The Box page lets you configure and control key aspects of the CloudGen Firewall box operation. To access the Box page, open the CONTROL tab and click the Box icon in the ribbon bar.

Open

The Box page consists of two sections:

• Configuration section

• Report section

Open

Configuration Section

The Configuration section displays the following menus:

• Time

• Network

• Dynamic Networks

• Operating System

• Domain Control

• Authentication Level

• SCEP Control

• Microsoft Azure Virtual WAN

To expand a menu, click on the left of the bar.

Time

Expand the Time menu to display or change time settings.

Open

The menu offers the following options:

• Get Time – The current time and date on the firewall.

• Show Settings – The current NTP settings in the Report section.

• Set Time – Changes the current time and date to the values selected from the time and date fields. If your firewall is synchronized with an external time server, this manual change is overwritten by the succeeding time synchronization.

• Restart NTP – Restart all NTP services.

• Synchronize Time – Offers an option dialog to synchronize the time settings with an NTP server.

Network

Expand the Network menu to display or change network settings.

Open

The menu offers the following options:

• Verify active network configuration

• Restart active network configuration

• Verify new network configuration

• Activate new network configuration

Verify Active Network Configuration

Click Verify active network configuration to see whether errors have been sent after successfully sending network configurations. Results appear in the Report section.

Restart Active Network Configuration

This option shuts down and then restarts the currently active network configuration.

Verify New Network Configuration

Click Verify new network configuration to see whether errors have occurred after they have been successfully sent. Results appear in the Report section.

Activate New Network Configuration

This option activates new network configurations after they have been successfully verified. You can activate the new network configuration in the following modes:

• Activate now – This option is offered when a management IP address has been changed. With this mode, the firewall activates the network change and reconnects to the new IP address.

• Failsafe – Failsafe network activation is the safest way to activate configuration changes. Always use this activation method on production firewalls

In Failsafe mode, the firewall creates a backup file of the active network configuration. It then temporarily activates the configuration changes and verifies that the firewall can still be contacted via Firewall Admin. If this verification is successful, the network is restarted so that the changes are activated permanently. If verification fails within the timeout defined in the Set Timeout field, the original network configuration is restored.

• Force – Forced network activation immediately activates the new network configuration with a logical consistency check, but without creating a backup file of the active network configuration.

• Soft – Soft network activation can be used only for IPv6 routes. For all other network changes a reboot of the firewall if required to complete the network activation after a soft activation.

For more information, see How to Activate Network Changes.

Dynamic Networks

If dynamic network connections have been configured, you can control them with options (off, on, start, stop, restart, reset) from the Dynamic Networks menu.

Open

You can control the following types of network connections:

• xDSL

• ISDN

• DHCP (cable)-connections

• Wireless WAN (WWAN)

• MGMT (box management)

• Tunnel connections

Operating System

Expand Operating System to control the operating system.

Open

The menu offers the following options:

• Reboot Box – Reboot the firewall.

• Firmware Restart – Shut down and restart all services on to the firewall, including the firewall engine.

• Shutdown Box – Turns off the firewall.

• Manage via Web Interface – Switches firewall configuration management from Barracuda Firewall Admin to the web interface.

• Save current Config for ART – Saves the current configuration of the firewall to the ART crash recovery OS. If the firewall must be reinstalled remotely, it uses the current system configuration for the recovery process.

• Install Update – Installs the selected firmware updates, hotfixes, or patches. The update process can be triggered after the package is successfully uploaded to the unit.

• Generate System Report – Creates a system report.

Domain Control

From the Domain Control menu, you can register the firewall as a Windows domain member or view its domain registration status.

Open

The menu provides the following options:

• Show Registration Status – Displays the registration status of the firewall at a Windows domain.

• Register at Domain – Registers the firewall as a Windows domain member at a domain controller. In the User Authentication window, enter the username and password for the user with the appropriate administrative rights to add the firewall to the domain. Before you can use this option, configure an Authentication service.

• Register Proxy at Domain – Registers the HTTP Proxy at the Windows domain.

Authentication Level

You can specify the level of authentication required for non-interactive Control Center logins and HA synchronization.

Expand the Authentication Level menu to make changes to authentication.

Open

The menu offers the following options:

• No Authentication – Level -1. No authentication is required to send or retrieve configuration data.

• Check Key or IP   address – Level 0. An IP address or key challenge is required. This option is not considered to be secure.

• Check IP address – Level 1. This option is not considered to be secure.

• Check Key – Level 2. This option is not considered to be secure.

• Check Key and IP address – Level 3, the default setting. Do not change it unless you must temporarily lower the security level. A change might be required when either the IP addresses of the Control Center or HA partner change or the key of the Control Center changes.

SCEP Control (Simple Certificate Enrollment Protocol)

You can view and configure SCEP settings.

Open

Expand the SCEP Control menu to select the following options from the Cmd list:

• Show   Certificate Info – Displays information about the certificate retrieved by SCEP.

• Save Certificate to Clipboard – Exports the certificate to the clipboard (PEM).

• Save Certificate to File – Exports the certificate to a file (PEM).

• Initiate Pending   Request – Starts the enrollment process immediately.

• Force SCEP   Update – Starts an SCEP update.

• Set SCEP   Debug ON – Turns SCEP debugging on. Additional debugging information is included in the SCEP log ( Box   >   Control   >   SCEP ).

• Set SCEP   Debug OFF – Turns SCEP debugging off.

• Set SCEP   Password – Prompts for the SCEP password. This option is available only if the SCEP password policy is set to Enter-Password-At-Box .

Microsoft Azure Virtual WAN

Expand this section to connect to Microsoft Azure Virtual WAN.

Open

Report Section

The Report section displays reporting information that has been queried in the Configuration section.