We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Security Gateway

How can I enable SSL Inspection with my WSA or iWSA?

  • Type: Knowledgebase
  • Date changed: 4 years ago

Solution # 00006820 

Scope:
Barracuda Web Filters 410 or higher, as of 7.1 firmware

Answer:
SSL Inspection allows the Web Filter to inspect HTTPS traffic as it filters it, so the Web Filter to apply URL patterns to the traffic, employ Safe Search enforcement on HTTPS traffic such as google.com searchs, and enforce Web App Monitoring for all features. SSL Inspection is available to WSA and iWSA users who are proxying through a Barracuda Web Filter, if that Web Filter has SSL Inspection enabled.

Note: Currently SSL inspection of HTTPS traffic is done on the Web Filter itself, meaning that

a) this is only available if the agent is NOT in Policy Lookup Only (PLO) mode, where traffic is not proxied through the web filter. 
b) it is NOT available at this time to users of Barracuda's Web Security Service cloud-based web filtering.

Take these steps to enable SSL Inspection.

1. Enable SSL Inspection on your Web Filter. See our techlibrary article at https://techlib.barracuda.com/BWF/ConfigSSLInspection71 for instructions on how to configure this.

2. Go to the ADVANCED > Remote Filtering page and set Policy Lookup Only Mode to No.

3. Install your Web Filter root certificate in your browsers..

410s: Go to the BLOCK/ACCEPT > Configuration page to enable SSL Inspection. Download the Root Certificate For Browsers from the page and install in the browsers of all remote machines running the Barracuda WSA or iWSA.
610s and above: Go to the ADVANCED > SSL Inspection page to enable SSL Inspection. Download the Root Certificate For Browsers from the page and install in the browsers of all remote machines running the Barracuda WSA or iWSA.

4. Sync your WSA or iWSA. This can be done by clicking on the icon in the taskbar and selecting Sync Settings (if the icon is available), or logging out and logging in to or rebooting your computer. On the iWSA, from the context menu, select WSA Preferences, then on the Barracuda Web Filter tab, click the Synchronize Settings button.

Once this is done, web traffic that is sent by the WSA or iWSA will be subject to SSL Inspection.

Additional Notes:

To determine if your Web Filter is capable of SSL Inspection, see Solution #00006806


Link to this Page:

https://campus.barracuda.com/solution/5016000000142GVAAY