Application Usage & Risk Report

on Barracuda CloudGen Firewall

Download PDF

What is the Application Usage and Risk Report?

The Application Usage and Risk Report is a predefined report type in the Barracuda Report Creator tool and provides automated reports and risk analysis based on the network traffic that is traversing the network. It provides an overview how effective the currently deployed technologies are in detecting and enforcing the corporate application usage policies and gives recommendations what should be taken into account when redefining these policies.

In a nutshell, the Application Usage and Risk Report is a great sales enablement tool to let customers see what is really happening on their corporate networks, what they have been missing so far and how they can reclaim their networks.

How Does it Work?

Generating an Application Usage and Risk Report requires deploying either a Barracuda CloudGen Firewall (via SPAN port or L2 Bridge) within the network where the network traffic that is passing the Internet perimeter shall be monitored.

Barracuda CloudGen Firewall F-Series Deployment

Transparent Bridge setup

The easiest ways to setup a Transparent Bridge is to use the Setup Wizard that will automatically start when you initially connect either to a freshly installed or a newly ordered Barracuda CloudGen Firewall F unit. Simply follow the steps in the wizard. The default firewall rule “EVAL-MODE-BRIDGE” will be automatically deployed.

For further details on the wizard and on how to manually configure a L2 bridge, please visit the Barracuda Campus (campus.barracuda.com).

Port Mirroring via SPAN Port (Switched Port Analyzer)

Barracuda CloudGen Firewall F-Series also provides the possibility to process traffic that is mirrored from a switch. Enabling the port mirror function of the F-Series unit has to be done via the Command Line Interface:

Step 1
Log on via SSH

Step 2
Configure a port on which the mirrored packets from the switch will arrive. Port mirroring needs to be enabled on the specific port which will receive the mirrored traffic. The port also needs to be set into promiscuous mode. As an example, to receive mirrored packets on Port 2 of the Barracuda CloudGen Firewall you would type the following commands:
acpfctrl monitor set dev port2
ip link set port2 promisc on

Step 2
In order to switch of the mirroring and to set the port back to “normal”, please type the following commands:
acpfctrl monitor flush
ip link set port2 promisc of

On how to enable port mirroring on a switch and how to configure the destination port, please refer to the support documentation of the affected vendor. Here is an example on how to configure SPAN Port capabilities of the Cisco Catalyst 6500 Switch series: http://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-seriesswitches/10570-41.html

Configuring the Barracuda Firewall Report Creator

Step 1
Get the Barracuda Firewall Report Creator Download the Barracuda Firewall Report Creator from the Barracuda Customer Portal by using your Barracuda Networks Account. Install it by double-clicking either the EXE or MSI archive. Follow the on-screen instructions to complete the installation.

Operating System: Microsoft Windows Vista, or later
Additional Requirements: Microsoft .NET Framework 4.0 Client Profile
Note: Microsoft .NET Framework 4.0 Client Profi le is not contained in the installation archive for the Barracuda Report Creator.

On the Barracuda NextGen Firewall X-Series you can also download the Barracuda Report Creator from within the UI under Basic > Administration > Reporting.

Step 2
Configuring the Barracuda Firewall Report Creator In the Appliances section of the Barracuda Firewall Report Creator, create an entry for every fi rewall unit that you want to generate a report for. For each entry, specify the settings for connecting to the appliance.

  • Click the Templates tab. In the Appliances section in the left pane, click the “plus” icon.
  • Choose a product Type – either Barracuda CloudGen Firewall F-Series or Barracuda NextGen Firewall X-Series.
  • Enter the Management IP or Hostname, Login, and Password for the appliance.
  • Click Test Connection to verify that the Barracuda Firewall Report Creator can connect to the appliance.
  • Click Save.

In the Report Data section of the Barracuda Firewall Report Creator, choose the Predefined Report type Application Usage and Risk.

  • Configure the Time Span for which the report is generated
  • Fill out the Prepared by and Prepared for fields. This information will be displayed on the front page of the generated reports.

Step 3
Create a report layout template (Layouts) to configure the look and feel of the report.

  • Click Layouts and create a new template by clicking the “plus” icon
  • Configure Report Title, Front Page and Header logo, Page Size (paper format), Font Name and Size.
  • Don’t forget to Save the configuration changes.

Step 4
Configure a delivery template (Deliveries), whether the report will be saved as a PDF file or it will be automatically sent via email.

Generating Reports

After setting up the Barracuda Firewall Report Creator, you can generate the desired reports

Step 1 Click the Reports tab.

Step 2 In the Reports section in the left pane, click the “plus” icon.

Step 3 Enter the desired name for the report.

Step 4 In the Appliances section, click the “plus” icon and select the appliance.

Step 5 In the Data for “your appliance name” section, click the “plus” icon and then select the desired pre-defined report.

Step 6 Select the desired Layout from the list.

Step 7 In the Delivery section, click the “plus” icon and then select a delivery method.

Step 7 Click Save Configuration.

Step 8 Click Run Now to generate the report.

About Barracuda CloudGen Firewall

As your organization relies on more cloud-based applications like Office 365, Salesforce, and Dropbox, internet connectivity becomes even more important. Our Barracuda CloudGen Firewalls combine powerful application awareness and network routing capabilities to provide the highest levels of internet availability for users and critical applications. Unlike other firewalls in the industry, Barracuda CloudGen Firewalls were designed with the modern network in mind. As organizations grew in the number of remote offices and employees, secure remote access (both site-to-site and client-to-site) became critical. Our proprietary TINA protocol allows us to provide powerful capabilities such as traffic shaping within VPN tunnels, tunnel encapsulation, traffic compression, NAT reversal, and much more. Barracuda’s CloudGen Firewall family allows customers to leverage the latest in virtualization, cloud applications and mobile technologies while accommodating for rapid growth. They are more than just security devices, they make the network smarter, ensure access to critical network resources and improve productivity across the organization.

For questions about Barracuda CloudGen Firewall or for a free 30-day evaluation, visit http://www.barracuda.com/products/cloudgenfirewall_f or call Barracuda Networks at +1 408-342-5400.