We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Application Firewall

Barracuda CloudGen WAF Quick Start Guide - Microsoft Azure

  • Last updated on

Virtual machines (VMs) deployed through Azure Gallery prior to mid February, 2015 do not support Disk Expansion. If you deployed prior to this time period and want to expand the disk, you must re-deploy the VM using the latest VM image available in Azure Gallery:

 

Before you continue with licensing, ensure that you have completed the following configuration:

Before deploying the Barracuda CloudGen WAF for Azure, it is recommended that you go through the Deployment Best Practices article.

Step 1. Open Network Address Ranges on Firewall

If your Barracuda CloudGen WAF is located behind a corporate firewall, open the following Barracuda network address ranges for the ports shown in the table below on your firewall to ensure proper operation:

  • 64.235.144.0/20
  • 198.207.200.0/22
  • 209.222.80.0/21
PortDirectionTCPUDPUsage
22Out Yes No Technical Support connections
25In/OutYes No Email alerts
53Out Yes Yes Domain Name Service (DNS)
80/8000Out Yes No Virus/attack/security definition and firmware updates
123 Out No Yes Network Time Protocol (NTP)
443OutYes No Initial VM Provisioning *
* The initial provisioning port can be disabled once the initial provisioning process is complete.

Step 2. Licensing the Barracuda CloudGen WAF on Microsoft Azure

If you deployed the Barracuda CloudGen WAF with the Hourly/Metered option, you do not need to license the system; skip ahead to Verify Configuration and Change the Password.

After provisioning the Barracuda CloudGen WAF on Microsoft Azure, the next step is licensing. After you deploy the Barracuda CloudGen WAF image on the Microsoft Azure environment, do the following:

  1. Sign into the Microsoft Azure Portal.
  2. Note the DNS of the deployed Barracuda CloudGen WAF.
  3. Open the browser and enter the noted DNS (from step 2) with port 8000 for HTTP and port 8443 for HTTPS. For example:
    For HTTP         : http://:8000
    For HTTPS       : https://:8443

    The Barracuda CloudGen WAF is not accessible via the HTTPS port when it is booting up. Therefore, use ONLY HTTP port to access the unit when booting. This displays the status of the unit i.e., System Booting. Once the boot process is complete, you will be redirected to the login page.


  4.  After the boot process is complete, the Licensing page displays with the following options:

    Licensing_BWAF_Vx.PNG
     
    1. I Already Have a License Token – Use this option to provision your Barracuda CloudGen WAF with the license token you have already obtained from Barracuda Networks. Enter your Barracuda Networks Token and Default Domain to complete licensing, and then click Provision.
      The Barracuda CloudGen WAF connects to the Barracuda Update Server to get the required information based on your license, and then reboots automatically. Allow a few minutes for the reboot process. Once the instance is provisioned, you are redirected to the login page.

    2. I Would Like to Purchase a License – Use this option to purchase the license token for the Barracuda CloudGen WAF. Provide the required information in the form, accept the terms and conditions, and click Purchase.
      The Barracuda CloudGen WAF connects to the Barracuda Update Server to get the required information based on your license, and then reboots automatically. Allow a few minutes for the reboot process. Once the instance is provisioned, you are redirected to the login page.

    3. I Would Like to Request a Free Evaluation – Use this option to get 30 days free evaluation of the Barracuda CloudGen WAF. Provide the required information in the form, accept the terms and conditions, and click Evaluate.
      The Barracuda CloudGen WAF connects to the Barracuda Update Server to get the required information based on your license, and then reboots automatically. Allow a few minutes for the reboot process. Once the instance is provisioned, you are redirected to the login page.

Step 3. Verify Configuration and Change the Password

  1. Log into the Barracuda CloudGen WAF web interface as the administrator using the URL as described in step 3 of Licensing of Barracuda Web Application Firewall Vx after deploying on Microsoft Azure.

    Username: admin        

    Password: Enter the password specified while deploying the Barracuda CloudGen WAF instance on the Microsoft Azure Management Portal. See step 6.c in the Deploying and Provisioning the Barracuda CloudGen WAF in the New Microsoft Azure Management Portal article

  2. Navigate to the BASIC > Administration page and do the following:
    1. Old Password: Enter the current password.
    2. New Password: (Optional) Enter a new password.
    3. Re-enter New Password: Re-enter the new password to confirm.
    4. Click Save Password.
  3. Navigate to the BASIC > IP Configuration page and do the following:
    1. Verify the WAN IP Configuration.

      Do not make any changes in this section as this configuration is provided by Microsoft Azure and should not be changed.

    2. Configure the Primary and Secondary DNS Server in DNS Configuration.
    3. Enter Default Host Name and Default Domain in the Domain Configuration. The Host Name is used in reporting, and is displayed in alerts, notifications and messages sent by the Barracuda CloudGen WAF. The Default Domain is the domain for the system and is appended to the Host Name.

Step 4. Update the Firmware

Navigate to the ADVANCED > Firmware Update page and check if there is a new Latest General Release available. If so, perform the following steps to update the system firmware.

Make sure to read the release notes to learn about enhancements and new features before upgrading the firmware. It is also good practice to verify settings, as new features may have been included with the firmware update.

  1. Click on the Download Now button located next to the firmware version that you wish to install. When the download is complete, the Apply Now button appears.
  2. Click on the Apply Now button to apply the firmware. This will take a few minutes to complete. After the firmware has been applied, the Barracuda CloudGen WAF will automatically reboot, displaying the login page when the system has come back up. 
  3. After applying the firmware, you will be required to log into the web interface of the Barracuda CloudGen WAF for Azure again.

It is recommended to use the Capture option to capture the Barracuda CloudGen WAF image, so that it can be used in case of disaster recovery (or other reason). For more information on how to capture the image, see Creating the Barracuda CloudGen WAF Image on Microsoft Azure.

Configure the Service(s) on the Barracuda Web Application Firewall

You can configure the services on the BASIC > Services page. The services should be created using the System (WAN) IP address of the instance as your Virtual IP address (VIP). The Virtual IP Address field is thus automatically populated with the System (WAN) IP address of the instance.  After the service is configured, the service will be accessible through the Public IP/DNS of the Barracuda CloudGen WAF for Azure VM. Ensure that you have the corresponding ports opened in your security group/endpoints and firewall.

      Add New Service.png

 

For more information on services, see Step 2: Configuring a Service. For detailed instructions on how to add a service, click the Help button.

Last updated on