Solution # 00006820
Barracuda Web Filters 410 or higher, as of 7.1 firmware
SSL Inspection allows the Web Filter to inspect HTTPS traffic as it filters it, so the Web Filter to apply URL patterns to the traffic, employ Safe Search enforcement on HTTPS traffic such as google.com searchs, and enforce Web App Monitoring for all features. SSL Inspection is available to WSA and iWSA users who are proxying through a Barracuda Web Filter, if that Web Filter has SSL Inspection enabled.
Note: Currently SSL inspection of HTTPS traffic is done on the Web Filter itself, meaning that
a) this is only available if the agent is NOT in Policy Lookup Only (PLO) mode, where traffic is not proxied through the web filter.
b) it is NOT available at this time to users of Barracuda's Web Security Service cloud-based web filtering.
Take these steps to enable SSL Inspection.
1. Enable SSL Inspection on your Web Filter. See our techlibrary article at https://techlib.barracuda.com/BWF/ConfigSSLInspection71 for instructions on how to configure this.
2. Go to the ADVANCED > Remote Filtering page and set Policy Lookup Only Mode to No.
3. Install your Web Filter root certificate in your browsers..
410s: Go to the BLOCK/ACCEPT > Configuration page to enable SSL Inspection. Download the Root Certificate For Browsers from the page and install in the browsers of all remote machines running the Barracuda WSA or iWSA.
610s and above: Go to the ADVANCED > SSL Inspection page to enable SSL Inspection. Download the Root Certificate For Browsers from the page and install in the browsers of all remote machines running the Barracuda WSA or iWSA.
4. Sync your WSA or iWSA. This can be done by clicking on the icon in the taskbar and selecting Sync Settings (if the icon is available), or logging out and logging in to or rebooting your computer. On the iWSA, from the context menu, select WSA Preferences, then on the Barracuda Web Filter tab, click the Synchronize Settings button.
Once this is done, web traffic that is sent by the WSA or iWSA will be subject to SSL Inspection.
To determine if your Web Filter is capable of SSL Inspection, see Solution #00006806
Link to this Page: