We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
Accept
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda WAF Control Center
Overview Documentation Training Materials

Barracuda WAF Control Center Vx Quick Start Guide

  • Last updated on

To set up your Barracuda WAF Control Center (WCC) Vx, complete the following steps:

Before You Begin

Deploy the Barracuda WAF Control Center Vx on your hypervisor. When the Barracuda WAF Control Center Vx is deployed, by default it has only one Network Interface Card (NIC) associated with it. If you want to deploy the Barracuda WAF Control Center Vx in the One-Arm Proxy mode, then skip ahead to the Step 1. Enter the License Code section.

 

Continue with Step 1. Enter the License Code.

You cannot add a Management interface without adding a LAN interface.

Step 1. Open Network Address Ranges on Firewall

If your Barracuda WAF Control Center Vx is located behind a corporate firewall, open the following Barracuda network address ranges for the ports shown in the table below on your firewall to ensure proper operation:

  • 64.235.144.0/20
  • 198.207.200.0/22
  • 209.222.80.0/21
PortDirectionTCPUDPUsage
22Out Yes No Technical Support connections
25In/OutYes No Email alerts
53Out Yes Yes Domain Name Service (DNS)
80/8000In/Out Yes No Virus/attack/security definition and firmware updates
23557InYesNoBackup port if 80 and 8000 are not available
123 Out No Yes Network Time Protocol (NTP)
443OutYes No Initial VM Provisioning *
48320/48321 In/OutYesNoThe secure tunnel between the WCC and WAFs
2200OutYesNoFile transfer
* The initial provisioning port can be disabled once the initial provisioning process is complete.

Step 2. Start the Virtual Appliance, Configure Networking, and Enter the License

You should have received your license token/serial # of Barracuda Vx via email or from the website when you downloaded the Barracuda WAF Control Center Vx package. If not, you can request an evaluation on the Barracuda website at https://www.barracuda.com/purchase/evaluation or purchase one from https://www.barracuda.com/purchase/index. The license token looks similar to the following: 01234-56789-ACEFG.

  1. In your hypervisor client, start the virtual appliance and allow it to boot up.
  2. From the console, log in as admin with the password admin.
  3. In the System Configuration window, use the down arrow key and select TCP/IP Configuration. Configure the following:
    1. WAN IP Address
    2. WAN Netmask
    3. Gateway Address
    4. Primary DNS Server
    5. Secondary DNS Server
  4. If the Internet can be accessed only through an explicit proxy, configure the proxy server using Proxy Server Configuration (Optional), so that it reaches the Internet for provisioning.

  5. Under Licensing enter your Barracuda License Token and Default Domain to complete provisioning. The appliance will reboot as a part of the provisioning process.

    Please make a note of the Barracuda Vx serial number displayed here. The same serial number should be provided as Password when you log into the Barracuda Web Application Firewall Vx web interface.

Step 3. Accept the End User License Agreement and Verify Configuration

  1. Go to https://<your ip> to access the web interface.
  2. Read through the End User License Agreement. Scroll down to the end of the agreement.
  3. Enter the required information: Name, Email Address, and Company (if applicable). Click Accept. You are redirected to the Login page.
  4. Log into the Barracuda WAF Control Center Vx web interface with username admin and password, which is either:
    • The numeric part of the serial number if your Vx preboot version is 4.6.1 or higher. To find the preboot version, check the  name of downloaded Vx image (zip file) which is something like BarracudaEmailSecurityGateway-p2-vm4.6.1-fw8.1.0.003-20200113-esx-vbox.zip. The text between "vm" and "-fw" in the filename is the preboot version. In this example, it is 4.6.1. The serial number of your Vx is in your invoice and in your VM Setup email. 
    • The word "admin" if your Vx preboot version is below 4.6.1.
      For help finding the serial number of your virtual appliance, see Serial Number for Hardware and Virtual Appliances.
  5. Go to the BASIC > IP Configuration page and configure the following:
    1. Configure TCP/IP Configuration.
    2. Verify that the Primary and Secondary DNS servers are correct in the DNS Configuration section.
    3. Enter Default Hostname and Default Domain (for example, <yourcompanydomain.com>) in the Domain Configuration. The Hostname will be used in reporting and the Default Domain is the domain for the system.

 

If you are planning to put the Barracuda WAF Control Center Vx in Offline mode, ensure you check the following:

  • All definitions are updated on the ADVANCED > Energize Updates page.
  • The Barracuda WAF Control Center Vx is on the latest Firmware Version on the ADVANCED > Firmware Update page.

The Barracuda WAF Control Center periodically connects to Barracuda Central to check for the availability of new Energize Updates. To receive new Energize Updates, ensure your Barracuda WAF Control Center is able to connect to internet to reach Barracuda Central.

Step 4. Update the Firmware

Click on the ADVANCED > Firmware Update page. If there is a new Latest General Release available, perform the following steps to update the system firmware:

  1. Click on the Download Now button located next to the firmware version that you wish to install. To view download progress, click on the Refresh button. When the download is complete, the Refresh button will be replaced by an Apply Now button.
  2. Click on the Apply Now button to install the firmware. This will take a few minutes to complete.
  3. After the firmware has been applied, the Barracuda WAF Control Center Vx will automatically reboot, displaying the login page when the system has come back up. 
  4. Log back into the web interface again and read the Release Notes to learn about enhancements and new features. It is also good practice to verify settings you may have already entered, as new features may have been included with the firmware update.

Step 5. Change the Administrator Password

To avoid unauthorized use, we recommend you change the default administrator password to a more secure password. You can only change the administrator password for the web interface. Go to the BASIC > Administration page and enter your old and new passwords, then click on Save Password.

Last updated on
Previous Article Next Article