How to Configure Barracuda Web Security Service

To apply central usage policies and scan your web traffic for malware or unwanted content, forward web traffic to the Barracuda Web Security service, formerly known as FLEX, and configure your clients to use the Barracuda NG Firewall as a proxy. The Barracuda Web Security Server is licensed on a per-user basis. If the number of users consistently exceeds the licensed number, traffic continues to be filtered, but you will be asked to upgrade your subscription to the actual user number. If the service expires, traffic is no longer filtered; it is only passed through.

In this article

What you need before you begin:

• A Barracuda Web Security Service subscription connected to your Barracuda Cloud Control account.
• The serial number and proxy server host for your Barracuda Web Security Service subscription:
  To locate your serial number, log into your Barracuda Cloud Control account and click on the SUPPORT tab in the Web Security section.
  

Enable Barracuda Web Security Service

Enable the Barracuda Web Security Service in the HTTP Proxy settings.

1. Open the HTTP Proxy Settings page (Config > Full Config > Box > Virtual Servers > your virtual server > HTTP Proxy). 
2. Click Lock. 
3. Set Enable FLEX to Yes.
4. Edit the FLEX Settings. The FLEX Settings window opens.
   
5. Enter the FLEX Settings for your Barracuda Web Security Service account:
   
   • Flex Service Host – Enter the Service Host for your Barracuda Web Security Account. E.g., ple1.proxy.purewire.com
   • Authentication Type – Select User/Password to use your Barracuda Cloud Control credentials.
   • Flex Serial – The Barracuda Web Security Service serial number.
   • Flex User – Your Barracuda Cloud Control username.
   • Flex Password(User/Password authentication only) – Your Barracuda Cloud Control password.  
   • Flex Key(Authenticationkey authentication only) – Select the authentication key you created in your Barracuda Web Security account (Web Security > Configuration > Key Management).

   • Use Flex for SSL/TLS – To redirect SSL/TLS HTTPS traffic to Barracuda Web Security Service, set to Yes.

     To also apply the Web Security Service policies to HTTPS traffic, you must create a App Redirect access rule that forwards HTTPS traffic to the local proxy IP address and port.

   • Excluded Domains – Enter domains you do not want to forward for processing by the Barracuda Web Security Service.
     
6. Click OK.
7. Click Send Changes and Activate.

Configure Clients to Use the Barracuda Web Security Service via the Barracuda NG Firewall

Configure your clients to use the Barracuda NG Firewall as a forwarding proxy.

Barracuda Web Security Service Settings