Version 3.
Copyright Notice Copyright © 2004-2014, Barracuda Networks, Inc., 3175 S. Winchester Blvd, Campbell, CA 95008 USA www.barracuda.com v3.x-120323-06-140107sk All rights reserved. Use of this product and this manual is subject to license. Information in this document is subject to change without notice. Trademarks Barracuda Cloud Control and Barracuda Control Server are trademarks of Barracuda Networks, Inc.
Contents C h a p t e r 1 – G e t t i n g Sta r t e d . . . . . . . . . . . . . . . . . . . . . . . 5 Overview . . . . . . . . . Concepts . . . . . . . . . Administrator Access . Management Contexts Cloud Control Context. Group Context. . . . . Product Context . . . . Exceptions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Creating Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . Use Case Scenarios . . . . . . . . . . . . . . . . . . . . . . . . . . Scenario: Opening a Support Tunnel on Multiple Devices . . . . . Scenario: Synchronizing Firmware and Energize Updates . . . . . Scenario: Applying Policies Across Multiple Barracuda Web Filters Scenario: Aggregating Reports Across Multiple Products. . . . . . Scenario: Synchronizing Security Policies Across Products . . . . . . . . . . . . . . . . . . . . . . . . .
Chapter 1 Getting Started This chapter provides an overview of the Barracuda Control Server and describes important concepts. Overview .............................................................................................. 6 Concepts ..............................................................................................
Overview The Barracuda Control Server web interface enables administrators to monitor and configure multiple Barracuda Networks products from a single console. Through the web interface, you can check the health of all connected devices, run reports that are generated by gathering data from all the devices, and assign roles with varied permissions to different types of users.
Management Contexts There are three ‘contexts’ you use to administer the Barracuda Control Server web interface and the connected products.
The center pane provides an interface for managing your account and for connecting products, as well as a snapshot of product traffic statistics for all connected products.
Product Context If you have only one of any Barracuda Networks product type connected to the Barracuda Control Server, when you click on that product link in the Cloud Control pane or in the Unit Health pane, the web interface for that individual device displays. From the product web interface, you manage the individual settings just as you would if you logged into the device directly.
Barracuda Control Server Administrator’s Guide
Chapter 2 Using the Barracuda Control Server This chapter covers features of the Barracuda Control Server appliance. Initial Setup ....................................................................................... 12 Connect to the Barracuda Control Server......................................... 14 Using the Task Manager to Monitor System Tasks............................ 15 Troubleshooting .................................................................................
Initial Setup These are the steps to set up your Barracuda Control Server.
Configure IP Address and Network Settings To set an IP address from the administrative console: 1. Connect your keyboard and monitor directly to the Barracuda Control Server. 2. At the barracuda login prompt, enter admin for the login and admin for the password. The User Confirmation Requested window displays the current IP configuration of the Barracuda Control Server. 3. Using your Tab key, select Change and press Enter to change the IP configuration. 4.
3c. If the Barracuda Control Server is behind a proxy server, enter the proxy server IP address and port number, and if required, enter the proxy server username and password in the Proxy Server Configuration section. 3d. Enter the default domain name of the Barracuda Control Server in the Domain Configuration section. Click Save Changes. Note Whenever your Barracuda Control Server IP address is changed on the IP Configuration page, you are disconnected from the administration interface.
make sure you have the latest firmware installed on the product. If not, download and install it before proceeding. 5. Enable Expert Mode on the product you wish to connect to by adding the following content to the end of the URL in your browser address bar: &expert=1 6. From the ADVANCED > Cloud Control page on the product, select Yes for Connect to Barracuda Cloud Control. 7. Enter the username and password of the account admin for your Barracuda Control Server. 8.
Connect to Barracuda Support Servers In the Support Diagnostics section of the ADVANCED > Troubleshooting page, you can initiate a connection between your Barracuda Control Server and the Barracuda Networks Technical Support Center which allows technical support engineers to troubleshoot any issues you may be experiencing.
Chapter 3 Accounts and Roles Use this chapter to understand managing user accounts and permissions. Administrator Access ......................................................................... 18 Managing User Accounts...................................................................
Administrator Access There are two different administrator accounts, one to manage and configure the Barracuda Control Server including IP configuration and SNMP management, and one to create users and connect and manage products through the Barracuda Control Server web interface. Barracuda Control Server Administrator Account To configure and manage the Barracuda Control Server, log into the device using admin as both your user name and password.
Managing User Accounts To create a new Barracuda Control Server user, log into the Barracuda Control Server web interface as the Barracuda Control Server Account Admin, and then use the following steps: 1. Go to the CLOUD CONTROL > User Management page, and in the Create User section, enter the user email address, and select the preferred time zone. 2.
Barracuda Control Server Administrator’s Guide
Chapter 4 Managing Products and Groups This chapter illustrates using all of the features of the Barracuda Control Server to manage your devices in either a group context or individually. Barracuda Control Server Administration......................................... 22 Managing Products............................................................................ 23 Interpreting Device Statistics............................................................. 25 Groups ........................................
Barracuda Control Server Administration When you log into the Barracuda Control Server as the Barracuda Control Server Account Admin, the Cloud Control context and the CLOUD CONTROL > Status page of the Barracuda Control Server web interface displays. In this context you view a summary of all devices connected to your Barracuda Control Server. Any Barracuda Networks products you have already connected are listed in the left Products pane.
Managing Products Connecting and Disconnecting Devices You must log into your Barracuda Networks product web interface directly to connect or disconnect it to/from the Barracuda Control Server. To connect a product to the Barracuda Control Server, log into the web interface as the Barracuda Control Server Account Admin, and go to the CLOUD CONTROL > Connect Devices page. Follow the steps on this page to connect the product.
Figure 4.
Interpreting Device Statistics The CLOUD CONTROL > Status page provides an overview of the performance and health of all of the Barracuda Networks devices connected to the Barracuda Control Server. In this view, the same traffic and performance statistics available in the BASIC > Status page for your other Barracuda Networks products display. Where there are multiple products of the same type, the statistics are aggregated in one section of the page.
As shown in Figure 4.3, if you hover the mouse over the exception triangle, the Barracuda Control Server displays the value of that setting for each product in the group. In this example, each Barracuda Web Application Firewall in the group has, of course, a different value for the IP Address, each of which displays in a pop-up table when you hover the mouse over the exception triangle. Figure 4.
Figure 4.5: Configuring the same setting type with unique names across a group Creating Groups If you want to create a group of a ‘mix’ of different types of Barracuda products: 1. From the Cloud Control left pane, click Groups, and click Add. Enter a name for the group of devices.
Scenario: Synchronizing Firmware and Energize Updates The Barracuda Control Server provides a fast and convenient method of keeping track of firmware versions running on all of your Barracuda Networks products. Click Firmwares in the Cloud Control left pane, and expand the product tree. Each firmware version displays as a separate folder beneath the device name. Expand the folder to view all devices currently on that firmware version.
Figure 4.7: Data aggregated across multiple Barracuda Web Filters Scenario: Synchronizing Security Policies Across Products You have four Barracuda Web Application Firewalls serving three locations: New York, San Francisco and London. Your master Security Policies database dictates that all devices should have the HttpOnly attribute set to Yes for cookies, preventing the cookie from being accessed by client-side scripts.
Barracuda Control Server Administrator’s Guide
Chapter 5 Task Manager This chapter covers features of the Barracuda Control Server appliance. Using the Task Manager to Monitor System Tasks............................ 32 Troubleshooting .................................................................................
Using the Task Manager to Monitor System Tasks The ADVANCED > Task Manager page in the Cloud Control context provides a list of tasks that are in the process of being performed, and displays any errors encountered when performing these tasks.
Appendix A About the Hardware Hardware Compliance This section contains compliance information for the Barracuda Backup Service hardware. Notice for the USA Compliance Information Statement (Declaration of Conformity Procedure) DoC FCC Part 15: This device complies with part 15 of the FCC Rules. Operation is subject to the following conditions: 1. This device may not cause harmful interference, and 2.
Barracuda Control Server Administrator’s Guide
Appendix B Limited Warranty and License Limited Warranty Barracuda Networks, Inc., or the Barracuda Networks, Inc. subsidiary or authorized Distributor selling the Barracuda Networks product, if sale is not directly by Barracuda Networks, Inc., (“Barracuda Networks”) warrants that commencing from the date of delivery to Customer (but in case of resale by a Barracuda Networks reseller, commencing not more than sixty (60) days after original shipment by Barracuda Networks, Inc.
Exclusions and Restrictions This limited warranty does not apply to Barracuda Networks products that are or have been (a) marked or identified as “sample” or “beta,” (b) loaned or provided to you at no cost, (c) sold “as is,” (d) repaired, altered or modified except by Barracuda Networks, (e) not installed, operated or maintained in accordance with instructions supplied by Barracuda Networks, or (f) subjected to abnormal physical or electrical stress, misuse, negligence or to an accident.
3. You may not transfer, rent, lease, lend, or sublicense the Barracuda Software. 4. This License is effective until terminated. This License is automatically terminated without notice if you fail to comply with any term of the License. Upon termination you must destroy or return all copies of the Barracuda Software. 5. YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT THE USE OF THE BARRACUDA SOFTWARE IS AT YOUR OWN RISK AND THAT THE ENTIRE RISK AS TO SATISFACTION, QUALITY, PERFORMANCE, AND ACCURACY IS WITH YOU.
YOU MAY RETURN THE SOFTWARE FOR A FULL REFUND, OR, IF THE SOFTWARE IS SUPPLIED AS PART OF ANOTHER PRODUCT, YOU MAY RETURN THE ENTIRE PRODUCT FOR A FULL REFUND. YOUR RIGHT TO RETURN AND REFUND EXPIRES 30 DAYS AFTER PURCHASE FROM BARRACUDA NETWORKS OR AN AUTHORIZED BARRACUDA NETWORKS RESELLER, AND APPLIES ONLY IF YOU ARE THE ORIGINAL PURCHASER.
AT THE TIME OF ACQUIRING SUCH COPY OR UPGRADE, ALREADY HOLDS A VALID LICENSE TO THE ORIGINAL ENERGIZE UPDATE SOFTWARE AND HAS PAID THE APPLICABLE FEE FOR THE UPGRADE; (2) USE OF UPGRADES IS LIMITED TO BARRACUDA NETWORKS EQUIPMENT FOR WHICH CUSTOMER IS THE ORIGINAL END USER PURCHASER OR LESSEE OR WHO OTHERWISE HOLDS A VALID LICENSE TO USE THE ENERGIZE UPDATE SOFTWARE WHICH IS BEING UPGRADED; AND (3) USE OF ADDITIONAL COPIES IS LIMITED TO BACKUP PURPOSES ONLY. Energize Update Changes.
Restricted Rights. Barracuda Networks' commercial software and commercial computer software documentation is provided to United States Government agencies in accordance with the terms of this Agreement, and per subparagraph “(c)” of the “Commercial Computer Software - Restricted Rights” clause at FAR 52.227-19 (June 1987). For DOD agencies, the restrictions set forth in the “Technical Data-Commercial Items” clause at DFARS 252.227-7015 (Nov 1995) shall also apply. No Warranty.
Open Source Licensing Barracuda products may include programs that are covered by the GNU General Public License (GPL) or other “open source” license agreements. The GNU license is re-printed below for you reference. These programs are copyrighted by their authors or other parties, and the authors and copyright holders disclaim any warranty for such programs. Other programs are copyright by Barracuda Networks.
c) If the modified program normally reads commands interactively when run, you must cause it, when started running for such interactive use in the most ordinary way, to print or display an announcement including an appropriate copyright notice and a notice that there is no warranty (or else, saying that you provide a warranty) and that users may redistribute the program under these conditions, and telling the user how to view a copy of this License.
if he or she is willing to distribute software through any other system and a licensee cannot impose that choice. This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. 8.
Barracuda Products may contain programs that are copyright (c)1995-2005 International Business Machines Corporation and others. All rights reserved.
means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution.
that a file or class name and description of purpose be included on the same "printed page" as the copyright notice for easier identification within third-party archives. Copyright [yyyy] [name of copyright owner] Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.
Limited Warranty and License 47
Barracuda Networks Technical Documentation RECLAIM YOUR NETWORK™
