We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Security Gateway

Barracuda Web Security Gateway Update for SSL Inspection Certificate Handling

  • Last updated on

Barracuda Networks has released a security update to the Barracuda Web Security Gateway with version 8.1.0.005. This update addresses recently discovered implementation weaknesses in features that use SSL Inspection. For more information on this topic, visit http://www.cert.org/blogs/certcc/post.cfm?EntryID=221.

This article applies to customers who currently enable, plan to enable, or have previously enabled SSL Inspection on a Barracuda Web Security Gateway.

Barracuda recommends installing version 8.1.0.005 on your Barracuda Web Security Gateway. After you upgrade, if you use a default certificate provided by the Barracuda Web Security Gateway, you should re-create and deploy new certificates to your clients. Installing the certificates will require a brief interruption of service. For information about working with SSL certificates, see How to Create and Install a Self-Signed Certificate for SSL Inspection and How to Use the Barracuda Default Certificate for SSL Inspection.

You can verify whether your Barracuda Web Security Gateway has an old certificate in its trust store, that needs replacement by a new certificate from version 8.1.0.005. Visit http://certcheck.barracudalabs.com and follow instructions to do the check.

Should you choose not to upgrade, it is recommended that you turn off the SSL Inspection feature as described below.

To disable SSL Inspection for the Barracuda Web Security Gateway 610 and above:

  • Navigate to the ADVANCED > SSL Inspection page.
  • In the SSL Inspection section, set SSL Inspection Method to Off.
  • Click Save on the top right of the screen. SSL Inspection is now off.

To disable SSL Inspection for the Barracuda Web Security Gateway 410:

  • Navigate to the BLOCK/ACCEPT > Configuration page.
  • Set SSL Inspection to Off.
  • Click Save on the top right of the screen. SSL Inspection is now off.

If you have any questions or concerns, please feel free to contact Barracuda Networks Technical Support at  +1 408 342 5300. 

Last updated on