Barracuda Networks 4 Spezifikationen PDF herunterladen (Seite 17)

Administrator’s Guide

Network considerations 17

Firewall DMZ

A demilitarized zone (DMZ) is an area where any servers that access the Internet are placed. Servers

inside this zone may be configured to access certain servers within an internal network with their own

security rules set up. Normally these servers need to be accessible from the Internet such as email

servers. The Barracuda Web Filter should not be deployed to protect these machines. The Barracuda

Web Filter is not designed to protect servers but to protect end user machines.

Internal servers

In most organizations, internal servers are protected by corporate firewalls that use port forwarding

rules to limit access to the servers. Port forwarding rules define the ports that can be used to access

the servers (such as HTTP, FTP, and mail servers). These servers should have optimal response time.

As a result, the server traffic must not be interrupted. Barracuda Networks recommends that you

exempt or bypass these servers from the Barracuda Web Filter. To reduce Layer 2 bridging overhead,

place a switch between the firewall and the Barracuda Web Filter and connect your server farm on a

different port on the switch. In this case, set up the servers parallel to the Barracuda Web Filter instead

of behind it, and the configure exempt IP addressing feature to exclude these IP addresses from server

exemption.

Cache

Caching usually provides faster access to repetitive content by keeping content locally on the

Barracuda Web Filter. However, some customers have concerns over how the Barracuda Web Filter

keeps the data accurate. The Barracuda Web Filter handles the data by using an LRU (Least Recently

Used) algorithm. The Barracuda Web Filter must be configured with the current time since it uses the

current time to check for updates for every HTTP request.

QoS/packet reconfiguration (Quality of Service, packet shapers)

There are many products available that can control traffic in a LAN environment, specify priorities,

and size these different traffic types. Normally, this is done using a Layer 7 device on different types

of applications. The Barracuda Web Filter deployment is affected when the Barracuda Web Filter is

placed in front of these devices to benefit from the shaped data. Place the Barracuda Web Filter close

to the Internet to help reduce noise and overhead on both the Layer 2 bridging and HTTP proxy.

Mounting and cabling considerations

To install the Barracuda Web Filter you need to:

• Mount it on a rack or shelf

• Cable it to other network devices

The Barracuda Web Filter is designed to be installed in a data center with other networking devices

and servers. Its dimensions are suitable for a 19-inch rack. You must position it within cabling

distance of any switches or other devices that access the network segments that you want to protect.

The appliance can be mounted facing either direction in your rack, so consider which side will have

access to the ports and which will have access to the LED lights.

You may need access to the ports during installation, and you may need to use the back panel during

initial configuration.

1 2 ... 12 13 14 15 16 17 18 19 20 21 22 ... 91 92

Keine Kommentare

Barracuda Networks 4 Spezifikationen Seite 17