You can back up various system configurations and user settings on your Barracuda Web Application Firewall using the ADVANCED > Backup section. These files allow you to restore your current system, or duplicate the configuration, on another Barracuda Web Application Firewall using the Restore Backups section on the ADVANCED > Backups page.
Barracuda Networks recommends taking a backup of your system on a regular basis, in case this information needs to be restored on a replacement Barracuda Web Application Firewall, or in the event of data corruption on your current system.
If you are restoring a backup file on a new Barracuda Web Application Firewall that is not yet configured, you must first configure the new system IP address and DNS information on the BASIC > IP Configuration page.
Note the following about the backup file:
- Do not edit backup files. Any configuration changes you want to make must be done through the web interface. The configuration backup file contains a checksum that prevents the file from being uploaded to the system if any changes are made.
The following information is not included in the backup file:
Module Name Information/configuration not restored DNS Configuration Primary DNS Server Secondary DNS Server WAN IP Configuration IPv4/IPv6 Address
IPv4/IPv6 Subnet Mask
IPv4/IPv6 Gateway Address
Allow Administration Access
VLAN IDLAN IP Configuration IPv4/IPv6 Address
IPv4/IPv6 Subnet Mask
Allow Administration Access
VLAN IDManagement IP Configuration IPv4/IPv6 Address
IPv4/IPv6 Subnet Mask
IPv4/IPv6 Gateway Address
VLAN ID
Allow Administration AccessAzure Configuration Cluster Settings Cluster Shared Secret
Cluster Name
Failback Mode
Cluster ID
Monitor LinkClustered Systems Clustered Systems Templates Scheduled Backups Time of Backup Primary Network HSM Server Network HSM Partition Password Appearance > General System Name Centralized Management Username Attack Types
Identity Theft Patterns
Input TypesAdded Attack Patterns Logging Default System Log Level Import API Spec (JSON Security) Imported API specifications file Telemetry Data Parameter Name
Enabled ParametersNetwork Interfaces NIC Interface Duplexity
NIC Interface NameEdit NIC Advanced Configuration Auto-Negotiation Status Web Interface Settings Web Interface HTTP Port Manual Backups Status Web Interface Image URL Time Time Zone Password System Password
Backing Up the System Configuration
To backup your system configuration, perform the following steps:
- Go to the ADVANCED > Backups page.
- Enter the server details to which you want to save the backup files in the Backup Destination Settings section. For more information on Destination options, refer to the online help.
- Set Encrypt Backup to Yes to encrypt the backup files with the encryption key specified in the Backup Encryption Key field. Note that the backup file can be decrypted using the same encryption key.
- You can take a manual backup or schedule a backup to automatically save the backup files to the Destination location configured in the Backup Destination Settings section. For more information on Manual Backups and Scheduled Backups, refer to the online help.
Backing Up the Barracuda Web Application Firewall Instance(s) System Configuration in Amazon Web Services
You can backup the configuration of the Barracuda Web Application Firewall on Amazon Web Services to an associated S3 bucket for future retrieval. To take a backup, go to the ADVANCED > Backups page and specify the Amazon S3 bucket name and the directory path of the S3 bucket. The backup file stored in the Amazon S3 bucket can later be used for manual configuration or auto-scaling the instances.
Steps To Backup System Configuration to Amazon S3 Bucket
- Go to the ADVANCED > Backups page.
- In the Backup Destination Settings section:
- Set Destination to Amazon S3 and specify values for the following:
- Amazon S3 Bucket Name – The name of the Amazon S3 bucket where the backup will be stored.
- Amazon Directory Path – The directory path where the backup will be stored in the Amazon S3 bucket.
- Click Save.
To deploy the Barracuda Web Application Firewall instance using the backup stored in Amazon S3, see the Backup Bootstrapping section in the Bring-Your-Own-License (BYOL) Auto Scaling article.
Backing Up the Barracuda Web Application Firewall Instance(s) System Configuration in Microsoft Azure
You can backup the configuration of the Barracuda Web Application Firewall on Microsoft Azure to an associated Storage Blob for future retrieval. To take a backup, go to the ADVANCED > Backups page and specify the Microsoft Azure account details and the blob path. The backup file stored in the Microsoft Azure Blob can later be used for manual configuration or auto scaling the instances.
Steps to Backup System Configuration to Microsoft Azure Storage Blob
- Go to the ADVANCED > Backups page.
- In the Backup Destination Settings section:
- Set Destination to Azure Blob and specify values for the following:
- Azure Storage Account Name: The name of the storage account associated with your Microsoft Azure resource group.
- Azure Storage Access Key: The access key of your storage account.
- Azure Storage Container Name: The name of the container configured in the storage account in which the backup file will be saved.
- Azure Storage Blob Path: The path of the storage blob where the backup file will be saved. The storage blob path should start with alphanumeric or special characters such as underscore (_), dot (.), hypen (-), forward slash (/), or @, and can include alphanumeric/underscore/single space between two labels. Example: exampleblob1/@abc/.
- If you want to save the backup file in the root directory, keep the storage blob path empty.
- If you want to create a new storage folder, enter a valid path for the folder to which the backup file will be saved.
- Click Save.
To deploy the Barracuda Web Application Firewall instance using the backup stored in Azure Blob, see the Auto Scaling the Barracuda Web Application Firewall Instances in Microsoft Azure article.
Restoring the Configuration to your System
To restore the configuration to your current or to another system, perform the following steps:
- Go to the ADVANCED > Backups page.
- In the Restore Backups section:
- Select the server where your backup file(s) is saved from the Restore From drop-down list.
- Click Browse and select the backup file you want to restore.
- Set Exclude Management Interface Configuration to Yes or No.
- If set to Yes, the Management interface configuration will not be restored from the backup.
- If set to No, all ACL rules, VLAN configuration and routes (static and interface routes) will be restored from the backup. Note: Custom virtual interfaces are not restored from the backup.
- Click Save.
Restoring SSL Services that are Associated with Non-Exportable Private Key Certificates
If Allow Private Key Export is set to No when uploading a certificate on the BASIC > Certificates page, the private key associated with the certificate will not be included in the backup file. Consequently, all the SSL services will go down after restoring the backup file. To restore the services, do the following:
- Follow the steps in Restoring the Configuration to your System section above, and then continue with step 2.
- Go to the BASIC > Certificates page, and upload the certificate(s) associated with the SSL services in the Upload Certificate section.
- Go to the BASIC > Services page, edit the SSL service(s), and associate the certificate(s) with the service(s).
Restoring Multiple IP Addresses Configured System Backup in Microsoft Azure
To restore a multiple IP addresses backup, perform the steps mentioned in the Restoring the Configuration to your System section.