It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda CloudGen Firewall
Overview Documentation Training Certification Materials

How to Configure the Legacy Barracuda Web Security Service aka FLEX

  • Last updated on

This article is for the legacy Barracuda Web Security Service, formerly known as FLEX. To configure the new Barracuda Web Security Service, see How to Configure Web Security Service Integration using GRE Tunnels and a Static Public IP.

To apply central usage policies and scan your web traffic for malware or unwanted content, forward web traffic to the Barracuda Web Security service, formerly known as FLEX, and configure your clients to use the Barracuda CloudGen Firewall as a proxy . The Barracuda Web Security Server is licensed on a per-user basis. If the number of users consistently exceeds the licensed number, traffic continues to be filtered, but you will be asked to upgrade your subscription to the actual user number. If the service expires, traffic is no longer filtered; it is only passed through.

Before You Begin

To configure the Barracuda Web Security service, you need the following components:

  • A Barracuda Web Security subscription connected to your Barracuda Cloud Control account.

  • The serial number and proxy server host for your Barracuda Web Security service subscription:

To locate your serial number, log into your Barracuda Cloud Control account, and click on the SUPPORT tab in the Web Security section.

WSS.png

Step 1. Configure the Barracuda Web Security Service

Enable the Barracuda Web Security service in the HTTP Proxy settings.

  1. Go to CONFIGURATION > Configuration Tree > Box > Assigned Services > HTTP Proxy > HTTP Proxy Settings .

  2. Click Lock. 

  3. Set Enable Barracuda Web Security to Yes.

  4. Click Set / Edit to edit the Web Security Settings. The Web Security Settings window opens.

enable_web_security.png

  1. Enter the Web Security Settings for your Barracuda Web Security service account:

  • Web Security Service Host – Enter the URL for your Barracuda Web Security service account. E.g., ple1.proxy.purewire.com

  • Authentication Type – Select User/Password to use your Barracuda Cloud Control credentials, or select AuthenticationKey to use an authentication key created in your Barracuda Networks Account on the Web Security > Configuration > Key Management page.

  • Web Security Serial – The Barracuda Web Security service serial number.

  • Web Security User – Your Barracuda Cloud Control username.

  • Web Security Password – (User/password authentication only) Your Barracuda Cloud Control password.

The password can consist of small and capital characters, numbers, and non alpha-numeric symbols, except the hash sign (#).

  • Web Security Key – (Key authentication only) Select your authentication key.

  • Use Web Security for SSL/TLS – To redirect SSL/TLS HTTPS traffic to the Barracuda Web Security service, select Yes.

To also apply the Web Security Service policies to HTTPS traffic, you must create an How to Create an App Redirect Access Rule access rule that forwards HTTPS traffic to the local proxy IP address and port. There is no specific block error page. The end user receives a non-specific server error for blocked HTTPS pages.

  • Excluded Domains – Enter domains you do not want to forward for processing by the Barracuda Web Security service.

set_web_security.png

  1. Click OK.

  2. Click Send Changes and Activate.

Step 2. Configure your Clients to use Barracuda Web Security via the CloudGen Firewall

Configure your clients to use the Barracuda CloudGen Firewall as a forwarding proxy.