How to Backhaul Traffic from Sites over a Private Edge Service

Last updated on 2025-02-04 07:30:09

The SecureEdge Manager allows you to backhaul traffic from Sites on Private Edge Services. The Private Edge Service can be used to secure traffic that flows from Sites over the Internet. Some of the key features of Backhaul Traffic from Sites are:

To enable Backhaul Traffic from Sites, you need to update SecureEdge appliances to the firmware version 9.0.3 or higher.
You can enable Backhaul Traffic from Sites on any Private Edge Service, including ones with downstream Sites/ Private Edge Services and ones with mixed downstreams.
By default, Backhaul Traffic from Sites is disabled for new or existing Private Edge Services.
Note that when you enable Backhaul Traffic from Sites, the existing Access Control Lists (ACLs) on your connected Site / Private Edge Service are applied .
Enabling Backhaul Traffic from Sites forces Internet traffic from all downstream LAN networks, irrespective of your downstream Site / Private Edge Service, to pass through this Edge Service.
All SECURITY policies, such as SSL Inspection, Advanced Threat Protection (ATP), Intrusion Prevention System (IPS), and Web Filtering, are applied only on the Private Edge Service. Events, such as IPS hits, will therefore be reported on their corresponding dashboards.

Note that Sites connected to the Private Edge Service securing the traffic must have a global DNS forwarder set. You can configure Primary/Secondary DNS via Sites > Settings > Advanced Settings. For more information, see How to Create a T/VT Site Configuration in Barracuda SecureEdge.

Enable Backhaul Traffic from Sites

Go to https://se.barracudanetworks.com and log in with your existing Barracuda Cloud Control account.
In the left menu, click the Tenants/Workspaces icon and select the workspace containing your Private Edge Service.
Go to Infrastructure > Edge Services.
The Edge Services page opens. Select the Private Edge Service you wish to enable Backhaul Traffic from Sites for.
Click on the arrow icon next to the Private Edge Service you are interested in.
The selected <Name of Your Private Edge Service > page opens.
In the Edge Service menu, go to Settings > Advanced Settings.
In the Advanced Settings section, specify a value for the following:
- Backhaul Traffic from Sites – Click to enable backhauling and securing of all Internet traffic from a downstream Site's LAN networks.
Click Save.