It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda SecureEdge
Overview Documentation Training Certification Materials

How to Migrate WSG Forward Proxy Setups

  • Last updated on

This article provides migration instructions for WSG forward proxy setups in SecureEdge. The forward proxy setup supports High Availability

Forward Proxy Deployment

The figure below shows a forward proxy deployment.

fw-proxy.png

For SecureEdge devices, the network link should always be configured as a LAN link. A WAN link is required only for the initial setup, and the same connection can be used.

Note that in the following example the proxy address will be set to 10.1.0.3 and the border firewall / internet gateway address to 10.1.0.1.

Initial Setup

  1. Add the appliance to your SecureEdge Manager account as a Site device with the following properties:

  • Configure a Dynamic WAN on port P4 (only needed for initial setup). For basic Site device configuration information, see How to Create a T/VT Site Configuration in Barracuda SecureEdge.

    wan-setup.png

  • Configure a LAN on port P3 to match the proxy IP configuration ( 10.1.0.3/24 ).

    mylan.png

  • Under the Site menu of your Site, go to Settings > LAN and click Add Static Route.

    • Add these two routes:
      1.0.0.0/1 and 128.0.0.0/1 via your internet gateway, for example, 10.1.0.1. Repeat the step to add the second static route.

      route1.png

  • Under the Site menu of your Site, go to Settings > Advanced settings and toggle the following two options:

    • Enable Proxy Connect – Click to enable.

      • Proxy Connect Sockets (Optional) – Enter the IP address. For example, in this case, 10.1.0.3:3128 This creates a proxy socket listening on the LAN IP at port 3128 for HTTP+S traffic.

    • Enable Reporting – Click to enable. Enabled by default.

      proxy-connect.png

  1. The box requires temporary internet access via P4 to download its configuration. By default, port P4 uses DHCP. Note: Static configuration can be set either through the bootstrap config or the web UI running on the device. For more information on Barracuda SecureEdge devices, see Hardware Deployment.

Important Information on Hardware Deployment

  • Ensure the box is fully booted and connected to the internet via P4. Wait 3 minutes to allow the SecureEdge Manager to download and apply the configuration.

  • Disconnect P4 and connect the appliance to your LAN switch via P3.