To set up your Barracuda WAF Control Center (WCC) Vx, complete the following steps:
Before You Begin
Deploy the Barracuda WAF Control Center Vx on your hypervisor. When the Barracuda WAF Control Center Vx is deployed, by default it has only one Network Interface Card (NIC) associated with it. If you want to deploy the Barracuda WAF Control Center Vx in the One-Arm Proxy mode, then skip ahead to the Step 1. Enter the License Code section.
Continue with Step 1. Enter the License Code.
Step 1. Open Network Address Ranges on Firewall
If your Barracuda WAF Control Center Vx is located behind a corporate firewall, open the following Barracuda network address ranges for the ports shown in the table below on your firewall to ensure proper operation:
- 64.235.144.0/20
- 198.207.200.0/22
- 209.222.80.0/21
| Port | Direction | TCP | UDP | Usage |
|---|---|---|---|---|
| 22 | Out | Yes | No | Technical Support connections |
| 25 | In/Out | Yes | No | Email alerts |
| 53 | Out | Yes | Yes | Domain Name Service (DNS) |
| 80/8000 | In/Out | Yes | No | Virus/attack/security definition and firmware updates |
| 23557 | In | Yes | No | Backup port if 80 and 8000 are not available |
| 123 | Out | No | Yes | Network Time Protocol (NTP) |
| 443 | Out | Yes | No | Initial VM Provisioning * |
| 48320/48321 | In/Out | Yes | No | The secure tunnel between the WCC and WAFs |
| 2200 | Out | Yes | No | File transfer |
| * The initial provisioning port can be disabled once the initial provisioning process is complete. | ||||
Step 2. Start the Virtual Appliance, Configure Networking, and Enter the License
You should have received your license token/serial # of Barracuda Vx via email or from the website when you downloaded the Barracuda WAF Control Center Vx package. If not, you can request an evaluation on the Barracuda website at https://www.barracuda.com/purchase/evaluation or purchase one from https://www.barracuda.com/purchase/index. The license token looks similar to the following: 01234-56789-ACEFG.
- In your hypervisor client, start the virtual appliance and allow it to boot up.
- From the console, log in as admin with the password admin.
- In the System Configuration window, use the down arrow key and select TCP/IP Configuration. Configure the following:
- WAN IP Address
- WAN Netmask
- Gateway Address
- Primary DNS Server
- Secondary DNS Server
- If the Internet can be accessed only through an explicit proxy, configure the proxy server using Proxy Server Configuration (Optional), so that it reaches the Internet for provisioning.
Under Licensing enter your Barracuda License Token and Default Domain to complete provisioning. The appliance will reboot as a part of the provisioning process.
Step 3. Accept the End User License Agreement and Verify Configuration
- Go to https://<your ip> to access the web interface.
- Read through the End User License Agreement. Scroll down to the end of the agreement.
- Enter the required information: Name, Email Address, and Company (if applicable). Click Accept. You are redirected to the Login page.
- Log into the Barracuda WAF Control Center Vx web interface with username admin and password, which is either:
- The numeric part of the serial number if your Vx preboot version is 4.6.1 or higher. To find the preboot version, check the name of downloaded Vx image (zip file) which is something like
BarracudaEmailSecurityGateway-p2-vm4.6.1-fw8.1.0.003-20200113-esx-vbox.zip. The text between "vm" and "-fw" in the filename is the preboot version. In this example, it is 4.6.1. The serial number of your Vx is in your invoice and in your VM Setup email. - The word "admin" if your Vx preboot version is below 4.6.1.
For help finding the serial number of your virtual appliance, see Serial Number for Hardware and Virtual Appliances.
- The numeric part of the serial number if your Vx preboot version is 4.6.1 or higher. To find the preboot version, check the name of downloaded Vx image (zip file) which is something like
- Go to the BASIC > IP Configuration page and configure the following:
- Configure TCP/IP Configuration.
- Verify that the Primary and Secondary DNS servers are correct in the DNS Configuration section.
- Enter Default Hostname and Default Domain (for example, <yourcompanydomain.com>) in the Domain Configuration. The Hostname will be used in reporting and the Default Domain is the domain for the system.
Step 4. Update the Firmware
Click on the ADVANCED > Firmware Update page. If there is a new Latest General Release available, perform the following steps to update the system firmware:
- Click on the Download Now button located next to the firmware version that you wish to install. To view download progress, click on the Refresh button. When the download is complete, the Refresh button will be replaced by an Apply Now button.
- Click on the Apply Now button to install the firmware. This will take a few minutes to complete.
- After the firmware has been applied, the Barracuda WAF Control Center Vx will automatically reboot, displaying the login page when the system has come back up.
- Log back into the web interface again and read the Release Notes to learn about enhancements and new features. It is also good practice to verify settings you may have already entered, as new features may have been included with the firmware update.
Step 5. Change the Administrator Password
To avoid unauthorized use, we recommend you change the default administrator password to a more secure password. You can only change the administrator password for the web interface. Go to the BASIC > Administration page and enter your old and new passwords, then click on Save Password.