We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see End-of-Support for CloudGen Firewall Firmware for further information on our EoS policy.

Licensing F-Series Firewalls in the Control Center

  • Last updated on

The Barracuda NextGen Control Center is licensed by installing the base license on both the box layer and the management interface of the Control Center. For managed NextGen F-Series Firewalls, the Control Center manages, assigns, and updates VF and SF pool licenses and, as an option, can also automatically activate licenses. To activate licenses the Control Center and the client running NextGen Admin must have access to api.bcc.barracudanetworks.com.

Licensing a Barracuda NextGen Control Center

If you used the CC Wizard, all licenses are automatically downloaded and installed on the box layer and the management interface of the Control Center. If the CC Wizard is not supported for your deployment type or platform, you must manually install the Control Center license on the management interface to establish the CC identity after activating the license on the box layer. Pool licenses are also bound to the base license of the Control Center.

For more information, see How to Manually Install the Licenses for the Control Center.

Licensing managed F-Series Firewalls

Managed F-Series Firewalls can be licensed with single or pool licenses.

Single licenses with unattended or manual license activation

Single licenses are bound to the MAC and cpuid of the individual firewall and cannot be transferred. To make deploying a large number of firewalls easier, the Control Center can automatically fill in or complete the Barracuda Activation for newly managed firewalls using single licenses. If you have filled in the Activation Template (Config > CC Parameters) on the Control Center, the form is automatically filled in. By enabling unattended activation in the Barracuda Activation tab for you license, you will not be prompted when a unit is activated.

Pool licenses

There are three types of pool licenses:

  • F – For hardware appliances. Hardware pool licenses must be purchased in combination with the hardware appliances.
  • VF – For virtual appliances.
  • SF – For software licenses. 

Pool licenses can only be purchased in multiples of five and are bound to the base license of the Control Center. This means that they can be assigned freely to all firewalls of the same product type and model as the pool license managed by that Control Center. The licenses are assigned and continuously renewed for all pool-licensed managed firewalls. Box licenses derived from a renewed pool license will be updated automatically on the managed firewalls.

For more information, see How to Install and Assign Pool Licenses on a Control Center.

Managing pool licenses


The Pool Licenses section on the Barracuda Activation page offers several actions for license handling. To access the context menu options, right-click a license from the Pool Licenses list:

  • Import Pool License – Import the pool license. You are prompted to enter the Token and select the Product Type. The pool license is now listed in the Pool Licenses section. 
  • Remove Pool BAR <License Number> – Removes the selected pool license.
  • Use Unattended Activation – If you activate this option, Barracuda NextGen Admin will not ask for personal contact information upon activating licenses on Barracuda servers. Activation templates can be edited in the configuration on Global, Range, and Cluster levels.
  • Update Licenses on CC – Trigger an instant check if licenses are updated on the Barracuda license servers. (This check is performed hourly in the background.)
  • Move Instances to another Pool – Replace the box licenses derived from one pool license with box licenses from another pool license. This can be used when a new pool license with a bigger pool was purchased. In the next step, you can select from which new pool the licenses should be generated. The new pool licenses must be already listed (i.e., previously imported) in the Pool Licenses window. The new license pool must also have enough free instances as in the old pool and must also contain all the modules from the old license pool and, optionally, additional ones.
  • Reassign Licenses to Instances – If the pool license was renewed, but box licenses were not automatically updated by the Control Center, use this option to manually trigger the update. 
  • Refresh – Refresh the Pool Licenses list.
  • Tools – Opens the standard Tools context menu from where you can export the list to file or clipboard.

Renewing pool licenses

When your pool licenses are renewed, they are automatically downloaded to the Control Center and thereby replace the old pool license. All managed firewalls using the pool license enter grace mode until the admin reassigns the license to all instances of the pool license. Note that the licenses are not assigned and updated automatically because a maintenance window is required to update the licenses. In addition, reassigning the licenses manually also safeguards against invalid licenses that do not match the Control Center or use invalid start / expiration dates. The licenses on the managed firewall must be reassigned before the two-week grace period expires.

For more information, see How to Renew a Pool License.

Continuous updating of the pool license float

Managed firewalls using pool licenses must renew the license by connecting to the firewall at regular intervals. The license status for each firewall is listed on the Control > Floating Licenses page. Updating the pool license float follows the following scheme: Licenses have a grace period of 15 days. The firewall starts to check the pool license state after a quarter of the grace period. If this check fails, the next attempt is made after the first half of the grade period. If this check fails, the license state enters grace mode. From now on, the firewall will attempt to contact the Control Center four consecutive times every 10 minutes until the float could be successfully updated. If a pool-licensed firewall is not able to connect to the Control Center for 15 days, all services are shut down and the license state is changed to unlicensed.


Special considerations for Control Center licenses in grace period

If the host-ID or MAC address of the Control Center has changed, the licenses will become invalid and enter a 14-day grace period. During the grace period, do not change settings on the CC Identity page.
Contact Barracuda Technical Support to resolve the licensing issues.

Last updated on