> ## Documentation Index
> Fetch the complete documentation index at: https://docs.myrmex.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Barracuda WAF

> Connect a Barracuda Web Application Firewall to Myrmex over its REST API — create the admin credential and add the integration.

import { Note, Steps, Step, CardGroup, Card, Tip } from '@mintlify/components';

Connect your **Barracuda Web Application Firewall** so Myrmex can read its configuration, review its security services, help you tune protection, and — with approval — apply changes. Myrmex reaches the appliance's **REST API** through a [Collector](/documentation/agent-endpoint-security/collector-mode) on your network, in real time.

## What Myrmex Can Do

<CardGroup cols={2}>
  <Card title="Read & troubleshoot" icon="magnifying-glass">
    Query services, security policies, protected applications, and health on demand — read-only diagnostics.
  </Card>

  <Card title="Hardening audit" icon="shield-halved">
    Run a [Security Posture](/documentation/security-posture/overview) audit against the WAF's configuration.
  </Card>

  <Card title="Protection tuning" icon="sliders">
    Review rule sets and security policies, and propose adjustments to reduce false positives.
  </Card>

  <Card title="Change on approval" icon="floppy-disk">
    Apply policy and service changes through the REST API, with your approval.
  </Card>
</CardGroup>

## Before You Start

* A **Collector** deployed on a network that can reach the Barracuda WAF management interface over HTTPS. See [Deploying the agent](/documentation/agent-endpoint-security/installation).
* The **REST API enabled** on the WAF, and the management port confirmed (default `8000`).
* An **administrator account** Myrmex can use to authenticate (a read-only role is enough for analysis; a read-write role is required to apply changes).

## Step 1 — Create the Credential in Barracuda

The credential Myrmex needs is a WAF **administrator username and password**, used to obtain a REST API session token.

<Steps>
  <Step title="Enable the REST API">
    In the WAF web interface, open **ADVANCED → System Configuration**, show the advanced settings, and enable the **REST API**. Note the management port (default `8000`).
  </Step>

  <Step title="Choose or create an admin account">
    Use an existing administrator, or add a dedicated one scoped to what Myrmex should do — a read-only role for analysis, or a read-write role to allow changes.
  </Step>

  <Step title="Record the credentials">
    Note the **username** and **password** — you'll enter them in Myrmex.
  </Step>
</Steps>

<Tip>
  Prefer least privilege: start with a read-only account, and only grant read-write once you want the agents to apply changes.
</Tip>

## Step 2 — Add the Integration in Myrmex

From the **Directory**, choose **Add Integration → Barracuda WAF**, then fill in:

| Field                   | Description                                                                                                |
| ----------------------- | ---------------------------------------------------------------------------------------------------------- |
| **Name**                | A unique name for this Barracuda WAF instance.                                                             |
| **Description**         | Optional note to identify the appliance.                                                                   |
| **Protocol**            | Protocol used for the Management API (usually `https`).                                                    |
| **Barracuda WAF Host**  | The WAF management IP or hostname the Collector can reach.                                                 |
| **API Port**            | The Barracuda management port (default `8000`).                                                            |
| **Username**            | The WAF admin username from Step 1.                                                                        |
| **Password**            | That account's password.                                                                                   |
| **Auth Endpoint**       | Login endpoint used to acquire a session token (default `/restapi/v3.2/login`).                            |
| **Authentication Type** | Authentication method used with the REST API (default `jwt`).                                              |
| **Collector**           | The [Collector](/documentation/agent-endpoint-security/collector-mode) that will reach the WAF's REST API. |

## Connect

Click **Connect** to validate the REST API session and finish. The Barracuda WAF then appears under **Environment → Integrations**, and you can start asking [Hydra](/documentation/multi-agent-system/integration-specialist-agent) about it in the Workspace.

<Note>
  Your credentials are stored securely and resolved server-side — they never pass through the AI, and Myrmex reads the appliance on demand rather than storing its data.
</Note>