Configuring an Application as a Template

You can configure an application on Barracuda WAF-as-a-Service without deploying it and use this configuration as a template for other applications. This template serves as a baseline for security settings across all applications, ensuring consistent and robust security measures are uniformly applied. Using a standardized configuration, you can streamline the deployment process, reduce the risk of misconfigurations, and maintain security across your entire application portfolio.

You can configure the application to be used as a template through the web interface, REST API, or Snapshot.

Configuring the application through the web interface

1. On the Applications page, identify and click on the application you want to configure and save it as a template.

2. Select Endpoints in the left panel and click Edit in the Deployment Location section.

3. Uncheck the Deploy this application as a service, hosted by Barracuda, and Deploy this application in my own container checkboxes.

4. Click Save.

Configuring the application through the REST API

1. Go to https://api.waas.barracudanetworks.com/v4/swagger/#/App%20%7C%20Endpoints/patchEndpoints

2. Set the deploy_in_region parameter to false in the API payload.

Example:

"deployment": {
        "primary": "null",
        "secondary": "null",
        "is_auto_region": true,
        "third_location": null,
        "redirect_dc_traffic_to_azure": false,
        "is_dedicated_ip": false,
        "deploy_in_region": false
    },

Configuring the application through Snapshot

1. In the Snapshot file:

   1. Set the deploy_in_region parameter to false.

   2. Set the name value to null under customer container.

Example:

{
  "endpoints": {
    "ports": [
      {
        "protocol": "Redirect Service",
        "port": 80,
        "waf_container_exposed_port": null,
        "is_permanent_redirect": false
      },
      {
        "protocol": "HTTPS",
        "port": 443,
        "waf_container_exposed_port": null
      }
    ],
    "domains": [
      "abc.com"
    ],
    "deployment": {
      "primary": null,
      "secondary": null,
      "is_auto_region": true,
      "third_location": null,
      "redirect_dc_traffic_to_azure": false,
      "is_dedicated_ip": false,
      "deploy_in_region": false
    },
    "advanced": {
      "session_timeout": 60,
      "keepalive_requests": 64,
      "ntlm_ignore_extra_data": false,
      "enable_vdi": false,
      "enable_http2": false,
      "enable_websocket": false,
      "enable_fingerprint": true,
      "enable_web_application_firewall": true,
      "enable_proxy_protocol": false
    },
    "https": {
      "enable_tls_1": false,
      "enable_tls_1_1": true,
      "enable_tls_1_2": true,
      "enable_tls_1_3": true,
      "enable_ssl_3": false,
      "cipher_suite_name": "all",
      "custom_ciphers": [],
      "enable_pfs": false
    },
    "certificate": {
      "use_automatic": true,
      "ssl_certificate": "",
      "encrypted_ssl_private_key": "",
      "aes_key_encrypted": "",
      "aes_key_customer_container": "",
      "enable_container_secret": false
    },
    "cname": "app792535.azurelab.cudawaas.com",
    "sni_certificates": []
  },
    "customer_container": {
      "name": null
    }
  }