It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda CloudGen Firewall
Overview Documentation Training Certification Materials

How to Import an Existing CloudGen Firewall into a Control Center

  • Last updated on

To manage a previously configured firewall and not lose its configuration, import the PAR file. After importing the PAR file, the Control Center automatically signs the box certificates. Deploy the PAR file to the firewall to finish adding the firewall to the Control Center.

Before You Begin

Configure log streaming to Azure Log Analytics before managing your firewall via the Control Center. For more information, see How to Configure Log Streaming to Microsoft Azure Log Analytics.

Service names must be unique. Verify that the name of the services on the firewall is not already used in the cluster.

Step 1. Transfer Certificates from the Certificate Store on the Stand-Alone Firewall to the Certificate Store on the Control Center

  1. Log into the firewall.
  2. Go to CONFIGURATION > Configuration Tree > Advanced Configuration > Certificate Store.
  3. For each certificate in the certificate store:
    1. Right-click each certificate in the list.
      export_certificate_from_store.png
    2. Click Export to File to save the certificate.
  4. Log into the Control Center.
  5. Go to CONFIGURATION > Configuration Tree > Range Settings / Cluster Settings > Certificate Store.
  6. Click Lock.
  7. For each certificate that has been exported before:
    1. Click +. The import menu is displayed.
    2. Click Import new Certificate Store Entry from File.
      import_certificate_to_range_cluster_certificate_store.png
  8. Click Send Changes.
  9. Click Activate.

Step 2. Export the PAR File on the CloudGen Firewall

Create a PAR file on the firewall. This file contains all your configuration settings.

  1. Log into the firewall.
  2. Go to CONFIGURATION > Configuration Tree > Box.
  3. Right-click on the Box node and select Create PAR file.
  4. Choose the destination folder and click Save. 
  5. Click OK.

Step 3. Import the PAR File on the Control Center

  1. Go to CONFIGURATION > Configuration Tree > Multi-Range > your range > your cluster .
  2. Right-click Boxes and select Import Box from PAR file.
  3. Select the PAR file created in Step 2.1 and click Open.
  4. Enter a Box  Name. The name cannot be changed after importing the PAR file.
  5. Click Activate.

Step 4 (optional) Rename the Service Name

If a new box is created in the configuration tree, the default name of that box is set to 'newbox'. When creating a new service in that box, the default name of the service is the same as the name of the box.

By contrast, when importing a box from a PAR file, you can enter a new name for the box. In this case, however, the name of the service is not synchronized to the new name of the box. In such cases, you can subsequently rename the service with the following steps:

  1. Go to CONFIGURATION > Configuration Tree > Multi-Range > your range > your cluster > Boxes > your imported box > Assigned Services > your service.
  2. Right-click the service that you want to rename.
  3. In the list, select Lock.
  4. In the list, select Move Service... .
    move_service.png
  5. The Select Destination Window is displayed.
  6. In the list, ensure that the path of the service stays the same as before.
  7. In the edit field, enter the new name for the service.
  8. Click OK.
  9. Click Activate.

The name of your selected service is now renamed.

Step 5. Change Configuration to Use Certificates from the Control Center Certificate Store

After importing the PAR file on the Control Center, all certificates must be reassigned at their appropriate location of usage.

Step 6. (optional) Configure Remote Management Tunnel

If your firewall cannot directly access the Control Center, configure a remote management tunnel. For more information, see How to Configure a Remote Management Tunnel for a CloudGen Firewall.

Step 7. Enable the CloudGen Firewall

Imported firewalls are disabled per default. Disabled firewalls are represented by a gray status icon.

  1. Go to CONFIGURATION > Configuration Tree > Multi-Range > your range > your cluster > your CloudGen Firewall > Box Properties.
  2. In the left menu, select Operational.
  3. Set Disable Box to no.
  4. Click Send Changes and Activate.

The status of the firewall on the Status Map (CONTROL > Status Map) now changes from gray (offline) to red with dashes (unreachable).

Step 8. Deploy the PAR file to the CloudGen Firewall 

Deploy the PAR file to the firewall.

Step 8.1 Create the PAR file on the Control Center
  1. Log into the Control Center.
  2. Expand the node for the firewall you imported in Step 3.
  3. Right-click on the box name and select Create PAR file for box.
  4. Choose the destination folder and click Save. 
Step 8.2. Import the PAR on the CloudGen Firewall
  1. Log into your firewall.
  2. Go to CONFIGURATION > Configuration Tree > Box.
  3. Right-click on the Box node and select Restore from PAR file.
  4. Click OK. 
  5. Select the PAR file created in Step 8.1 and click Open.
  6. Click Activate.
Step 8.3. Activate the Network Configuration
  1. Go to CONTROL > Box.
  2. In the left menu, expand the Network section and click Activate new network configuration.
  3. Select Failsafe.
Step 8.4. Restart the Firmware
  1. Go to CONTROL > Box.
  2. In the left menu, expand Operating Systems and click Firmware Restart.
  3. Click YES. The firmware of the firewall restarts.

The status of the firewall is now green, red, or yellow. It can take a couple of minutes for the firewall to create a management tunnel.