Barracuda Web Filter 410 and higher
In an inline deployment, your WSA will shut down when it is in your network behind the Web Filter, allowing the Web Filter to filter traffic directly. When your laptop is outside of your network, the WSA will detect that the Web Filter is not upstream and will turn on, and proxy traffic to the IP or Hostname you entered on the Advanced > Remote Filtering page.
However, if you have deployed your Web Filter as a Forward Proxy, things get a little more complicated. In this deployment, the WSA will not shut off in your network (since there is no upstream Web Filter), so it will ALWAYS proxy traffic to the filter. In this case, the IP to which you will need to send traffic will be different inside of your network (your Web Filter's local IP) and outside of your network (your network's external IP). To resolve this conflict, you must set the WSA to proxy to a hostname that is resolvable both INSIDE and OUTSIDE your network.
To do this:
1. Create a DNS entry in your local DNS for the hostname of your Web Filter, pointing to the local IP of the Web Filter.
2. Create a public DNS entry for the hostname of your Web Filter, pointing to the external IP of your Web Filter.
Note: Both FQDN entries MUST MATCH.
3. Make sure that you are port forwarding inbound 8280 traffic from your firewall to your Web Filter. If you have set a different Destination Port on the Advanced > Remote Filtering page, then that is the one you will need to set port forwarding for.
4. Enter the FQDN of your Web Filter in the External IP Address/Hostname field on the Advanced > Remote Filtering page.
5. Sync your WSAs. This can be done by clicking on the icon in the taskbar and selecting Sync Settings (if the icon is available), or logging out and logging in to or rebooting your computer. On the iWSA, from the context menu, select WSA Preferences, then on the Barracuda Web Filter tab, click the Synchronize Settings button.
Now your WSAs should be able to resolve the Web Filter IP and proxy traffic to it from inside and outside of your network.
Link to this Page: