Barracuda Control Server Service manual

Version 3.x

Copyright Notice
Copyright © 2004-2014, Barracuda Networks, Inc., 3175 S. Winchester Blvd, Campbell, CA 95008 USA
www.barracuda.com
v3.x-120323-06-140107sk
All rights reserved. Use of this product and this manual is subject to license. Information in this document is subject to change without notice.
Trademarks
Barracuda Cloud Control and Barracuda Control Server are trademarks of Barracuda Networks, Inc. All other brand and product names mentioned in this
document are registered trademarks or trademarks of their respective holders.

3
Contents
Chapter 1 – Getting Started . . . . . . . . . . . . . . . . . . . . . . . 5
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Administrator Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Management Contexts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Cloud Control Context. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Group Context. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Product Context . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Exceptions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Chapter 2 – Using the Barracuda Control Server . . . . . . 11
Initial Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Prepare for Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Connect Barracuda Control Server to Network . . . . . . . . . . . . . . . . . 12
Configure IP Address and Network Settings . . . . . . . . . . . . . . . . . . 13
Network Path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Configure Your Corporate Firewall . . . . . . . . . . . . . . . . . . . . . . . 13
Configure the Barracuda Control Server Administrative Settings. . . . . . . . 13
Configure SNMP Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Front Panel Indicator Lights. . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Connect to the Barracuda Control Server . . . . . . . . . . . . . . . . . . . . . 14
Using the Task Manager to Monitor System Tasks . . . . . . . . . . . . . . . . . 15
Troubleshooting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Testing Network Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Connect to Barracuda Support Servers. . . . . . . . . . . . . . . . . . . . . 16
Contacting Technical Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Chapter 3 – Accounts and Roles . . . . . . . . . . . . . . . . . . 17
Administrator Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Barracuda Control Server Administrator Account . . . . . . . . . . . . . 18
Barracuda Control Server Account Admin . . . . . . . . . . . . . . . . . 18
Creating the Barracuda Control Server Account Admin . . . . . . . . . . . . . . 18
Managing User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Administrator Actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Chapter 4 – Managing Products and Groups . . . . . . . . . 21
Barracuda Control Server Administration. . . . . . . . . . . . . . . . . . . . . . 22
Managing Products . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Connecting and Disconnecting Devices. . . . . . . . . . . . . . . . . . . . . 23
The Product Tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
The Firmware Tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
The Unit Health Pane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Product Context . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Interpreting Device Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Synchronizing Settings Across a Group. . . . . . . . . . . . . . . . . . . . . 25
Settings Not Configurable in the Group Context . . . . . . . . . . . . . . . . 25
Dealing With Exceptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Exception Triangle . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Exception Circle . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

4 Barracuda Control Server Administrator’s Guide
Creating Groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Use Case Scenarios . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Scenario: Opening a Support Tunnel on Multiple Devices . . . . . . . . . . . 27
Scenario: Synchronizing Firmware and Energize Updates . . . . . . . . . . . 28
Scenario: Applying Policies Across Multiple Barracuda Web Filters . . . . . . 28
Scenario: Aggregating Reports Across Multiple Products. . . . . . . . . . . . 28
Scenario: Synchronizing Security Policies Across Products . . . . . . . . . . 29
Chapter 5 – Task Manager . . . . . . . . . . . . . . . . . . . . . . . 31
Using the Task Manager to Monitor System Tasks . . . . . . . . . . . . . . . . . 32
Troubleshooting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Testing Network Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Connect to Barracuda Support Servers. . . . . . . . . . . . . . . . . . . . . 32
Appendix A – About the Hardware . . . . . . . . . . . . . . . . . 33
Hardware Compliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Notice for the USA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Notice for Canada . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Notice for Europe (CE Mark) . . . . . . . . . . . . . . . . . . . . . . . . 33
Appendix B – Limited Warranty and License . . . . . . . . . 35
Limited Warranty . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Exclusive Remedy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Exclusions and Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Software License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Energize Update Software License . . . . . . . . . . . . . . . . . . . . . . . 37
Open Source Licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

Getting Started 5
Chapter 1
Getting Started
This chapterprovides an overview of the Barracuda Control Server and describes important concepts.
Overview..............................................................................................6
Concepts ..............................................................................................6

6 Barracuda Control Server Administrator’s Guide
Overview
The Barracuda Control Server web interface enablesadministrators to monitor and configure multiple
Barracuda Networks products from a single console. Through the web interface, you can check the
health of all connected devices, run reports that are generated by gathering data from all the devices,
and assign roles with varied permissions to different types of users.
The Barracuda Control Server web interface provides for convenient configuration and management
of multiple Barracuda Networks device settings, while providing a view of each device web interface
for individual configuration or reporting.
Key statistics can be viewed by device type at a glance on the CLOUD CONTROL >Status page of the
web interface with the ability to drill down for more detail into the individual web interface for each
connected device.
This guide walks you through installation and initial configuration of your Barracuda Control Server,
and provides concepts and examples to help you understand how to manage Barracuda Networks
products with the Barracuda Control Server web interface according to your organization’s
deployment needs and security policies.
Concepts
Understanding these concepts enables you to take full advantage of the Barracuda Control Server
features for configuring and synchronizing settings on individual or groups of Barracuda Networks
products.
Administrator Access
There are two different administrator accounts:
•Barracuda Control Server Administrator Account – Manage and configure the Barracuda
Control Server. To configure and manage the Barracuda Control Server, log into the system
using admin as your user name and password. Once logged in, you can view and manage the
device, update security definitions, manage the displayed image, troubleshoot the device, and
view tasks and task errors.
•Barracuda Control Server Account Admin – Manage and connect products through the
Barracuda Control Server web interface. Create users and assign various permissions to each
user for access to the Barracuda Control Server, connect devices, and view device status.
Use the web interface to link your Barracuda Network devices including:
• Barracuda Spam Firewall
• Barracuda Web Filter
• Barracuda Web Application Firewall
• Barracuda Message Archiver
• Barracuda Link Balancer
• Barracuda Load Balancer
When you log in to the Barracuda Control Server as the account admin, the connected devices display
in the left pane.

Getting Started 7
Management Contexts
There are three ‘contexts’ you use to administer the Barracuda Control Server web interface and the
connected products. These contexts include:
•TheCloud Control context; for managing Barracuda Control Server web interface
configuration;
•TheProduct context; for managing an individual Barracuda Networks product using the
product web interface;
•TheGroup context; for managing a group of the same type of Barracuda Networks products
with one web interface, or for grouping products by company, location, or department.
These contexts are described briefly below.
Cloud Control Context
When you log into the Barracuda Control Server web interface, you first see the Cloud Control
context–on the CLOUD CONTROL > Status page–which displays a snapshot of product traffic
statistics for the connected Barracuda Networks product(s).
The Cloud Control pane on the left displays either a list of individual products connected to the
Barracuda Control Server, or groups of products which you create:

8 Barracuda Control Server Administrator’s Guide
The center pane provides an interface for managing your account and for connecting products, as well
as a snapshot of product traffic statistics for all connected products. The Unit Health pane on the right
includes a performance overview, connectivity, firmware, storage, and subscription status for each
individual product organized by product type:
Once you click on an individual product, either in the Cloud Control pane or in the Unit Health pane,
you leave the ‘Cloud Control context’ and drill-down into the product type web interface. The product
web interface displays activity for an individual product if you have only one of that type connected.
If you have multiple of one product type connected, the settings and statistics for all products of that
type display in one web interface as described below.
Group Context
Grouping Barracuda Networks products enables you to manage settings and apply policies across
multiple Barracuda Networks products of the same type from one web interface. You can also use
“grouping” to organize your Barracuda Networks products by location, company, department, etc.,
and you can include products of different types. Grouping happens in one of two ways:
1. By default, the Barracuda Control Server groups Barracuda Networks products by
product type. For example, if you have two or more Barracuda Web Application Firewalls
connected to a Barracuda Control Server, they are automatically grouped as such. You can then
click on that product type in the Cloud Control pane and see one web interface with aggregated
statistics and settings for all of the devices within that group. From the web interface, you can
set policies for all of the products in the group at the same time since they are the same product
type. This group context also enables reporting on aggregated statistics across a group.
2. You can create a grouping of two or more products. When you click on that group in the Cloud
Control pane, aggregated statistics display on the Status page for each product type in the group.
Additional reasons to manage products in the group context include:
• If you have many devices in one or more locations, managing them with a central console
enables you to easily track firmware versions across products and keep them up-to-date.
• Grouping devices by location helps you keep track of where each device is physically
located in case it needs service. As long as the unit is joined to the Barracuda Control
Server, you do not need to look up the admin password to configure or update the product.
• Grouping devices of the same type enables viewing ‘exceptions’ in which values for the
same setting differ across the devices.
• Grouping either devices of the same type or of different types provides a performance and
traffic statistic snapshot on the CLOUD CONTROL > Status page for each device in the
group. Statistics are aggregated for devices of the same type.

Getting Started 9
Product Context
If you have only one of any Barracuda Networks product type connected to the Barracuda Control
Server, when you click on that product link in the Cloud Control pane or in the Unit Health pane, the
web interface for that individual device displays. From the product web interface, you manage the
individual settings just as you would if you logged into the device directly.
Exceptions
When you have more than one of a Barracuda Networks product type connected to the Barracuda
Control Server, and you view the settings of all of them as a group (with one web interface as
described above), a yellow Exception ( ) icon displays if the value of the setting is not the same on
all devices in the group. When you hover the mouse over the icon, the Barracuda Control Server
clearly indicates what the values for that setting are on each device, so that you can change the settings
if desired. See Dealing With Exceptions for more information and examples.

10 Barracuda Control Server Administrator’s Guide