Filter VPN traffic using Barracuda web filer

[alexc5150]

I have a site to site VPN setup between a 5510 and 5505.  All traffic is sent ovet the VPN from the remote site to the home office.  Everything is working fine but the remote site "www" traffic is not going to the Barracuda.

ISP -> CISCO ASA -> Barracuda -> Internal Switch.

The Barracuda is setup "inline" with the internal network.

Has anyone else setup this type of configuration?

Thanks

[Javier Portuguez]

Hi Alex,

Please add the following on the ASA side where the Barracuda is:

route inside 0.0.0.0 0.0.0.0 barracuda's IP tunneled

The "tunneled" keyword sends all the traffic which comes in over a VPN connection and whose destination the ASA does not have a route for, to the Barracuda device.

This affects all VPN tunnels.

Let me know.

Thanks.

Portu.

[alexc5150]

Javier,

Now the VPN is unable to aceess the internet. Is there a way to redirect port 80 vpn traffic to go to the barracuda first?

Thanks for your help!

[Javier Portuguez]

Hi Alex,

Does the Barracuda have a independent connection to the Internet?

Thanks.

[alexc5150]

The Barracuda is connected to the inside interface on the ASA.

[Javier Portuguez]

Alex,

Unless the Barracuda device translates the traffic coming from the remote network to a different IP address, so the ASA sees this IP instead of the real one, this is not going to work.

[alexc5150]

Javier,

Can i place the Barracuda between my Cisco ISP router and the my ASA?

[Javier Portuguez]

Alex,

Could you please provide more details?

Network topology.

Why would you do so?

Thanks.

Portu.