We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Security Service

How can I install the Barracuda Web Security Agent via a GPO?

  • Type: Knowledgebase
  • Date changed: 5 years ago
Solution #00005410

Scope:

This solution applies to the Barracuda Web Security Agent

Answer:

Install the WSA application on Win2K8 Server:

Step 1: Downloading the MSI Windows Installer Package, Creating an MST using ORCA Tool
  1. Log on to the server computer as an administrator.
  2. Create a Shared Folder on the network where you will put the Installer package (.msi file) that you want to distribute.
  3. Login to the Flex portal at http://login.barracuda.com. Click Web Security and navigate to the Support tab. 
  4. Click on the (Download/Install) link to Download Barracuda WSA MSI installer present at the page bottom in ‘Download Web Security Agent’ section.
  5. Save the MSI Installer file in Shared Folder.
  6. Download the ORCA Tool, which is basically an MSI Table Editor to create a transform file .mst. The link to download the Tool is here.
  7. Launch the ORCA Tool after download. Click on File > Open in the dialog window. Select the Installer Package “BarracudaWSASetup” from the Shared Folder. Click on Open. Once all the database tables are loaded, Select “New Transform” from the Transform menu item. Select “Property” table from the left list. Scroll to the bottom of the table, right click and select “Add Row”. Add the following Properties with corresponding values to specify the use of Barracuda Web Security Flex as a service.
    Property:SERVICE_MODE    Value:1
    Property:USER_MODE    Value:0 (1 for Silent Mode)
    Property:SERVICE_URL    Value: Service Host found on the Support tab within the Flex Portal
    Property:SERVICE_PORT    Value:8080
    Property:AUTH_KEY    Value: The default Auth Key found within the Configuration > Key Management tab of the Flex Portal
                                                                                                                                                    
  8. After adding all the properties, Select “Generate Transform” from the Transform menu item. Save this .mst file in the same Shared Folder which contains .msi file. Close the ORCA tool window.
Step 2: Deploy WSA application through the Active Directory by creating a GPO
This procedure basically involves 3 steps before deployment.
  • Create a Container or Organizational Unit.
  • Create a GPO.
  • Link GPO to the Container.
  • Deploy the application.
  1. Open the Active Directory Users and Computers window. In the console tree, right-click your domain, and then Select New > Organizational Unit. Provide a name for the Container and uncheck the checkbox “Protect container from accidental deletion” so as to be able to delete this container later. If the checkbox is marked, it is not possible to delete this container. In the same Active Directory Users and Computers window, to the Container, add the users and machines for which the policy needs to be applied. OR you can move the users from USERS account to the container and machine accounts from COMPUTERS account to the container. Moving the users or machines prompts a warning. New domain users and computers can be created in this container.
  2. To create a GPO, navigate to Start > Administrative Tools > Group Policy Management. Expand the tree for your domain, select the newly created Container or OU, right-click and select the item “Create a GPO in this domain, and Link it here…”
  3. Provide a name for the GPO and Click on OK to close the window. This GPO will be added to your container and also to the Group Policy Objects list. Now, select this GPO which is present in your container and right-click. Click on Edit to open Group Policy Management Editor.
  4. If you assign this application to a user, it is installed when the user logs on to the computer. If you assign this application to a computer, it is installed when the computer starts.
  5. To assign an application to  a computer, In the Group Policy Management Editor, Expand “Computer Configuration”, then expand “Policies” and “Software Settings”. Select “Software installation”, right-click and select New > Package…
  6. In the Open dialog box, make sure you type the full Universal Naming Convention (UNC) path of the shared installer package that you want. For example, \\QAWIN2K8DC\msi files\BarracudaWSASetup.msi Click Open. Select the Deployment Method as Advanced and Click OK.
  7. In the Barracuda Web Security Agent Properties window, Click on Modifications > Add. In the Open dialog box, type the full Universal Naming Convention (UNC) path of the .mst Transform file. For example, \\QAWIN2K8DC\msi files\mysetup.mst and Click Open. Click OK button in the Barracuda Web Security Agent Properties window. Close all the open windows.
  8. From the command-line window, run command to force update of group policy.
    C:\Users\Administrator>gpupdate /Force
    Updating Policy...
    User Policy update has completed successfully.
    Computer Policy update has completed successfully.
  9. To assign an application to user, Expand “User Configuration”, then expand “Policies” and “Software Settings”. Select “Software installation”, right-click and select New > Package…
  10. The rest of the setup for User Configuration is similar to Computer Configuration, concluding with a forced group policy update.
Install the WSA application on Win2K3 Server:

Step 1: Downloading the MSI Windows Installer Package, Creating an MST using ORCA Tool
  1. Log on to the server computer as an administrator.
  2. Create a Shared Folder on the network where you will put the Installer package (.msi file) that you want to distribute.
  3. Login to the Flex portal at http://login.barracuda.com. Click Web Security and navigate to the Support tab. 
  4. Click on the (Download/Install) link to Download Barracuda WSA MSI installer present at the page bottom in ‘Download Web Security Agent’ section.
  5. Save the MSI Installer file in Shared Folder.
  6. Download the ORCA Tool which is basically an MSI Table Editor to create a transform file .mst. The link to download the Tool is here.
  7. Launch ORCA Tool after download. Click on File > Open in the dialog window. Select the Installer Package “BarracudaWSASetup” from the Shared Folder. Click on Open. Once all the database tables are loaded, Select “New Transform” from the Transform menu item. Select “Property” table from the left list. Scroll to the bottom of the table, right click and select “Add Row”. Add the following Properties with corresponding values to specify the use of Barracuda WebFilter as a service.
    Property:SERVICE_MODE    Value:1
    Property:USER_MODE    Value:0 (1 for Silent Mode)
    Property:SERVICE_URL    Value: Service Host found on the Support tab within the Flex Portal
    Property:SERVICE_PORT    Value:8080
    Property:AUTH_KEY    Value: The default Auth Key found within the Configuration > Key Management tab of the Flex Portal

  8. After adding all the properties, Select “Generate Transform” from the Transform menu item. Save this .mst file in the same Shared Folder which contains .msi file. Close the ORCA tool window.
Step 2: Deploy WSA application through the Active Directory by creating GPO
This procedure basically involves 3 steps before deployment.
  • Create a Container or Organizational Unit.
  • Create a GPO.
  • Link GPO to the Container.
  • Deploy the application.
  1. Open the Active Directory Users and Computers window. In the console tree, right-click your domain, and then Select New > Organizational Unit. Provide a name for the Container and Click OK. In the same Active Directory Users and Computers window, to the Container, add the users and machines for which the policy needs to be applied. OR you can move the users from USERS account to the container and machine accounts from COMPUTERS to the container. Moving the users or machines prompts a warning. New domain users and computers can be created in this container.
  2. To create a GPO, Open the Active Directory Users and Computers window, select your domain, right-click and select Properties. In the Properties window, click on Group Policy tab. Click on New. Provide a name for this new Policy object. Close the Properties window by clicking on Close button.
  3. Now, link this GPO to the new Container. In the same Active Directory Users and Computers window, select the new Container, right-click and choose Properties. In the Properties window, click on Group Policy tab. Then Click on Add. In the window “Add a Group Policy Object Link” Click on All tab. Select the new GPO and Click OK to close the window. Click on Apply and OK to close the Container Properties window.
  4. If you assign this application to a user, it is installed when the user logs on to the computer. If you assign this application to a computer, it is installed when the computer starts.
  5. To assign an application to computer, right-click your domain in Active Directory Users and Computers window, select Properties. In the domain Properties window, click on Group Policy tab. Select the new GPO and click on Edit. This opens the Group Policy Object Editor.
  6. Expand “Computer Configuration”, and then “Software Settings”. Select “Software installation”, right-click and select New > Package
  7. In the Open dialog box, make sure you type the full Universal Naming Convention (UNC) path of the shared installer package that you want. For example, \\WFDEVDC01\msi files\BarracudaWSASetup.msi Click Open. Select the Deployment Method as Advanced and Click OK.
  8. In the Barracuda Web Security Agent Properties window, Click on Modifications tab, Click on Add. In the Open dialog box, type the full Universal Naming Convention (UNC) path of the .mst Transform file. For example, \\WFDEVDC01\msi files\mysetup.mst and Click Open. Click OK in the Barracuda Web Security Agent Properties window. Close all the open windows.
  9. From the command-line window, run command to force update of group policy.
    C:\Documents and Settings\Administrator.WFDEVDC01>gpupdate /Force
    Refreshing Policy...

    User Policy Refresh has completed.
    Computer Policy Refresh has completed.

    To check for errors in policy processing, review the event log.

    Certain User policies are enabled that can only run during logon.
    Certain Computer policies are enabled that can only run during startup.

    OK to Reboot? (Y/N)

    If the Server computer is rebooted, it installs WSA on the server machine also.
  10. To assign an application to user, Expand “User Configuration”, then expand “Policies” and “Software Settings”. Select “Software installation”, right-click and select New > Package…
  11. Rest of the setup for User Configuration is similar to Computer Configuration and finally concluding with a forced group policy update.
Step 3: Application Install (both Win2K3 and Win2K8 servers)
  1. Start a computer that is joined to the domain for applying the computer-based policy.
  2. Log in as domain user to apply the user-based policy.
  3. Look at the system tray. WSA Monitor icon should be present there. This concludes that WSA application has been installed. You can also verify this in Add/Remove Programs category from Control Panel.
Troubleshooting
  1. A common cause of failure is the user and/or the user’s computer does not have adequate access to the share location. Verify that all access and network privileges have been configured appropriately.
  2. Additional error messages may be found in the Event Log on the domain computer.
  3. If the Event Log has no useful information, consider enabling verbose logging and restarting the computer.
  4. Additional information on fixing Group Policy issues can be found here.
Additional Notes:
See Solution #00005348 on how to create and use a mst file.

You must have the Microsoft .NET framework installed before you install the Barracuda WSA using the MSI installation method. The MSI file does not install the.NET framework for you.
The Barracuda WSA operates on network traffic at a low level within the operating systems, so some Anti-Virus applications may flag the Barracuda WSA as suspicious during installation or operation. Ensure that your Anti-Virus client does not block or does have an exception for any Barracuda WSA files that the Anti-Virus client flags as suspicious.



Link to this page:
https://www.barracudanetworks.com/kb?id=50160000000IOct