Barracuda Web Site Firewall Quick Start Guide
e
The Barracuda Web Site Firewall is a comprehensive Layer 7 securit y solu tion which
protects your Web sites and Web application against hackers leveraging protocol and
application vulnerabilities to instigate data theft, denial of service or defacement of your
Web Site. This guide describes the deployment of the Barracuda Web Site Firewall in
Bridge-mode, which is the factory-shipped default setting. The device can also be
deployed as Reverse Proxy (Route-path) or One-armed Proxy. The deployment methods
and strategies are discussed in detail in the Barracuda Web Site Firewall Administrator’s
Guide.
Bridge Mode
Bridge Mode
BVIP1: 192.168.9.10
BVIP2: 192.168.9.20
BVIP3: 192.168.9.30
WAN LAN
192.168.9.10
Servers
192.168.9.20
192.168.9.30
Internet
Management
172.10.10.5
192.168.9.1
Mgmt
Getting Started
This guide provides setup instructions for the Barracuda Web Site
Firewall. We
recommend that you read these instructions fully before proceeding. To begin
setting up your Barracuda Web Site Firewall, you will need the following:
• Barracuda Web Site Firewall
• Mounting rails (model 660 and higher)
• AC power cord
• Ethernet cable (crossover cable might be needed)
• VGA monitor and PS2 keyboard (recommended)
Physical Installation
To install the Barracuda Web Site Firewall:
1. Fasten the Barracuda Web Site Firewall to a 19-inch rack or place it in a
stable location.
2. Connect the network switch that is currently being used to access the Web
site to the WAN port on the front panel of the Barracuda Web Site Firewall.
Connect the back-end server network to the LAN port.
Barracuda Web Site Firewall - Quick S tart Guid
3. Connect a standard VGA monitor, PS2 keyboard, and AC power cord to the
unit. Note: Immediately after connecting an AC power cord to the unit, it
may power ON for a few seconds and then power OFF.
4. Press the POWER button on the front panel to turn the unit ON.
Configure IP Address and Network Settings
Note: The System IP address of the unit can be reached through the WAN port
or via crossover cable connected the serial port.
Use a computer with a Web browser that is connected to the same network as
the Barracuda Web Site Firewall and follow these steps:
The Barracuda Web Site Firewall supports Ethernet hard bypass mode. If
you choose the hard bypass mode, the only way to access the device
management interface is through the Ethernet network management port
on the back panel. To do this, connect the management port located on
the back panel of the unit to the network.
If you have a VGA monitor connected, the Barracuda Web Site Firewall displays
the Boot Menu initially, and the Administrative Console login prompt once fully
booted. To begin the configuration:
1. Login to the Administrative Console using the admin login:
• Login: admin
• Password: admin
barracuda login admin
password
2. Configure the IP address for the Barracuda Web Site Firewall, Network
Mask, Default Gateway, DNS1, and DNS2 as appropriate for your network.
3. Save your changes.
If you do not have a monitor and keyboard, you can set the System IP address
using the RESET button on the front panel. Press and hold the RESET button
per the following table:
IP address Press and hold RESET for…
192.168.200.200 5 seconds
192.168.1.200 8 seconds
10.1.1.200 12 seconds
Barracuda Web Site Firewall Configuration
1. In your Web browser’s address bar, enter http:// followed by the Barracuda
Web Site Firewall’s IP address, followed by the default Web Interface HTTP
Barracuda Web Site Firewall
e
Port (:8000). For example, if you configured the Barracuda Web Site
Firewall with an IP address of 192.168.200.200, you would type:
http://192.168.200.200:8000
2. Log in to the Barracuda Web Site Firewall’s Web interface as the
administrator.
Username: admin Password: admin
3. Go to the BASIC > IP Configuration page to configure the LAN IP
Configuration. Enter the LAN port IP address and subnet mask to which
you will later connect all of your Real Servers.
4. Go to the BASIC > Administration page and specify how and where to
deliver system alerts and notifications from the Barracuda Central. For
Email Notifications, specify the SMTP Server, System Alerts Email
Address and System Contact Email.
5. Click any one of the Save Changes buttons to save all of the information.
Update the Firmware
1. Go to the ADVANCED > Firmware Update page.
2. Click Download Firmware. Click OK to acknowledge the download duration
message. To avoid damaging the Barracuda Web Site Firewall, do not
power it OFF during an update or download. To view download progress,
refresh your browser. You will be notified when the download is complete.
3. On the ADVANCED > Firmware Update page, click Apply Now to apply
the firmware. This will take a few minutes to complete.
4. Click OK when prompted to reboot.
5. After the system reboots, log in to the Web interface again and read the
release notes to learn about enhancements and new features. It is also a
good practice to verify settings, as new features may have been included
with the firmware update.
Change the Administrator Password
To avoid unauthorized use, change the default administrator password to a more
secure password. You can only change the administrator password for the Web
interface. You cannot change the password for the Administrative Console, but
this is only accessible via the keyboard, which you can disconnect at any time.
1. Go to the BASIC > Administration page, and enter your old and new
passwords.
2. Click Save Password.
Product Activation
Verify that the Energize Updates feature is activated on your Barracuda Web Site
Firewall by going to BASIC > Status page. Under Subscription Status,
Barracuda Web Site Firewall - Quick S tart Guid
make sure the Energize Updates is displayed as Current. If the
Energize Updates is displayed as Not Activated; click the corresponding
activation link to go to Barracuda Networks Product Activation page and
complete the activation of your subscriptions.
Configure your First Service
The Barracuda Web Site Firewall is now ready for testing. For Bridge-mode
deployment, connect the Web server you want to secure to the switch connected
to the LAN port. Ensure that their IP addresses are within the LAN IP port
address and subnet mask defined in Step 4 and LAN port IP address of the
Barracuda Web Site Firewall is reachable from the Web server.
1. Go to BASIC > Services page and do the following in the specified fields:
• Service Name: Enter the name of the service you wish to create. This
is a name you can use to identify the service in the future.
• IP Address:
• Port: Enter the port on which your Web server responds (normally it is
80 for HTTP traffic and 443 for HTTPS traffic).
• Type: Select the service type as either HTTP or HTTPS from the drop-
down list. Note: A certificate is required when the service type is
HTTPS.
2. Click Add.
Test Connectivity
Verify network connectivity by using a machine in your existing network to access
the Service. Use your browser to access the Web site in the same way as you
were doing earlier. For details on how to connect, refer the Bridge Mode
illustration.
Your Barracuda Web Site Firewall is now ready for operation. Incoming traffic
for your Web site will be intercepted by the Barracuda Web Site Firewall, and
inspected for any attacks before being forwarded on to your Web server.
NOTE: The documentation is available at http://www.barracuda.com/documentation
Be sure to check out the Barracuda Networks Support Forum at
http://forum.barracuda.com for Frequently Asked Questions and other helpful tips for
setting up and using your Barracuda Web Site Firewall. For technical support, please
contact support@barracuda.com.
Contact and Copyright Information
Barracuda Networks, Inc. 3175 S. Winchester Blvd., Campbell, CA 95008 USA • Pho ne: 408. 342 .54 00 • www.barracuda.com
Copyright 2008 © Barracuda Networks, Inc. All rights reserved. Use of this product and this manual is subject to license. Information in this document is subject to
change without notice. Barracuda Web Site Firewall is a trademark of Barracuda Networks, Inc. All other brand and product names mentioned in this document
are registered trademarks or trademarks of their respective holders. 080408-70v4123-03-0619
Enter the Global IP address of your Web server.
.
Barracuda Web Site Firewall
Loading...