How to Secure Internet Traffic from LANs over a Private Edge Service

Last updated on 2024-12-04 08:01:01

The SecureEdge Manager allows you to enable Secure Internet Traffic from LANs on Private Edge Services. The Private Edge Service can be used to secure traffic that flows from LANs over the Internet. Some of the key features of Secure Internet Traffic from LANs are:

To enable Secure Internet Traffic from LANs, you need to update SecureEdge appliances to the firmware version 9.0.3 or higher.
You can enable Secure Internet Traffic from LANs on any Private Edge Services, including ones with downstream Sites/ Private Edge Services and ones with mixed downstreams.
By default, Secure Internet Traffic from LANs is disabled for new or existing Private Edge Services.
Note that when you enable Secure Internet Traffic from LANs, the existing Access Control Lists (ACLs) on your connected Site / Private Edge Service are applied .
Enabling Secure Internet Traffic from LANs forces Internet traffic from all downstream LAN networks, irrespective of your downstream Site / Private Edge Service, to pass through this Edge Service.
All SECURITY policies, such as SSL Inspection, Advanced Threat Protection (ATP), Intrusion Prevention System (IPS), and Web Filtering, are applied only on the Private Edge Service. Events, such as IPS hits, will therefore be reported on their corresponding dashboards.

Note that Sites connected to the Private Edge Service securing the traffic must have a global DNS forwarder set. You can configure Primary/Secondary DNS via Sites > Settings > Advanced Settings. For more information, see How to Create a T/VT Site Configuration in Barracuda SecureEdge.

Enable Secure Internet Traffic from LANs

Go to https://se.barracudanetworks.com and log in with your existing Barracuda Cloud Control account.
In the left menu, click the Tenants/Workspaces icon and select the workspace containing your Private Edge Service.
Go to Infrastructure > Edge Services.
The Edge Services page opens. Select the Private Edge Service you wish to enable Secure Internet Traffic from LANs for.
Click on the arrow icon next to the Private Edge Service you are interested in.
The selected <Name of Your Private Edge Service > page opens.
In the Edge Service menu, go to Settings > Advanced Settings.
In the Advanced Settings section, specify a value for the following:
- Secure Internet Traffic from LANs – Click to enable backhauling and securing of all Internet traffic from downstream Site's LAN networks.
Click Save.