Barracuda SSL VPN

Provisioning Client Devices

This functionality is supported on client devices running Microsoft Windows, iOS and Mac OS X 10.7 and above.

The Device Configuration feature allows you to provision resources and other settings configured on the Barracuda SSL VPN directly on a user's device. When logged in, the user will see resources and settings on their RESOURCES > Device Configuration page, depending on what resources you make available to them and the operating system of the device. There they can select the resources to be provisioned and where they should be located on the device, for example, in a folder on the Desktop.

Before you Begin

For the user to be able to see the RESOURCES > Device Configuration page, the following conditions must be met:

  • The user must have the access right Personal Access Right / Device Configuration View.
  • There must be a accessible resource on the client to be provisioned.
  • For the items: client certificates, Exchange ActiveSync settings, and LDAP settings, the corresponding option on the RESOURCES > Configuration page must be set to allow the provisioning.

Grant Access to Users

Follow these instructions to grant users the access right Personal Access Right / Device Configuration View:

  1. Log into the SSL VPN web interface.
  2. Verify that you have selected the correct user database on the top right of the page.
  3. Go to the ACCESS CONTROL > Access Rights page.
  4. In the Create Access Right section, select the relevant database from the User Database drop-down list.
  5. Select Personal Right.
  6. Enter a descriptive Name for this access right.
  7. In the Available Rights list, select Device Configuration View and click Add >>.
  8. In the Available Policies list, select the policies for which provisioning should be enabled and click Add.
  9. Click Add.

On the RESOURCES > Configuration page, in the Device Configuration section, you can configure whether the non-resource items (certificate, exchange, LDAP) can be provisioned.

Windows Devices

This table shows the types of items that can be provisioned to Windows devices.

 

Item TypeDescription
  • Applications
  • Web Forwards
  • Audit Reports
  • Network Places
  • SSL Tunnels

All of these resources, if available to the user on their device, can be provisioned as shortcuts that will immediately launch the appropriate resource when selected. Whether they appear or not depends on the user´s access rights and whether they are applicable for the device (SSL tunnels and tunneled web forwards will not be available on iOS devices because they require the agent). The settings for the resource are provisioned only as shortcuts (an URL to the Barracuda SSL VPN and the appropriate icon).

Mapped DrivesIf the user has access to at least one Network Place resource that has an associated drive mapping, a shortcut will be provisioned to the device that will initiate the drive mapping process.
Client CertificatesInstalls the selected client certificate into the Windows keystore. Certificates are taken from the ADVANCED > SSL Certificates page (client certificates for the user only).
IPsec Settings

Creates a VPN connection on the device using the relevant IPsec settings configured on the RESOURCES > IPsec Server page.


PPTP SettingsCreates a VPN connection on the device using the relevant PPTP settings configured on the RESOURCES > PPTP Server page.

Known Issue: The preshared key has to be entered manually by the user for PPTP and L2TP/IPsec connections on Windows devices.

iOS / Mac OS X Devices

This table shows the types of items that can be provisioned to iOS and Mac OS X (10.7 and above) devices.

 

Item TypeDescription
Exchange SettingsThe remote device is configured to use the Barracuda SSL VPN to proxy the connection.
LDAP SettingsFor users authenticated with the Barracuda SSL VPN using LDAP or OpenLDAP, the settings from the user database and user account will be provisioned to the device.
  • Applications
  • Web Forwards

  • Audit Reports

  • Network Places

  • SSL Tunnels

All of these resources, if available to the user on their current device, can be provisioned as Web Clip shortcuts.

Whether these resources appear depends on the user´s access rights and whether they are applicable for the client device (SSL tunnels and tunneled Web Forwards will not be available on iOS devices because they require the agent).

These items can be provisioned in the form of a profile installed on the device. The remote user can specify the name of the profile on the RESOURCES > Device Configuration page.

Client CertificatesInstalls the selected client certificate onto the device. Certificates are taken from the ADVANCED > SSL Certificates page (client certificates for the user only).
IPsec SettingsCreates a VPN entry on the device using the relevant IPsec settings configured on the RESOURCES > IPsec Server page. The user will be prompted for their password when installing a profile containing IPsec settings.
PPTP SettingsCreates a VPN entry on the device using the relevant PPTP settings configured on the RESOURCES > PPTP Server page. The user will be prompted for their password when installing a profile containing PPTP settings.

By default, all shortcuts created are added to the user's Desktop, Start Menu and web browser, in a sub-folder whose name matches that of the Barracuda SSL VPN. If the web browser option is selected, the user will be prompted from the Barracuda SSL VPN agent asking which browsers to provision shortcuts to. When the installation is completed, the agent will add the bookmarks to all profiles defined within those browsers.

Bookmark Aliases

When shortcuts are created, they point at URLs on the Barracuda SSL VPN. For example, the shortcut looks like https://sslvpn.example.com/webforward/jira. By default, the Barracuda SSL VPN will attempt to generate an alias from the resource name when it is created. This will strip out any illegal characters and append a numeric value if the alias already exists. You can specify these aliases on the edit pages of the respective resources. To disable aliasing, go to RESOURCES > Configuration > BookmarkingIn this case, the provisioned shortcuts will instead refer to the verbose URL.


Feedback Did you find this article helpful: |

Still need help?

If you have a technical issue with the product, please contact Barracuda Networks Technical Support.