The Barracuda NextGen Control Center for AWS is available as a Bring Your Own License (BYOL) image from the AWS Marketplace. Two models are available. The VCC610 supports two ranges and unlimited clusters, the VCC400 one range and one cluster. The Control Center can manage both on-premises hardware and virtual firewalls, as well as F-Series Firewalls in the public cloud. It is not possible to use the AWS Control Center in a high availability cluster.
Before You Begin
- Deploy the Barracuda NextGen Control Center for AWS image from the Marketplace. For more information, see
Step 1. Export the Base License on Box Layer
- IP Address/ Name – Enter the public IP address, or if connected to the VPC via client-to-site, the private IP address associated with the Control Center.
- Username – Enter
- Password – Enter the instance ID of the Control Center instance.
- Open the CONFIGURATION > Configuration Tree > Box > Box Licenses page.
- Click Lock.
- In the Licenses table, select the Base License. Then, click Im/ Export and select Export to Clipboard or Export to File.
Step 2. Configure CC Identification Settings
The CC Identification settings are required to secure communication between the Control Center and the F-Series Firewalls it manages.
- Click Trust.
- Go to CONFIGURATION > Configuration Tree > Multi-Range > Global Settings > CC Identity. The This Connection is Untrusted pop-up opens.
- Click No.
- Click Lock.
- In the Organization field, enter your organization name.
- In the CC Identification section, click Import and select either Import from Clipboard or Import from File to import the base license exported in Step 3. The Certificate View window opens.
- Click OK. The End User License Agreement window opens.
- Select I agree and OK.
- In the left menu, click Trust Chain.
- Define the keys and certificates required for secure communication between the Control Center and the F-Series Firewalls that it will manage:
- CC Private Key – Click New Key and specify the key length.
- CC Certificate – Click Edit and specify the certificate settings.
- CC SSH Key – Click New Key.
Step 3. (optional) Complete the Auto-Activation Form
To automatically activate managed firewall licenses, you must enter the data for the auto-activation form once.
- Go to CONFIGURATION > Configuration Tree > Multi-Range > Global Settings > CC Parameters.
- In the left menu, select Activation Template.
- Click Lock.
- Enter the Owner and Purchase Information.
- Click Send Changes and Activate.
Continue with the steps below to set up the Control Center in AWS according to your needs.
|Create Admins||Control Center Admins|
|Configure Central Management|
|Add Managed F-Series Firewalls|
|License Managed F-Series Firewalls|
Revision Control System (RCS)
|Revision Control System (RCS)|