Getting Started - Control Center for Google Cloud

The Barracuda Firewall Control Center for Google Cloud is available as a Bring Your Own License (BYOL) image from Google Launcher. Two models are available: the VCC610 supports two ranges and unlimited clusters, the VCC400 one range and three clusters. The Control Center can manage both on-premises hardware and virtual firewalls, as well as CloudGen Firewalls in the public cloud. It is not possible to use the Control Center in a high availability cluster.

Before You Begin

• Deploy the Firewall Control Center for Google Cloud image from Google Launcher or by uploading the image. For more information, see Google Cloud Platform Deployment or https://console.cloud.google.com/launcher/partners/barracuda-release.
  
• Google Launcher automatically opens ports TCP 807, TCP 806 and TCP 692 for management traffic and remote management tunnel access to the Control Center.
  
• Activate the license on the box layer of the Control Center. For more information, see How to Activate and License a Stand-Alone Virtual or Public Cloud Firewall or Control Center.
  

Step 1. Export the Base License on Box Layer

1. The temporary root password for the Control Center instance is displayed on the post-install page:
   
2. Log into the box layer of the Control Center.
   • IP Address/ Name – Enter the public IP address, or, if connected to the VPC via client-to-site, the private IP address associated with the Control Center.
   • Username – Enter root.
   • Password – Enter the temporary Admin password listed on the post-install page after deploying the Control Center via Google Launcher.
     
3. Open CONFIGURATION > Configuration Tree > Box > Box Licenses.
4. Click Lock.
5. In the Licenses table, select the Base License. Then, click Im/ Export and select Export to Clipboard or Export to File.
   

Step 2. Configure CC Identification Settings

The CC Identification settings are required to secure communication between the Control Center and the CloudGen Firewalls it manages.

1. Log into the Control Center layer.
   
2. Click Trust.
   
3. Go to CONFIGURATION > Configuration Tree > Multi-Range > Global Settings > CC Identity. The This Connection is Untrusted pop-up opens.
4. Click No.
   
5. Click Lock.
6. In the Organization field, enter your organization name.
7. In the CC Identification section, click Import and select Import from Clipboard or Import from File to import the base license exported in Step 3. The Certificate View window opens.
8. Click OK. The End User License Agreement window opens.
9. Select I agree and click OK.
   
10. In the left menu, click Trust Chain.
11. Define the keys and certificates required for secure communication between the Control Center and the CloudGen Firewalls that it will manage:
    • CC Private Key – Click New Key and specify the key length.
    • CC Certificate – Click Edit and specify the certificate settings.
    • CC SSH Key – Click New Key.
12. Click Send Changes and Activate.

Step 3. (optional) Complete the Auto-Activation Form

To automatically activate managed firewall licenses, you must enter the data for the auto-activation form once.

1. Log into the Control Center layer.
2. Go to CONFIGURATION > Configuration Tree > Multi-Range > Global Settings > CC Parameters.
3. In the left menu, select Activation Template.
4. Click Lock.
5. Enter the Owner and Purchase Information.
6. Click Send Changes and Activate.

Next Steps

Continue with the steps below to set up the Control Center in Google Cloud according to your needs.