We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

How to Deploy a CloudGen Firewall from the Microsoft Azure Marketplace

  • Last updated on

You can install the Barracuda CloudGen Firewall as a virtual machine in the Microsoft Azure public cloud. The Azure Solution Template deploys a single firewall into a dedicated subnet of a new or existing Virtual Network and configures an Azure Route Table to use the firewall as the default gateway. Centrally managed firewalls get their configuration from the Control Center.

You can choose between the following images in the Azure Marketplace:

  • Bring Your Own License (BYOL) – Uses licenses purchased directly from Barracuda Networks. Barracuda Networks offers a 30-day evaluation license.
  • Pay As You Go (PAYG) – No dedicated licenses required. Licensing fees are included in the hourly price of the virtual machine. All charges are billed directly through your Microsoft Azure account.

Depending on your deployment, you may want to use more than one resource group to be able to maintain the deployed VMs more easily.

There are two ways of deploying a CloudGen Firewall from the Azure Marketplace:


  • Barracuda CloudGen Firewall for Azure Solution - The Azure Solution template guides you through the deployment process and suggests proper values. This process is described below.
  • Barracuda CloudGen Firewall for Azure - This directly deploys a CloudGen Firewall without any guide. This is recommended only if you know the values to enter during the deployment.

Before You Begin

Step 1. Basics

  1. Go to the Azure portal: https://portal.azure.com
  2. In the upper left-hand corner, click + Create a resource
  3. Search the Marketplace for Barracuda CloudGen Firewall for Azure and click Barracuda CloudGen Firewall for Azure Solution.

  4. In the next window, click Create.
  5. In the Basics blade, configure the following settings:
    • Firewall Name – Enter the hostname for the CloudGen Firewall.
    • License scheme – Select either PAYG and BYOL.
    • Firmware version – Select one of the available firmware versions. Barracuda recommends deploying the highest available version.
    • Subscription – Select your subscription.
    • Resource Group – Select the resource group to deploy to. Click Create new for a new resource group.
    • Location – Select the desired location the firewall will be deployed to.
  6. Click OK.

Step 2. High Availability

  1. In the Availability Region/Set section select No availability region/set deployment from the drop-down menu.
    To enable High Availability, select either Deploy into an availability set or Deploy into an availability zone according to your requirements.
  2. Click OK.

Step 3. Size and Networking

  1. In the Size and Networking blade, configure the following settings.
    • Size and Storage – Select the size of the virtual machine

      To enable Azure Accelerated Networking either during this deployment or later through CLI, the size of your virtual machine must meet the requirements.

    • Private networking – Select an existing Virtual network , or create a new one. Also, select or create Subnets within the virtual network.
    • Public networking – Select an existing Public IP address, or create a new one. Also, enter a Domain name label for this virtual machine.
  2. Click OK

Step 4. Firewall Management

  1. In the Firewall Management blade, configure the following settings.
    • Firewall management interface – Select the management interface type for your Barracuda CloudGen Firewall. You can choose between Firewall Admin (Windows only), Web Interface and Centrally managed via Control Center. For more information on each topic, see Barracuda Firewall Admin , Web Interface and Firewall Control Center.

      The firewall management interface cannot be changed after deployment. If the Web Interface is enabled, central management with the Control Center is not possible.

    • Configuration backup PAR file – Select an unencrypted configuration backup to restore a firewall configuration. Make sure that static IP addresses, hostname and licenses of the configuration backup match the configuration of the virtual machine.

    • Management ACL – Introduces a Network Security Group that restricts access to management ports of the firewall. Enter to allow access from any network and to skip creating a Network Security Group.

    • Root password – Enter the password for the root user of the firewall.

    1. Firewall_management_4.png
  1. Click OK.  

Step 5. Advanced

  1. In the Advanced blade, configure the following settings.
    • Barracuda CloudGen Firewall private IP addressEnter a static private IP address from the subnet the firewall is deployed to. The first four and the last IP addresses in the subnet are reserved by Azure.
    • Custom firewall VM size – If not already configured, change the virtual machine size.
    • Advanced networking options – Enable or disable Azure Accelerated Networking if the size of your virtual machine meets the requirements.

      Azure Accelerated Networking creates, for each existing interface, a second interface for Accelerated Networking (one for the hv_netvsc driver, and one for Mellanox). Use only every second interface in boxnet (e.g., eth0, eth2, eth4). On devices with DHCP enabled, eth0 is replaced with the DHCP interface. On DHCP-enabled devices, as well, use only every second interface (e.g. eth0, eth2, eth4).

    • SSH management access – Select Enabled to allow SSH access to the Barracuda CloudGen Firewall, and enter the SSH public key.
  2. Click OK.

Step 6. Summary

  1. The basic configuration of the Barracuda CloudGen Firewall is validated, and if no errors are found, the virtual machine is ready for provisioning. For automated deployments, you can download the configuration template.
  2. Click OK .

  Step 7. Buy

  1. Read Barracuda's terms of use and enter the Preferred e-mail address and Preferred phone number.
  2. Click Create.
  3. The Barracuda CloudGen Firewall will now be deployed with the configured settings. This process can take several minutes.

Wait for Microsoft Azure to finish the deployment of your Barracuda CloudGen Firewall. Go to Virtual machines, click on the CloudGen Firewall VM, and locate the Public IP address used to connect to your firewall. Use this IP address to connect to your CloudGen Firewall, as configured, either via Barracuda Firewall Admin or Web User Interface. The username is root and the password is the password you configured in Step 4.

Next Steps

Configure a user-defined routing table for the backend VMs to send traffic through the firewall, and enable Azure Cloud Integration to allow the firewall VM to directly connect to the Azure service fabric.

Last updated on