Barracuda Web Filter

Barracuda Web Filter



Step 3: Configure the Barracuda Web Filter

Last update: Monday, 16. Dec 2013

After choosing the IP address of the Barracuda Web Filter and opening the necessary ports on your corporate firewall, configure the Barracuda Web Filter from the web interface per the instructions below. Make sure the computer from which you are configuring the Barracuda Web Filter is connected to the same network and that the appropriate routing is in place to allow connection to the Barracuda Web Filter’s IP address via a web browser.

In this article:

Understanding Operating Modes

Before you configure the Barracuda Web Filter to filter traffic, it is recommended to become familiar with the possible operating modes and how they affect which traffic can be filtered and blocked. For initial configuration with an inline deployment, you should set the Operating Mode to Audit from the BASIC > IP Configuration page, and note how traffic is logged.

Operating modes include:

  • Active - The Barracuda Web Filter actively protects your network by detecting spyware-infected machines on your network, using transparent HTTP proxy scanning to block and log non-HTTP spyware traffic, and using filters to block and log web traffic that conflicts with your organization's Internet usage policy. Note: In this mode, the system operates in Active Bridging Mode to manage connections between network devices and the Barracuda Web Filter.
  • Audit - In this mode, for an inline deployment, HTTP traffic is logged but not blocked, and downloads over HTTP will NOT be scanned for viruses or spyware. Use this mode to preview how your currently configured Internet policies would be applied, but without disturbing production traffic. For forward proxy deployments, traffic is logged and policies are applied, just as in Active mode.

    For non-HTTP traffic, the following configured policies DO apply:
    • Application blocking
    • IP Block/Exempt rules (Exempt traffic is logged)
    • Outbound spyware activity is blocked

  For non-HTTP traffic, the following does NOT apply:

    • Content Filter settings
    • MIME-type blocking
    • Domains - blocked and allowed rules
    • URL Patterns - logged only
    • Categories - logged only
    • Exceptions

In Audit mode, access to spyware sites and spyware downloads is not blocked but is logged. Note: If the Barracuda Web Filter is deployed as a web traffic monitoring device (as opposed to a web traffic filtering device), the system monitors traffic sent through any mirrored (spanned) port on your switches.

  • Safe - This mode can only be entered automatically by the Barracuda Web Filter and is not configurable via the web interface. When the System Load exceeds normal thresholds for an extended period, as indicated on the BASIC > Status screen, the device shifts to Safe mode until the System Load returns to normal levels. Note: In this mode, traffic is neither filtered nor logged. Safe mode does not apply if the Barracuda Web Filter is deployed in a WCCP configuration.

Configure the Barracuda Web Filter

  1. From a web browser, enter the IP address of the Barracuda Web Filter followed by port.
    For example: http://192.168.200.200:8000
  2. To log into the web interface, enter admin for the username and admin for the password. Select the BASIC > IP Configuration page and perform the following steps. Click the Help button on the right side of each section title for additional online help.
    1. Enter the IP address of your Barracuda Web Filter that you chose in the steps above. Enter the Subnet Mask that is used to define this area of your network, and the Default Gateway, which is the IP address of the next outbound hop from the Barracuda Web Filter. The Barracuda Web Filter sends all egress traffic to the default gateway via the WAN port on the front of the appliance.

    2. Enter the IP address of your primary and secondary DNS servers (if these have not yet been set up).

    3. Set Operating Mode to Audit.

    4. Set Enable Proxy on WAN to No to protect against WAN-side proxy requests if the Barracuda Web Filter is deployed outside of the corporate firewall.

    5. Enter the Default Hostname which will be displayed in alerts, notifications, and messages sent by the Barracuda Web Filter.

    6. Enter the Default Domain which will be displayed in alerts, notifications, and messages sent by the Barracuda Web Filter.

    7. Click Save Changes.

 

If the IP address of your Barracuda Web Filter on the BASIC > IP Configuration page is changed, you are disconnected from the web interface. If this occurs, log in again using the new IP address.

Activate Your Subscriptions

After installation, your Energize Updates and other optional subscriptions must be activated for the Barracuda Web Filter to be fully enabled and to continue to receive the latest updates to all spyware, virus and category definitions from Barracuda Central. The Energize Updates service is responsible for downloading these updates to your Barracuda Web Filter.

Product Activation

  1. At the top of every page, you may see the following warning:
    ActivationWarning.JPG
  2. Click on the designated link to open up the Product Activation page in a new browser window.

  3. On the Product Activation page, fill in the required fields and click Activate. A confirmation page opens to display the terms of your subscription.

  4. Return to the Barracuda Web Filter web interface and navigate to the BASIC > Status page. In the Subscription Status section, verify that the word Current appears next to Energize Updates, Instant Replacement Service (if purchased) and Premium Support (if purchased):

subscription_status.png

There may be a slight delay of a few minutes for the display to reflect your updated subscription status. If the status is still showing as not activated, click Refresh in the Subscription Status section.

If your subscription status does not change to Current within an hour, and you have ensured that all required network ports are open, or if you have trouble filling out the Product Activation page, please call your Barracuda Networks sales representative.

Update the Barracuda Web Filter Firmware

Prior to upgrading the firmware on your Barracuda Web Filter, it is always recommended that you read the release notes. To update the firmware on the Barracuda Web Filter:

  1. From the web interface, select ADVANCED > Firmware Update.
  2. Read the release notes to learn about the latest features and fixes provided in the new firmware version.
  3. Click Download Now next to Latest General Release. Download Now is disabled if the Barracuda Web Filter is already up-to-date with the latest firmware version.
    The Barracuda Web Filter begins downloading the latest firmware version. You can view the download status by clicking Refresh. A message displays once the download is complete. It is important to not power-cycle the unit during the download.
    Updating the firmware may take several minutes. Do not turn off the unit during this process.
  4. Click Apply Now when the download completes. The Barracuda Web Filter will apply the firmware and automatically reboot. It is important to not power-cycle the unit during this process. A Status page displays the progress of the reboot. Once the reboot is complete, the login page appears.

Update Definitions

To apply the newest definitions provided by Energize Updates:

  1. Select ADVANCED > Energize Updates.
  2. Select On for Automatically Update. The recommended setting is On for all available definitions.
  3. Check to see if the current version is the same as the latest general release. If the rules are up-to-date, proceed to the next section. If the rules are not up-to-date, continue to the next step.
  4. Click Update to download and install the latest available definitions onto the Barracuda Web Filter.

Continue with Step 4: Configure and Secure the Web Interface.


Feedback
If you have a technical issue with the product, please contact Barracuda Networks Technical Support. Did you find this article helpful: |