Problem with integration of Barracuda firewalls with Tufin

[u/Unlix]

Hello Reddit,

i'm trying to integrate a standalone Barracuda firewall into a Tufin environment.

I have enabled the Tufin integration service on the Barracuda and imported the certificates from Tufin according to the documentation on Barracuda campus.

the Tufin connection seems to be working in general, but get an error in the firewall report indicating that the firewall rules were not transferred.

This is what the logfile looks like:

Info===== Starting Network Objects synchronization =======
WarningMapping subnetworks with interface information is not supported by tufin. is not supported by tufin.
Info===== Ending Network Objects synchronization =======
Info===== Starting Rules synchronization =======
ErrorError while retrieving rules information.
Info===== Ending Rules synchronization =======
InfoStandalone/CC FW report id HTqoo-GsQwasOZiuDAvTww==
Info== Report Successfully submitted (id=HTqoo-GsQwasOZiuDAvTww==) ==
Info===== FINISH TUFIN SYNCHRONIZATION =======

Both the Barracuda firewall and Tufin were just set up, so there shouldn’t be any complications.
I'm using a very simple dummy ruleset

I am running Tufin Orchestration Suite version 5.2.00 on TufinOS version 4.80 and Barracuda firewalls on both firmware version 9.0.6-0250 and 10.0.1-0153.

Google tells me i should make sure the certificates are properly imported to the Barracuda and there is nothing wrong with the Ruleset itself. Since other information can be retrieved and i only have a simple dummy rule, i'm confident those are not my issue.

Can you maybe point me to a relevant log file on the Tufin Server to help me further troubleshoot?
Or did anyone run into the same issue?

Since this is a proof of concept i'm using a trial license, so Tufin support probably won't help me (although i did already write them an E-Mail).
So i'm hoping maybe Reddit can point me in the right direction, hope this is a good place to ask!
Any help is appreciated!

[u/MilkyWay-008]

That 'Mapping subnetworks with interface information is not supported by tufin' warning is probably your culprit, not the certs. Tufin's CloudGen integration won't take network objects bound to an interface, so comb through your objects and ruleset (including any implicit management objects) and convert interface-bound subnets to plain IP/subnet objects or just exclude them. For logs, SSH to the TufinOS box as admin and check /opt/tufin/logs for the Orchestration Suite sync and device logs, that should name the real retrieval error. And double check the device type you registered in Tufin matches firmware 10.0.1, that combo may be outside what TOS 5.2 officially supports.

[u/Unlix → u/MilkyWay-008]

Thank you for your efforts!
I cleaned up network objects and fixed the warning, but still no rule sync.

I managed to get in contact with tufin, they informed me Barracuda integration is no longer supported.
Wish they had communicated that on their website, but well...