(IPv6 only) The Control Center must be reachable through an IPv6 global unicast address.(IPv4 only) You need the external IPv4 address of the border firewall.Use an available network or subnet to be used for the VIP addresses.Only IPv4 traffic can be sent through the management tunnel.If the remote firewall is using a IPv6 IP address to connect, the Control Center must have a global unicast IPv6 address. Depending on whether the VIP is a subnet of the local network or a separate network, you will need access rule and route entries on the border firewall and an access rule on the CC firewall. The VIP is used to connect to the remote firewall from the local network. Since it is not recommended to use an external IP address as a management IP, the remote firewall is assigned a Virtual IP (VIP) in the local network. The remote firewall uses the certificate keys exchanged at deployment to authenticate to the Control Center.

If the managed CloudGen Firewall cannot directly reach the Barracuda Firewall Control Center, it must connect via a remote management tunnel.

Firewall remote management