You can configure the Barracuda NextGen Firewall X-Series to act as a transparent proxy. If you enable the proxy feature, outgoing HTTP traffic is intercepted and redirected to either the Barracuda Web Security Service or to an upstream proxy (the latter option is rarely used).
Before you begin:
The Barracuda Web Security Service requires a paid subscription. To verify that your subscription is active:
- Log into your Barracuda Cloud Control Account.
- Go to the Account > Users page.
- Verify that Product Entitlements: Web Security is selected. If not, contact your reseller or Barracuda Networks representative.
To configure the Barracuda Web Security Service on the X-Series Firewall:
- On the NETWORK > Proxy page, select Use Barracuda Web Security Service if connected (recommended) .
- To include the user and domain name if available, select the Include User Information check box.
- For local users, this information is retrieved from the Barracuda DC agent. For information on how to get, install, and configure the Barracuda DC Agent, see About the Barracuda DC Agent.
- For VPN users, the information comes from whatever authentication method is used.
- To change this selection later, you must disable and then re-enable the Barracuda Web Security Service so that it registers your change.
- To redirect HTTP traffic to the Barracuda Web Security Service, create the required firewall rules.
- Go to the FIREWALL > Firewall Rules page.
- Edit and enable the pre-installed TRANSPARENT-PROXY and TRANSPARENT-PROXY-Wi-Fi (if using Wi-Fi) firewall rules to allow traffic to pass to the Barracuda Web Security Service.
- Complete the connection from the X-Series Firewall to the Barracuda Web Security Service.
- Go to the BASIC > Cloud Control page.
- Verify that your customer account information is entered.
- Enable Connect to Barracuda Cloud Control and save your changes. After a successful connection, a "Connected" status is displayed.
- Log into your Barracuda Cloud Control account again.
- Click the Web Security tab and refresh the display. Some network activity appears.