We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Security Agent

GPO Deployment of the Barracuda WSA From the Windows Interface

  • Last updated on

If you install using GPO Deployment, you will need to update/redeploy using GPO, and uninstall using GPO. This article applies to using the Barracuda Web Security Service.

To install the Barracuda WSA, do the following:

  1. Create an MST file from the MSI windows installer package of the Barracuda WSA using the ORCA tool. To create an MST file, log into your Windows Server as administrator, and create a shared folder. This is the distribution point on the network where you will put the installer package you want to distribute and apply.
  2. Log in to the Barracuda Web Security Service and download the Barracuda WSA MSI installer package from the SUPPORT tab. Save the downloaded installer package in the shared folder you created above.
  3. Download the ORCA tool from http://www.softpedia.com/progDownload/Orca-Download-79861.html and install. This tool transforms the .msi file into a .mst file if you perform the following steps:
    1. Launch ORCA and click on File > Open to open the downloaded MSI installer of the Barracuda WSA and to see its setup parameters. There are four required settings to be able to connect the Barracuda WSA to the host; and upon connecting, the client machine syncs with the settings in the profile configured on the host to the local Barracuda WSA settings.
      1. Select Transform from the menus, and then select the New Transform option.
      2. Select PROPERTY in the left Tables pane, then scroll down for the Property entries and view the AUTH_KEY. Click to edit the Value field section. Do NOT  rename Property entries.

      3. Log into the Barracuda Web Security Service and go to the CONFIGURATION > Key Management page. Click on the key you want to use and copy the key value to use.

      4. In ORCA, double click or use CTRL + A in the value field (as there is a space already there) to select everything for Auth Key, and paste the Auth Key value you just copied (so no spaces are left) in front of or behind the value. Press Enter.
      5. Set the property SERVICE_URL to the Service Host found in the Account Information section of the SUPPORT tab of the Barracuda Web Security Service.
      6. Set the SERVICE_PORT to 8080, entering it without spaces.
      7. Set the property USER_MODE:
        • 0 (Default) Indicates ordinary operation. The Barracuda WSA Monitor appears in the task tray and the Configuration tool appears in the Program Files menu on the client machine.
        • 1 Runs the Barracuda WSA in Silent mode. The user does not see the Barracuda WSA Monitor running, and cannot change the local configuration.
      8. Set the property SERVICE_MODE to 1. Service mode 1, the default, runs the Barracuda WSA with the Barracuda Web Security Service as the host.

         You should see, after entering values into these fields, that they are outlined in green if they have been changed/modified to a new value.
    2. After setting the above properties according to your configuration, select the Transform menu again and select the Generate Transform option. Save the .mst file in the folder with the Barracuda WSA MSI installer file.

  4. Deploy the Barracuda WSA application through Active Directory by creating a GPO and applying a GPO policy. To deploy the Barracuda WSA application using GPO deployment, you need to create a container or Organizational Unit (OU), then create a GPO which you link to that OU and apply the GPO policy.
    1. Using your Windows Server Start menu, open Administrative Tools > Active Directory Users and Computers which displays the active directory domain users and computers.
    2. Select the domain where you want to add your OU, and right click, choosing New > Organizational Unit. You need to name your Organizational Unit, and un-select Protect container from accidental deletion, because you may want to delete the OU later.
    3. Now you need to associate the USERS accounts or COMPUTERS accounts to your newly created OU where you will apply policies. You can add them to the created OU, move them from the existing USERS or COMPUTERS account to the new container (though this option prompts a warning), or create them in the OU.
    4. Finally, you need to create a GPO and link it to the new OU you created. Use the Windows Server Start menu, Administrative Tools > Group Policy Management and select your new OU; then right click, selecting Create a GPO in this domain, and Link it here....
    5. Select your GPO and right click, selecting Edit to open the Group Policy Management Editor. You need to decide whether to use User Configuration or Computer Configuration to specify which domain elements your GPO policy will apply to. User Configuration applies the policy to the users in your GPO whenever they log into any computer. Computer Configuration applies the policy to any user who logs into the computer in your GPO.

To apply your software installation, select Software installation from User Configuration or Computer Configuration, depending on your desired configuration, and right click selecting New > Package. You will need to specify the full UNC path of the shared installer package you want (for example \\server2008\common\BarracudaWSASetup.msi) as the filename of the Windows installer package, then Open the package.

Select the Advanced deployment method, which allows you to add modifications to the msi file created using ORCA.

For Computer Configuration:

  • From the Modifications tab, use Add to add the MST file, typing the full Universal Naming Convention (UNC) path of the MST transform file (for example: \\server2008\common\wsa.mst) and then Open.
  • The Barracuda WSA will now appear in the right pane of your Group Policy Management Editor.

Assigned vs Published Deployment Type for Users

If you decide to use User Configuration, you need to choose the deployment type for users:

  • From the Deployment tab, :
    • Assigned: Distributes software to users, but does not install it on their system. When software is assigned to a user it 'follows' them by providing shortcuts on the Programs menu of every machine they log into. If the user clicks on the shortcut, only then is the application actually installed on that system. You can select the checkbox Install this application at logon if you want the software to install (run the GPO policy) when the user logs in.
    • Published: Adds the application to the Add/Remove programs section of the control panel, and allows the user to install the application if necessary. Unlike Assigned software, it does not appear to be installed. A published application can be installed via document invocation, as when a user clicks on a zip file that WinZip would install had it been published to the user.

Next, apply your GPO policy.

  1. Open a command prompt, and Run it as administrator.
  2. To force update the Group Policy use the command:

C:\Users\Administrator> gpupdate /Force

To verify that the Barracuda WSA has been installed, look for the Barracuda WSA icon in the system tray, or in the Add/Remove Programs list using the Control Panel.

An application that has been installed through GPO can only be effectively uninstalled through GPO or it will reappear on your computer at reboot or user login. Additionally, you should turn off the Barracuda WSA Auto-Update feature for a Barracuda WSA installed using GPO Deployment, as updates should be done through GPO as well. 

Last updated on