Barracuda SSL VPN Remote, Authenticated Access to Applications and Data

Why SSL VPN?

Remote Workers & Road Warriors According to U.S. Bureau of Labor Statistics 24% of employees do some or all of their work from home. Your army of road warriors and remote workers require a quick, flexible, reliable and completely secure way to connect to your internal enterprise applications, information and network resources. They want to do this from anywhere in the world, at any time and from any suitable device. The Barracuda SSL VPN provides the security and connectivity to deliver this access, via a web browser or virtually any mobile device.

Remote Workers & Road Warriors Access to enterprise applications and data must be: Easy to use Work anytime, anyplace Mobile device centric (often BYODs) Reliable Secure Your army of road warriors and remote workers require a quick, flexible, reliable and completely secure way to connect to your internal enterprise applications, information and network resources. They want to do this from anywhere in the world, at any time and from any suitable device. The Barracuda SSL VPN provides the security and connectivity to deliver this access, via a web browser or virtually any mobile device.

Mobile Devices are the Norm Most remote access now via mobile devices BYODs commonplace But corporate data must be secure “The challenge for IT departments will be providing adequate support and security.” John Reed, Executive Director Robert Half Technology Easy and Secure Mobile Access Today, corporate data and applications need to be available anytime, from anywhere. As BYODs become commonplace, providing easy access for mobile devices not subject to network policy enforcement--while ensuring corporate data is secure--is critical. The Barracuda SSL VPN delivers fast and secure access while ensuring that a seamless and simple end-user experience reduces support overhead.

Business Continuity Planning “During the floods, we were able to quickly deploy the Barracuda SSL VPN to allow our staff to continue working remotely.” Chris Robinson, IT Manager Queensland Art Gallery Reason For Purchase Data courtesy of Gartner

The Barracuda SSL VPN

Barracuda SSL VPN Simple remote access to corporate applications and data Fast and secure Supports almost any mobile device Simple mobile device configuration (BYODs) Microsoft Exchange & SharePoint and Windows File Shares Powerful two-factor authentication options Clients for complete network layer access Product Spotlight • Simple remote-worker access to corporate applications and data • Fast and secure access from virtual any mobile device • Remote access to MS Exchange, MS SharePoint and Windows File Shares • Simple mobile device configuration, ideal for BYODs • Powerful two-factor and ‘progressive’ authentication options

Barracuda SSL VPN No client software required No complicated settings Just need a web browser Works on almost all mobile devices The Barracuda SSL VPN makes it easy for remote users to access internal applications and files. Unlike traditional VPN technologies, the Barracuda SSL VPN does not require any additional client software or complicated settings. Logging in from home or the road requires only a web browser and Internet connection. Upon login, users are presented with a portal of internal web applications or file shares. More advanced applications like Remote Desktop Services or Citrix XenApp are available to users running Java.

Comprehensive Authentication Admin has complete control: Who sees what app or folder when Multi-factor authentication External authentication services e.g., RADIUS, One-Time-Passwords, and more Administrators have complete control over user access with the option of further securing resources with secondary authentication. Possibilities include sending one-time passcodes to mobile phones, prompting with security questions, or integrating with advanced authentication systems like hardware tokens, RADIUS, and other additional security methods.

New in 2.6 – Risk Based Authentication (RBA) Use of extra authentication for high risk applications. Version 2.6 (currently EA) enhances mobile support with new features such as Google Authenticator integration and Risk Based Authentication, which allows the use of extra authentication for high risk applications. Works on Desktop and Mobile Portal Some network environments might require additional security levels to authenticate users when they access specific high-risk SSL VPN resources. Barracuda SSL VPN provides risk based authentication for Web Forwards, applications and SSL tunnels. Each launch of these resource types can be protected by PIN, password or Google Authenticator authentication. http://10.128.32.119:8090/techlib/display/SBXSSLVPN/How+to+Configure+Risk+Based+Authentication

New in 2.6 – Google Authenticator Easy to use one time passwords using Google mobile apps. Google Authenticator offers an easy way to use time based one time passwords (TOPT) using Google infrastructure and mobile apps. The authentication module can be used by itself or in combination with other authentication modules for multi-factor authentication. A new verification code is automatically generated every thirty seconds. The official Google Authenticator app is available for Android, iOS and Blackberry (version number 6 or lower) devices. Third-party apps are available for almost all other mobile operating systems. Before you Begin Google Authenticator is time sensitive. Make sure your mobile device and Barracuda SSL VPN are set to the correct time. http://10.128.32.119:8090/techlib/display/SBXSSLVPN/How+to+Configure+Google+Authenticator+%28TOTP%29+Authentication http://10.128.32.119:8090/techlib/display/SBXSSLVPN/Google+Authenticator+User+Guide

Comfort in a Secure Network Extra Security Layers Reverse-proxy e.g., keep Exchange servers behind network perimeter Integrated antivirus Hardened platform Ideal replacement for traditional remote access gateways The Barracuda SSL VPN provides extra security layers, including the ability to reverse-proxy Exchange ActiveSync traffic to keep Windows servers safely inside the network perimeter. Integrated anti-virus protection secures file uploads to keep malware out of the network. Built on a hardened platform, the Barracuda SSL VPN is the ideal replacement for traditional software-based remote access gateways.

Easy and Secure Mobile Access Designed for Mobile Fast and Simple Supports all common mobile devices Simple device config Secure Today, corporate data and applications need to be available anytime, from anywhere. As BYODs become commonplace, providing easy access for mobile devices not subject to network policy enforcement--while ensuring corporate data is secure--is critical. The Barracuda SSL VPN delivers fast and secure access while ensuring that a seamless and simple end-user experience reduces support overhead.

The Barracuda Advantage Sets up easily from behind your network firewall No per-user fees Easy to use Easy to deploy Added security with built-in virus scanning Anytime, anywhere access

Barracuda SSL VPN Features Clientless remote access Browser-based remote access Granular resource management Selectively authorize traffic to approved resources Active Directory, LDAP and other user databases Multi-factor authentication AD passwords, hardware tokens, client certificates, one-time passwords, PIN Secure end-point access Network access controls (NAC) Integrated anti-virus Auditing and reporting Integrated reporting

Model Comparison Feature 180* 280 380* 480* 680* 880 Recommended Concurrent Users 15 25 50 100 500 1,000 CPU Cores Allowed (VMs) 1 N/A 2 3 4 Mobile Support ● LDAP and Active Directory Support Network connector / VPN agent Web forwarding / Network files access Citrix XenApp / VNC / NX / Telnet / SSH / RDP applications Antivirus scanning Remote assistance Feature 180* 280 380* 480* 680* 880 Barracuda SSL VPN Server Agent ● Multiple user realms RADIUS authentication Hardware token support Syslog logging (natively) SNMP / API * Models also available as virtual appliances (VMware, Oracle VirtualBox, Citrix Xenserver & Microsoft Hyper-V) The Barracuda SSL VPN secures remote access to internal network resources from any Web browser. The Barracuda SSL VPN 180 handles up to 15 users and scales up to 1,000 users with the Barracuda SSL VPN 880. These specifications are not limits of the system, but are the recommended capacity. Models also available as virtual appliances VMware ESX/ESXi VMware Server/Workstation/Player/Fusion Oracle VirtualBox Citrix Xenserver Microsoft Hyper-V

Extra Information

Deployment Options Single unit on LAN Route incoming connections to firewall on port 443 directly to the Barracuda SSL VPN Simple firewall, port forwarding and NAT rules

Deployment Options Load balanced clusters Typically, behind either a layer 4 or layer 7 load balancer