It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Security Gateway

Why aren't my users' IPs being preserved when their traffic passes through my Barracuda Web Filter?

  • Type: Knowledgebase
  • Date changed: 3 years ago
Solution #00000645

All Barracuda Web Filters deployed inline behind a switch, all firmware versions.

To ensure client IP transparency works, please verify the following:
  1. The Barracuda Web Filter is configured to point directly to the perimeter firewall as its gateway.
  2. Static routes exist for any additional subnets that are not on the same subnet as the Barracuda Web Filter. The default gateway for each subnet will usually be the LAN switch or router that serves that subnet. This will ensure all the network traffic gets routed back to clients correctly. For more information about configuring static routes with the Barracuda Web Filter, see Solution #00001449.
  3. The Pass Client IP addresses through WAN port option on the Advanced > Expert Configuration page is set to Yes (to reach this page, navigate to the Advanced page, append &expert=1 to the end of your browser's address bar, and press the enter key; you will the Expert Variables tab appear).
  4. The firewall acting as the Barracuda Web Filter's gateway is not configured to block spoofed IPs. When the Pass Client IP addresses through WAN port option is enabled, the client IPs will all appear to come from the same MAC address (that of the Barracuda Web Filter). Some firewalls may react to this, since it looks similar to an IP spoof attack.
If there is a problem, try setting the Pass Client IP addresses through WAN port to No to see if the problem is unrelated to client IP transparency. If you've verified all of the things on this list, call Barracuda Networks Technical Support for assistance.

Link to This Page: