We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Security Gateway

Can I use my WSA if my Web Filter is deployed as a Forward Proxy?

  • Type: Knowledgebase
  • Date changed: 4 years ago
Solution #00006847

Scope:
Barracuda Web Filter 410 and higher

Answer:
In an inline deployment, your WSA will shut down when it is in your network behind the Web Filter, allowing the Web Filter to filter traffic directly. When your laptop is outside of your network, the WSA will detect that the Web Filter is not upstream and will turn on, and proxy traffic to the IP or Hostname you entered on the Advanced > Remote Filtering page.

However, if you have deployed your Web Filter as a Forward Proxy, things get a little more complicated. In this deployment, the WSA will not shut off in your network (since there is no upstream Web Filter), so it will ALWAYS proxy traffic to the filter. In this case, the IP to which you will need to send traffic will be different inside of your network (your Web Filter's local IP) and outside of your network (your network's external IP). To resolve this conflict, you must set the WSA to proxy to a hostname that is resolvable both INSIDE and OUTSIDE your network.

To do this:

1. Create a DNS entry in your local DNS for the hostname of your Web Filter, pointing to the local IP of the Web Filter.

2. Create a public DNS entry for the hostname of your Web Filter, pointing to the external IP of your Web Filter.

Note: Both FQDN entries MUST MATCH.

3. Make sure that you are port forwarding inbound 8280 traffic from your firewall to your Web Filter. If you have set a different Destination Port on the Advanced > Remote Filtering page, then that is the one you will need to set port forwarding for.

4. Enter the FQDN of your Web Filter in the External IP Address/Hostname field on the Advanced > Remote Filtering page.

5. Sync your WSAs. This can be done by clicking on the icon in the taskbar and selecting Sync Settings (if the icon is available), or logging out and logging in to or rebooting your computer. On the iWSA, from the context menu, select WSA Preferences, then on the Barracuda Web Filter tab, click the Synchronize Settings button.

Now your WSAs should be able to resolve the Web Filter IP and proxy traffic to it from inside and outside of your network.


Link to this Page:

https://campus.barracuda.com/solution/5016000000143esAAA