the Barracuda Web Application Firewall Vx. Additionally, in order to be notified of virtual appliance (re)boots due to initial installation, system upgrades, instance changes or other administrative reasons, make sure to add port 40080 also as your endpoint. Specify values for the following fields to configure the endpoints:

    1. NAME: a name of your choice (e.g.: GUI8000)
    2. PROTOCOL: TCP
    3. PUBLIC PORT: 8000
    4. PRIVATE PORT: 8000
      ...and click on  (√).

          Follow the same steps to open other ports.
        
                         AddingEndPoints.jpg

After clicking on (√), Windows Azure begins provisioning the Barracuda Web Application Firewall Vx. You can check the status of the provisioned Barracuda Web Application Firewall Vx from the Windows Azure Management Portal under VIRTUAL MACHINES. You will see Starting (Provisioning) in the beginning on the Windows Azure Management Portal. Allow a few minutes before taking any further actions in the Portal. During this time, the Windows Azure Linux Agent and Barracuda Web Application Firewall Vx image boot up.

Make sure you do not restart the Barracuda Web Application Firewall Vx while it is provisioning. If the status displays as Stopped on Windows Azure Management Portal under VIRTUAL MACHINES, do not restart it manually as it will automatically restart after a few minutes, and the status will again display as Running.


Continue with the Barracuda Web Application Firewall Vx Quick Start Guide - Windows Azure for licensing and initial configuration of your virtual machine.

 


Feedback
If you have a technical issue with the product, please contact Barracuda Networks Technical Support. Did you find this article helpful: |