Licensing

Last updated on 2024-08-05 12:19:06

The Barracuda CloudGen Firewall supports various platforms. You can manage your CloudGen Firewall individually as a stand-alone box or centrally via a Firewall Control Center. Each deployment option has its individual license type.

When licensing a hardware or virtual CloudGen Firewall, you must change the initial default password to a new password of your choice after logging in. Afterwards, you can access your firewall with your new password as long as your license is valid. If the license expires, you can access your firewall by using only your new password because the default password is deleted during the initial change.

Licenses are bound to the MAC address of the network interface the management IP is on. To activate, the firewall and the client running Barracuda Firewall Admin must have access to api.bcc.barracudanetworks.com and bcc.barracudanetworks.com on TCP port 443. When activating and installing licenses on a Firewall Control Center, only the client running Barracuda Firewall Admin must have access to the licensing server on TCP 443.

For information about CloudGen Firewall licensing options, requirements, and specifications for different platforms, see CloudGen Firewall Licensing in the Product Information documentation.

Hardware Licensing

Hardware appliances only need to be activated. Following activation, the licenses are downloaded by the firewall automatically.

For license specifications, see Hardware / Virtual / Software Licensing in the Product Information documentation.
For instructions, see How to Activate and License a Stand-alone Hardware CloudGen Firewall Appliance.

Vx Licensing

Virtual units are activated by entering the serial number and license token you received from Barracuda Customer Services. After activation, the licenses are downloaded by the firewall VM automatically.

For license specifications, see Hardware / Virtual / Software Licensing in the Product Information documentation.
For instructions, see How to Activate and License a Stand-Alone Virtual or Public Cloud Firewall or Control Center.

High Availability Cluster Licensing

When licensing units in a high availability cluster, you must activate the secondary unit first. The secondary unit will not download any licenses after activation. Instead, it waits for the primary unit to be activated. The primary unit then downloads the licenses for both units and installs the license on the secondary unit via HA sync.

For more information, see How to Activate and License a Standalone High Availability Cluster.

Licensing for Managed Firewalls

Barracuda CloudGen Firewalls managed by a Firewall Control Center are activated and licensed through the Control Center.

If you are licensing a Firewall Control Center, a managed CloudGen Firewall, or are using pool licenses, see Licensing CloudGen Firewalls in the Control Center.

Public Cloud Licensing

CloudGen Firewalls deployed in AWS, Azure, or Google public clouds are activated by entering the serial number and license token. After activation, the licenses are downloaded by the firewall VM automatically.

For license specifications, see Public Cloud Licensing in the Product Information documentation.
For information on how to activate a BYOL license on your public cloud firewall, see How to Activate and License a Stand-Alone Virtual or Public Cloud Firewall or Control Center.
To switch from PAYG to BYOL licenses, the firewall instance must be redeployed. For instructions, see Best Practice - Migrate to Different License Type for PAYG or BYOL Public Cloud Firewalls.