Manufacturer:   Barracuda

Model(s):  Barracuda CloudGen Firewall

Version(s):  v8.3

URL:  https://campus.barracuda.com/product/cloudgenfirewall/doc/96026570/how-to-configure-ipfix

Configuration steps (CLI)

  1. Go to CONFIGURATION > Configuration Tree > Box > Infrastructure Services > General Firewall Configuration. 
  2. In the left menu, select Audit and Reporting.
  3. Click Lock.
  4. In the IPFIX Streaming section, set Enable IPFIX Export to yes.
  5. (optional) Set Enable Intermediate Flow Report to yes.
  6. (optional) Enter the Intermediate Reporting Interval [min] for intermediate reports in minutes.
  7. Choose a template from the IPFIX Template list

Property

Description

Basic

Includes only the most basic data and should therefore be compatible with most collectors.

Default

This is the default template and includes all data from the basic templates plus all Barracuda proprietary fields.

Extended

This template extends the default template with the elements octetTotalCount, packetTotalCount and timestamps relative to the system uptime.

Extended without proprietary fields

This template contains all data of the extended template, but omits all Barracuda proprietary fields.

Custom

Select this option to define a custom template by selecting the individual Information Elements that should be sent.
  1. Click + next to Collectors to add an IPFIX collector.
    1. Enter a Name for the collector settings and click OK. The Collectors window opens.
    2. Select the protocol from the Export Mode list. Select UDP.
    3. Enter the IP address of your Scrutinizer collector in the Collector IP field.
    4. Enter the 2055 for the Collector Port.
  1. Click OK.
  2. Click Send Changes and Activate.

Optional: Enabling IPFIX for the HTTP Proxy Service

If necessary, it is also possible to enable IPFIX for the HTTP proxy service. The HTTP proxy service uses a Biflow IPFIX template, which cannot be configured by the user, and contains the following information elements:

  • sourceIPv4Address, destinationIPv4Address, sourceTransportPort, destinationTransportPort, 
    octetDeltaCount, octetTotalCount, flowStartMilliseconds, flowEndMilliseconds, flowDurationMilliseconds,
    httpRequestMethod, httpContentType,, httpRequestHost, httpUserAgent, httpRequestTarget, httpStatusCode
  1. Go to CONFIGURATION > Configuration Tree > Box > Assigned Services > HTTP-Proxy > HTT Proxy Settings. 
  2. From the Configuration Mode menu, select Switch to Advanced View.
  3. Click Lock.
  4. In the Log Settings section, set IPFIX Streaming to yes.
  5. Click Send Changes and Activate.