It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

Revision Control System (RCS)

  • Last updated on

The Revision Control System (RCS) stores versioning information on all configuration changes to your system. You can view and, if necessary, revert to older configuration versions as needed.


The following Barracuda Firewall Admin configuration nodes and services are not supported by RCS:

  • DNS Service
  • VPN > VPN Settings
  • VPN > Client-to-site VPN
  • VPN > Site-to-Site VPN

Timestamps in the RCS history are displayed in UTC only.

Step 1. Enable the Revision Control System

After any RCS related configuration change, you must restart the CC Configuration service and your Control Center session.

  1. Go to CONFIGURATION > Configuration Tree > Multi-Range > Global Settings > CC Parameters.
  2. In the left menu, select RCS Setup.
  3. From the Version Control System list, select Enable.
  4. Define the following RCS settings:
    • Log Change Differences – Enables or disables the RCS log (file name: servicename_changes) of all configuration changes.
    • Log Creation Differences – Specifies how configuration changes are logged. You can select one of the following settings:
      • Difference-to-Default – Only differences to the default settings are listed.
      • Full-Info – Every setting is listed.
      • None – Only changes are listed.
    • Log Removal Differences – Specifies how to log file removals. You can select one of the following settings:
      • Difference-to-Default – Only differences to the default settings are listed.
      • Full-Info – Every action is listed.
      • None – The removal of files is not listed.
    • Report Processing Script – You can enter a script to automate the transmission of change reports to other destinations. The shell script can invoke Secure Copy (scp) or email delivery. Example scripts are listed at the bottom of this page.
    • Force RCS Change Message – To enter a comment for every RCS check-in, select yes.
  5. Click Send Changes and Activate

Step 2. Restart the CC Configuration Service

After enabling RCS, the CC Configuration service must be restarted as well as your Control Center session.

  1. Log into the box layer of your Control Center.
  2. Go to CONTROL > Services.
  3. In the Services table, select the CONF (CC-Configuration-Service) service and click Restart Service.

    Depending on the size of the configuration tree, this may take several minutes because each configuration tree entry is given its own version number. To get status information, see the CONF\changes log.

  4. Log out.  

Next Steps

After configuring and activating RCS, you can view change reports for each Config Tree node. For more information, see How to View and Revert RCS Versions. To display the RCS function in the configuration, you must l og out and back into Barracuda Firewall Admin.

Report Processing Script Examples

The following table displays examples of scripts that you can enter in the Report Processing Script table for transmitting your change reports via scp or mailclt. In your script, use the $REPORT variable. The name of the report file is stored in $REPORT.

MethodExample Script
scpscp "$REPORT"


With the -m option, you must specify the IP address of a reachable SMTP server because DNS resolution is not supported by RCS. Do not specify the MX record.

/opt/phion/bin/mailclt -f

-r -s


-m -a "$REPORT"

Last updated on