We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see End-of-Support for CloudGen Firewall Firmware for further information on our EoS policy.

How to Configure a Generic Web Forward

  • Last updated on

Create Web Forwards to allow SSL VPN users to access web-based internal applications. There are predefined Web Forward types for frequently used services, such as Outlook Web Access and SharePoint servers as well as generic settings that allow you full control over how the web content is rewritten. Web forwards can also be customized using User Attributes. User Attributes are defined by the administrator and filled in by the end user in the mobile or desktop portal. They allow for personalized URLs or Single Sign-On for Web Forwards. 

Configure a Generic Web Forward

  1. Go to CONFIGURATION > Configuration Tree > Box > Virtual Servers > your virtual server > Assigned Services > VPN-Service > SSL-VPN.
  2. In the left menu, select Web Forwards.
  3. Click Lock.
  4. Click + to add a web forward to the Web Forwards list. The Web Forwards List opens.
  5. Select Generic from the Web Resource Template dropdown.

    For Outlook Web Access and SharePoint web forwards, see How to Configure an Outlook Web Access Web Forward and How to Configure a SharePoint Web Forward.
  6. Enter the Visible Name. This is the name used in the desktop and mobile portal for this web forward.
  7. (optional) Enter a Link Description in HTML. The link description is displayed in the desktop portal.
  8. Enter the Root URL of the web server in the following format: Protocol type (http:// or https://) followed by the FQDN or IP address of the web server. E.g., http://your.domain.com or https://10.10.10.10
  9. Enter the Launch Path in the following format: "/" followed by the path and file name you want to request when starting the Web Forward. You can also include User or Session Attributes in the Launch URL. For more information on Attributes, see How to Use and Create Attributes.
     E.g., /wiki/${session:username}/ or /lunchmenu/${user:location}/index.php
  10. (optional) Check Must be Healthy if the Windows client has to pass a health check before launching the web forward. This setting requires a configured Access Monitor . For more information, see The Barracuda Access Monitor.
  11. (optional) To restrict access to the web forward by user group, replace the * entry in the Allowed User Groups list. Click + to add new user groups.
  12. (optional) Click + to enter the additional web servers in the Allowed Hosts list. Add all servers that must be proxied by the SSL VPN when accessing this web forward.
  13. (optional) Click Ex/Import to upload a custom icon.
  14. To configure Authentication (Single Sign-On) for this web forward, see How to Configure Single Sign On for Web Forwards
  15. Click OK.
  16. Click Send Changes and Activate.

Advanced Settings

For some web forwards, more granular control over how the content is rewritten may be required. In the left menu, click on Advanced View to set these parameters.

  • Custom Replacements – Rewrite a part of the webpage on the fly. Define a matching and corresponding replacement pattern and assign a weight to each. The lowest weight is processed first.
  • Custom Headers – Define rules to replace or remove header values for either requests, responses or both.
  • Mobile Portal Bar Exemptions – The mobile portal bar is not displayed for all paths you enter in this list. This is useful for web applications using frames.
Last updated on