Configuring Bridge-Path Mode

Configuring Bridge Mode

In Bridge mode, the Barracuda Web Application Firewall uses the same IP address for Virtual IP (VIP) and the back-end server. Use this mode of operation when you want to avoid network changes such as the server IP address and DNS mappings. Bridge Mode is not supported by the Barracuda Web Application Firewall Vx virtual machine.

In the Barracuda Web Application Firewall 861, 862, 961 and 962, when the unit is forced into a Bypass on Failure or Hard Bypass state, the Bypass LED on the front panel does not light up.

Barracuda WAF 106x and 660 models do not support Bypass on Failure and Hard Bypass.

Changing the Mode of Operation

To change the mode of operation from Proxy to Bridge, select Bridge All Traffic under Operation Mode on the BASIC > IP Configuration page and click Save. If you want to change the mode of operation from Bridge to Proxy:

Make sure that Bypass on Failure and Hard Bypass in the Bypass Configuration section is set to No.
Select Proxy and click Save.

If you want to switch from Proxy to Bridge mode or Bridge to Proxy mode, you must remove all configured Services, VLANs and Virtual Interfaces on the device. You can remove services on the BASIC > Services page, and VLANs and Virtual Interfaces on the ADVANCED > Advanced IP Config page.

Continue with Step 1: Installing the Barracuda Web Application Firewall.