We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Security Service

When should I use Service Enforcement mode over Local Enforcement mode on my Web Security Gateway?

  • Type: Knowledgebase
  • Date changed: 2 years ago
Solution #00006412

Applies to Web Security Service when using a Web Security Gateway.

The Local Enforcement option trades full functionality for speed and reliability. This mode essentially acts as a Web Filter, where content filtering and malware scanning occurs locally and reporting information and rules are synced with the cloud. While not all Web Security Service features are supported in this mode, they may be added in the future. Please contact Barracuda Networks Technical Support for an update.

Advantages of Local Enforcement:
• Fewer hops means lower latency
• Local content cache decreases bandwidth usage
• Fault tolerance in case of Flex service failure

Unsupported Features in Local Enforcement:
• Youtube for Schools
• SSL Inspection (See Note below)
• Coach Action (treated as Block in Local Enforcement)
• Custom Block Page

Service Enforcement redirects all traffic to the cloud for filtering. While this means that traffic is slower and uses more bandwidth, it also supports all features which are not available to Local Enforcement.

Supported Features in Service Enforcement:
• Youtube for Schools

• Coach option available
• Custom Block Page

Limitations of Service Enforcement:
• Slightly longer response times from webpages
• Does not utilize local content cache
• Loss of connectivity in case of Flex service failure

Best practice: If your organization requires any of the features mentioned, then Service Enforcement mode is the best option. Otherwise, use Local Enforcement for bandwidth and speed enhancements.

Note: SSL Inspection is different from normal SSL Filtering. Gateways in Local Enforcement can still utilize SSL Filtering, and can therefore still block/report on HTTPS traffic. SSL Inspection involves decrypting the HTTPS traffic to scan for malware, and apply URL modification such as Youtube for Schools redirection.

Additional Notes:
Please reference our Techlib articles for additional resources on topics discussed in this article:

How to Configure YouTube for Schools

Coach Action/Actions on Violation of a Rule

Forward Proxy Deployment

Custom Block Pages

Link to this page: