We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Application Firewall

Where can I create a rule requiring certain URLs use SSL for SSL offloading on my Barracuda Web Application Firewall?

  • Type: Knowledgebase
  • Date changed: 10 months ago

Solution #00004214

 

Scope:

This solution applies to all Barracuda Web Application Firewalls.

 

Answer:

To force certain URLs to use SSL and the rest to be on HTTP, you need to make use of redirect rules.

There has to be two different services set up on the same VIP; one on port 80 and one on port 443 with SSL enabled.

Under Web Sites > Allow/Deny you need to create rules for both HTTP and HTTPS service.

1. Under the HTTP service create a default allow to allow all traffic to pass through http.

  • Host Match: * ( use a wildcard or use the specific domain )
  • URL Match: /*
  • Extended Match: *
  • Extended Match Sequence: 1
  • Action: Process

 

2. Under the HTTP service create a redirect rule to pass that particular URL to go through HTTPS

  • Host Match: * ( use a wildcard or use the specific domain )
  • URL Match: /<specify the url > (example : /test.html or /test*)
  • Extended Match: *
  • Extended Match Sequence: 1
  • Action: Redirect
  • Redirect URL: https://<specify the redirect URL>

 

3. Under HTTPS service create a URL to process that one created in rule two.

 

  • Host Match: * ( use a wildcard or use the specific domain )
  • URL Match: /<specify the url > (example : /test.html or /test*)
  • Extended Match: *
  • Extended Match Sequence: 1
  • Action: Process

 

4. Under HTTPS create a rule to redirect all other traffic to HTTP back again.

 

  • Host Match: * (use a wildcard or use the specific domain)
  • URL Match: /*
  • Extended Match: *
  • Extended Match Sequence: 2
  • Action: Redirect
  • Redirect: http://<domain>%s (%s appends the path to the URI the user has entered and adds it in here, example: https://www.barracudanetworks.com%s)

                   

Link to this page:

https://campus.barracuda.com/solution/50160000000HnMzAAK