We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see https://campus.barracuda.com/doc/71862301/ for further information on our EoS policy.

How to Configure Barracuda Web Security Service

  • Last updated on

To apply central usage policies and scan your web traffic for malware or unwanted content, forward web traffic to the Barracuda Web Security service, formerly known as FLEX, and configure your clients to use the Barracuda NG Firewall as a proxy. The Barracuda Web Security Server is licensed on a per-user basis. If the number of users consistently exceeds the licensed number, traffic continues to be filtered, but you will be asked to upgrade your subscription to the actual user number. If the service expires, traffic is no longer filtered; it is only passed through.

In this article

What you need before you begin:

  • A Barracuda Web Security Service subscription connected to your Barracuda Cloud Control account.
  • The serial number and proxy server host for your Barracuda Web Security Service subscription:
    To locate your serial number, log into your Barracuda Cloud Control account and click on the SUPPORT tab in the Web Security section.
    WSS.png

Enable Barracuda Web Security Service

Enable the Barracuda Web Security Service in the HTTP Proxy settings.

  1. Open the HTTP Proxy Settings page (Config > Full Config > Box > Virtual Servers > your virtual server > HTTP Proxy). 
  2. Click Lock
  3. Set Enable FLEX to Yes.
  4. Edit the FLEX Settings. The FLEX Settings window opens.
    flex00.png
  5. Enter the FLEX Settings for your Barracuda Web Security Service account:
    • Flex Service Host – Enter the Service Host for your Barracuda Web Security Account. E.g., ple1.proxy.purewire.com
    • Authentication Type – Select User/Password to use your Barracuda Cloud Control credentials.
    • Flex Serial – The Barracuda Web Security Service serial number.
    • Flex User – Your Barracuda Cloud Control username.
    • Flex Password(User/Password authentication only) – Your Barracuda Cloud Control password.  
    • Flex Key(Authenticationkey authentication only) – Select the authentication key you created in your Barracuda Web Security account (Web Security > Configuration > Key Management).
    • Use Flex for SSL/TLS – To redirect SSL/TLS HTTPS traffic to Barracuda Web Security Service, set to Yes.

      To also apply the Web Security Service policies to HTTPS traffic, you must create a App Redirect access rule that forwards HTTPS traffic to the local proxy IP address and port.

    • Excluded Domains – Enter domains you do not want to forward for processing by the Barracuda Web Security Service.
      flex01.png
  6. Click OK.
  7. Click Send Changes and Activate.

Configure Clients to Use the Barracuda Web Security Service via the Barracuda NG Firewall

Configure your clients to use the Barracuda NG Firewall as a forwarding proxy.

Barracuda Web Security Service Settings
SettingDescription

Flex Service Host

URL of the Barracuda Web Security Service.

Authentication Type

Flex Serial

The Barracuda Web Security Service serial number.

Flex User / Password

The Barracuda Web Security Service username and password.

Flex Key

The Barracuda Web Security Service authentication key. 

Use Flex for SSL/TLS

To redirect SSL/TLS HTTPS traffic to the Barracuda Web Security Service, select this checkbox.

There is no specific block error page. The end user receives a non-specific server error for blocked HTTPS pages.

Excluded DomainsAdd domain names that you do not want to forward to the Barracuda Web Security Service.
Last updated on