Barracuda-networks VERSION SP4 Instrukcja Użytkownika

8 Introductionseemingly complex procedure is rather straightforward and easy to understand. As autonomousmachine authentication is rather uncommon i

98 Barracuda NG Personal FirewallSelect and then right-click a list entry to display the following context menu:9.6.5 History Selection TabIn the Hi

99 Barracuda NG Network Access Client - Administrator’s GuideTranslates IP addresses into hostnames, if possible.After each selection change, click

100 Barracuda NG Personal Firewall9.6.7 Live ActivityThe Live Activity view details all currently active connections.Fig. 9–12 NG Control Center: Li

101 Barracuda NG Network Access Client - Administrator’s Guide9.6.8 Listing and Context MenuThe listing is divided into the following columns:Select

102 Barracuda NG Personal Firewall9.6.9 Filter ConditionsClick the filter button ( ) to open the Filter Condition window. This allows you to specify

103 Barracuda NG Network Access Client - Administrator’s GuideThe data acquired is saved as a CAP file in the local folder of the VPN client (C:\Pro

104 Barracuda NG Personal Firewall9.8.2 RulesThe Rules view allows manual rule configuration. Rules controlling incoming traffic are arranged in the

105 Barracuda NG Network Access Client - Administrator’s Guide9.8.4 Button BarIn the button bar, the Up and Down buttons complement options are avai

106 Barracuda NG Personal FirewallConfigure the following connection details in the Rules view of the Rule Object window:List 9–5 Rule Object - Opti

107 Barracuda NG Network Access Client - Administrator’s GuideConfigure the following connection details in the Advanced view of the Rule Object win

9 Barracuda NG Network Access Client - Administrator’s Guideon the client system is assumed untrusted and a configured "untrusted access"

108 Barracuda NG Personal Firewall9.8.6 AdaptersThe Adapters view allows you to view and configure network adapters available on the system.Adapter

109 Barracuda NG Network Access Client - Administrator’s GuideThis object summarizes all wireless adapters available on the system (for example, WLA

110 Barracuda NG Personal FirewallThe following options are available:9.8.7 NetworksThe Networks view facilitates IP address/network management. Use

111 Barracuda NG Network Access Client - Administrator’s GuideIn the Network Objects window, a number of dynamic network objects (flagged with the

112 Barracuda NG Personal FirewallThis object includes the Multicast network 239.255.0.0/16.Click New … to open the Net Object dialog.Insert Name an

113 Barracuda NG Network Access Client - Administrator’s Guide• Merging multiple services to one service object using references.The following servi

114 Barracuda NG Personal Firewall9.8.9 ApplicationsThe Application Objects window allows creating predefined applications, which may be employed in

115 Barracuda NG Network Access Client - Administrator’s Guide• Insert Name and Application Object Description for easier identification. • Again, c

116 Barracuda NG Personal Firewall• Click Generate to create an MD5 Hash in order to clearly identify the selected file as soon as it is executed.Th

117 Barracuda NG Network Access Client - Administrator’s Guide9.8.10 UsersThe Users view allows you to create User and User Group objects, which may

10 IntroductionFig. 1–2 Client-Server actions during connection, health validation and assigning network accessClientClient collects and sendsUser I

118 Barracuda NG Personal Firewall9.8.11 Rule TesterThe Rule Tester view allows testing rule sets for consistency.The following entities are availab

119 Barracuda NG Network Access Client - Administrator’s Guide9.8.12 Test ReportsTest reports are saved on a first come first served basis. Test res

120 Barracuda NG Personal FirewallSelect a report and click Delete to delete the report from the Test Report window.9.9 Administration - Firewall Se

121 Barracuda NG Network Access Client - Administrator’s Guide9.9.1 Automatic Adapter ConfigurationSet option Ask for adapter update confirmation in

122 Barracuda NG Personal Firewall9.9.2 Automatic Rule ConfigurationIf Ask for unknown outgoing/incoming connections has been activated in the Fire

123 Barracuda NG Network Access Client - Administrator’s GuideSelecting the checkbox also makes the Advanced Policy … link available. Click the link

124 VPN Component Configuration Chapter 10VPN Component Configuration10.1 Create a New Profile Using the Profile WizardFor your convenience, you may

125 Barracuda NG Network Access Client - Administrator’s GuideThe next window is titled Authentication Method. You can later change a different meth

126 VPN Component ConfigurationIf you have chosen Barracuda personal License, you will see the following window of the same title. Tofinish the conf

127 Barracuda NG Network Access Client - Administrator’s GuideYou can later call the wizard again by right-clicking Modify Profile (Wizard) ... at t

11 Barracuda NG Network Access Client - Administrator’s Guide1.) Determine the applicable rule setFirst of all, the NG Network Access Client determi

128 VPN Component ConfigurationOn the first start or If no working VPN profile for automated connecting has been defined before, theclient will show

129 Barracuda NG Network Access Client - Administrator’s GuideClicking Preferences... will bring up the Barracuda NG VPN Control dialog wherein the

130 VPN Component Configuration• a browse button including a context menu• a dropdown list (figure 10–11)10.2.1 Functional Elements of the Barracuda

131 Barracuda NG Network Access Client - Administrator’s Guide• NG Access Monitor …Opens the Barracuda NG Access Monitor which provides information

132 VPN Component Configuration• CloseCloses the NG VPN Client window.10.3 Connection DialogThe NG VPN Client can be started in the following ways:•

133 Barracuda NG Network Access Client - Administrator’s Guide• Use a proxy server to connect checkboxWhen use of a proxy server has been defined at

134 VPN Component Configuration10.4 Status DialogUse the Status dialog window to view properties of an established connection. Click Connect toesta

135 Barracuda NG Network Access Client - Administrator’s GuideSecure Routes section:If secured routes have been assigned to the client by the VPN se

136 VPN Component Configuration• Tunnel ModeThe currently used transport mode for the VPN tunnel. Can display a value of TCP, UDP orHybrid.Cancel bu

137 Barracuda NG Network Access Client - Administrator’s Guide10.6 Barracuda Networks Control / Preferences DialogClick Preferences to open the Bar

12 IntroductionThe available identity information is sequentially matched from top to bottom with the identityconditions of the individual policies.

138 VPN Component Configuration• StoreThe store into which the certificate was saved.• StatusThe connection status. If you are not connected, you ma

139 Barracuda NG Network Access Client - Administrator’s GuideOptions section:• View …Opens a window with detailed certificate information.• Remove

140 VPN Component ConfigurationGeneral VPN Settings section:• Direct AccessThe VPN client can be configured so that it automatically reconnects to d

141 Barracuda NG Network Access Client - Administrator’s Guide10.6.4 Connection Entries Tab• Enter a description of this connection entry fieldInser

142 VPN Component Configuration10.6.5 Barracuda AuthenticationThe following parameters are available for Barracuda Authentication:10.6.6 X509 Authen

143 Barracuda NG Network Access Client - Administrator’s Guide10.6.7 User / PasswordThe following parameter is available for User / Password authent

144 VPN Component ConfigurationTunnel Settings section:Encryption algorithm[AES]The algorithm to be used for encryption.Tunnel Mode[Response (UDP)]T

145 Barracuda NG Network Access Client - Administrator’s GuideAlways Connect section:User Interface Settings section:OS Settings section:Terminate

146 VPN Component Configuration10.6.9 Adaptation of Profile Creation using an .ini file (Barracuda NG Authentication only)Some parameters configurab

147 Barracuda NG Network Access Client - Administrator’s GuideBehavior of a DHCP client.Possible options are:2 IP address is assigned directly (usin

13 Barracuda NG Network Access Client - Administrator’s Guide1.4.1 Health State "Untrusted"As soon as the identity match is finished and t

148 VPN Component Configuration• Module rowThe module the respective log entry refers to.•Status rowThe status of several actions such as Internal l

149 Barracuda NG Access Monitor Chapter 11Barracuda NG Access Monitor11.1 Overview11.1.1 Access MonitorThe Access Monitor is the key component of Ba

150 Barracuda NG Access Monitor11.2 Monitoring11.2.1 Health AgentThe Barracuda NG Access Monitor provides all necessary information regarding the cl

151 Barracuda NG Network Access Client - Administrator’s GuideClient Origin • Local ComputerHealth evaluation for the client computer is mandatory;

152 Barracuda NG Access Monitor11.2.2 Advanced Status informationIf more information is required, the Barracuda NG Access Monitor provides additiona

153 Barracuda NG Network Access Client - Administrator’s Guide11.2.4 Communication StatusWhenever the Barracuda NG Access Monitor is working, a stat

154 Barracuda NG Access Monitor• Configure a valid Access Control Server IP address locally ( see 11.3.2 Access Control Server IPs from Registry, pa

155 Barracuda NG Network Access Client - Administrator’s GuideFig. 11–6 Connection error because no Access Control Server IP addresses are configure

156 Barracuda NG Access Monitor11.2.6 802.1X Authentication - Port Security11.2.7 Network InterfacesAs seen in figure 11–7, the Port Security view l

157 Barracuda NG Network Access Client - Administrator’s Guide11.2.8 Advanced Status InformationFor more detailed information about a network interf

14 IntroductionIf the client fails during a specific time it's state is changed to "Unhealthy". In other terms the client isput into

158 Barracuda NG Access Monitor11.2.9 EAP TracerThe EAP Tracer allows you to view EAP and EAPOL packets captured by the Barracuda NG AccessMonitor f

159 Barracuda NG Network Access Client - Administrator’s Guide11.3 ConfigurationFig. 11–10 Barracuda NG Access Monitor Advanced SettingsList 11–1 Co

160 Barracuda NG Access Monitor11.3.1 Health Agent ConnectivityThis section holds all configuration section regarding the connectivity of the Barrac

161 Barracuda NG Network Access Client - Administrator’s GuideEdit… button. If required, clear the Access Control Server IP addresses, which are rec

162 Barracuda NG Access MonitorTo edit this option manually, modify the following registry key: 11.3.6 Health Agent Authentication11.3.7 Use Basic A

163 Barracuda NG Network Access Client - Administrator’s Guide11.3.9 802.1X Settings11.3.10 IEEE 802.1X AuthenticationThis option enables or disable

164 Barracuda NG Access Monitor11.3.13 Capture 802.1X Traffic (EAP)If enabled, the Barracuda NG Access Monitor will capture all EAP (Extensible Auth

165 Barracuda NG Network Access Client - Administrator’s Guide11.3.14 Log SettingsFor proper analysis verbose output is essential, thus it is possib

166 Barracuda NG Access Monitorclient.xml Xml file containing the information sent to the Access Control Server containing information about the cli

167 Pre-Connector and Remote VPN Chapter 12Pre-Connector and Remote VPN12.1 GeneralPre-connectors and Remote VPN are tools that are meant to simplif

15 Barracuda NG Network Access Client - Administrator’s GuideFurthermore the update service provides the information necessary to diagnose the up-to

168 Pre-Connector and Remote VPN12.2.1 Creating a ConnectorPrior to creating a Barracuda NG VPN connector, the connection profile must be configured

169 Barracuda NG Network Access Client - Administrator’s Guide12.2.2 Connecting And Disconnecting using the Barracuda NG VPN ClientTo connect using

170 Pre-Connector and Remote VPN• Examples:rvpn.exe -c -r 3 -a vpntest -p a12b34c56This profile connects (-c) with client profile "3" (-r

171 Barracuda NG Network Access Client - Administrator’s GuideThe following steps are carried out when a connection is to be established:1.) Client

172 Example Configuration Chapter 13Example ConfigurationIntroducing an up-and-running Barracuda NG Network Access Client environment involves sever

173 Barracuda NG Network Access Client - Administrator’s Guide13.1 Introduce Access Control ObjectsAs a first step it is recommended to prepare the

174 Example Configuration• Allow HTTP/HTTPS connections to the internet. Some antivirus products use HTTP/HTTPS to download up-to-date engines and

175 Barracuda NG Network Access Client - Administrator’s GuideAdministrators of stand-alone Barracuda NG Firewalls can avoid making this decision -

176 Example Configuration13.4 Configure an Access Control Service TrustzoneThe main window of a Access Control Service Trustzone is split up into a

177 Barracuda NG Network Access Client - Administrator’s GuideFor the Identity Matching and Required Health State views, Basic and Advanced configur

16 IntroductionAn important aspect related to trust zone crossing is the synchronization of authentication data.Basically, trust zones need to have

178 Example ConfigurationFirst start with defining the criteria for Identity Matching:Since the Access Control Service in this sample setup is only

179 Barracuda NG Network Access Client - Administrator’s GuideFor the AV engine and for the AV patterns the settings above accept the current versio

180 Example ConfigurationIn the sample you are not required to manually add "Network Access Policies". Instead youcan set up your firewal

181 Barracuda NG Network Access Client - Administrator’s Guide13.5 Configure Forwarding Firewall Rule SetEnforcement of the security policy is provi

182 Example ConfigurationIf the user authentication is assigned to the firewall rule, only clients either fully conforming to the policy("heal

183 802.1X – Technical Guideline Chapter 14802.1X – Technical Guideline14.1 OverviewBarracuda NG Network Access Client features the IEEE 802.1X stan

184 802.1X – Technical GuidelineNecessary for authentication, validates the client computer's identity information forwardedby the switch and

185 Barracuda NG Network Access Client - Administrator’s Guide14.2.2 Using the Barracuda NG Access Monitor for AnalysisThe Barracuda NG Access Monit

186 802.1X – Technical GuidelineTo enable or disable verbose the below registry needs to be set:14.2.4 Switch Web Interface The web interface provi

187 Barracuda NG Network Access Client - Administrator’s Guide• ReAuthPeriodsee 14.3.9 Periodic client re-authentication by the switch, page 193• Gu

17 Server Config – Access Control Service Chapter 2Server Config – Access Control Service2.1 GeneralFor proper operation, both components of the Bar

188 802.1X – Technical Guideline14.2.5 Switch Console InterfaceFor either administrative or informative purposes it is possible to connect to the s

189 Barracuda NG Network Access Client - Administrator’s Guide• Token Ring• FDDI• Point-to-Point 14.3.2 Operational Sequence14.3.3 Startup1.) NG NAC

190 802.1X – Technical Guideline2.) Disabling Microsoft Windows 802.1X compliant software Since Microsoft Windows ships with its own 802.1X complia

191 Barracuda NG Network Access Client - Administrator’s GuideAlternatively the value in 1.1.A can be set by the Access Control Server, enforcing 80

192 802.1X – Technical GuidelineTo resolve this problem proceed following steps:• Delete the corrupted configuration fileYou will require elevated

193 Barracuda NG Network Access Client - Administrator’s Guide14.3.8 Re-authentication by the client serviceThe client service is able to enforce a

194 802.1X – Technical GuidelineTo disable periodic re-authentication, use the no dot1x re-authentication interfaceconfiguration command. To return

195 Barracuda NG Network Access Client - Administrator’s Guide• A re-authentication is triggered manually on the switch by a user through the comman

196 802.1X – Technical Guideline• interface <interface-id>Specify the port to be configured, and enter the interface configuration mode• dot1

197 Barracuda NG Network Access Client - Administrator’s GuideTo enable "DHCP Renew" on the Access Control Server enforcing it on all clie

Copyright NoticeCopyright (c) 2004-2011, Barracuda Networks, Inc., 3175 S. Winchester Blvd, Campbell, CA 95008 USAwww.barracuda.comvSP4-110722-30-0722

18 Server Config – Access Control ServiceList 2–2 Access Control Server - Access Control Server Settings - System Health-Validator – section General

198 802.1X – Technical Guideline14.3.16 Shutdown14.3.17 Operating System Shutdown When the client computer is been shut down, the Barracuda NG Acce

199 Barracuda NG Network Access Client - Administrator’s Guide14.4 Addendum14.4.1 PacketsThe table shows an EAPOL packet frame:The table below shows

200 802.1X – Technical Guideline009 001 001 000 starting to reset 802.1x registry setting002 stating session live time010 finished resetting 802.1x

201 Barracuda NG Network Access Client - Administrator’s Guide009 002 008 000 starting CheckAndStopService001 error opening service manager002 servi

202 802.1X – Technical Guideline009 003 003 user authentication001 logging in as user username002 reassociation loop002 VLAN changed/unchanged, rea

203 Barracuda NG Network Access Client - Administrator’s Guide14.4.3 Engineering EnvironmentThis technical guideline is based on an engineering envi

204 802.1X – Technical GuidelineIn order for the RADIUS authentication to succeed with the above mentioned switch and software,"Authentication

205 Appendix Chapter 15Appendix15.1 customer.inf File Template; ------------------------------------------------------------------------------------

206 Appendix; 1 -> X509 authentication; 2 -> User / Password;; File: license (0x00000000); Subject: license (0x0000

207 Barracuda NG Network Access Client - Administrator’s Guide; Trust -> Trust; CA -> CA;; Terminate Countdown (sec.

19 Barracuda NG Network Access Client - Administrator’s Guide2.2.2 Remediation Service2.2.3 Trustzone-Border2.2.4 802.1XVPN Remediation Service IPs

208 Appendix[DestinationDirs]PhionCustomerCopyFiles = 65600[SourceDisksNames]1 = %DiskId1%,,,"";----------------------------------------

209 Barracuda NG Network Access Client - Administrator’s Guide15.2 VPN Profile Registry KeysTable 15–24 VPN Profile Registry KeysVPN Profile Registr

210 Appendix"; Encryption Algorithm: encryption (0x00010001)""; 1 -> None""; 2 -> 3DES"";

211 Barracuda NG Network Access Client - Administrator’s Guide15.3 Profile Registry Keys"Hardcoded Access Control Server IPs"[HKEY_USERS\.

212 Appendix• The message VPN Gateway not reachable via VPN tunnel is logged to the events windowOpen the Expert tab (10.6.8 Advanced Settings Tab,

213 Barracuda NG Network Access Client - Administrator’s Guide15.5 Configuration Parameters802.1X [2] . . . . . . . . . . . . . . . . . . . . . . .

214 Direction [9] . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

215 Barracuda NG Network Access Client - Administrator’s GuidePHIBS Authentication Scheme [2] . . . . . . . . . . . . . . . . . . . . . . . . . . .

216 Use Access Control Service [10] . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

217 Barracuda NG Network Access Client - Administrator’s Guide15.6 Parameter Lists Chapter 1 Introduction Chapter 2 Server Config – Access Control S

20 Server Config – Access Control Service2.2.5 AdvancedDebug Log Enable debugging log here. A service restart is required. (parameter is only visibl

218 Chapter 6 Update or Migration Chapter 7 Uninstall Chapter 8 VPN Configuration Chapter 9 Barracuda NG Personal FirewallList 9–1 Firewall Settin

219 Barracuda NG Network Access Client - Administrator’s Guide15.7 Figures Chapter 1 IntroductionFigure 1–1 Barracuda NG Network Access Client envir

220 Chapter 9 Barracuda NG Personal FirewallFigure 9–1 Windows 7 Windows Firewall and Action Center screens . . . . . . . . . . . . . . . . . . .

221 Barracuda NG Network Access Client - Administrator’s Guide Chapter 13 Example ConfigurationFigure 13–1 Example configuration – environment . .

222 Barracuda NetworksWarranty and Software License Agreement0.1 Barracuda Networks Limited Hardware Warranty1. Barracuda Networks, Inc., or the Bar

223 Barracuda Networks Warranty and Software License AgreementFOR AND BIND THE ENTITY. IF YOU ARE NOT AUTHORIZED TO SIGN FOR AND BIND THE ENTITY OR DO

224 RESOURCES, ABNORMAL OPERATING CONDITIONS (IN PARTICULAR DEVIATIONS FROM THE INSTALLATION CONDITIONS)AS WELL AS BY TRANSPORTATION DAMAGE. IN ADDI

225 Barracuda Networks Warranty and Software License Agreement13. Assignability. You may not assign any rights or obligations hereunder witho

226 The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU GeneralPublic License is inte

227 Barracuda Networks Warranty and Software License AgreementThese requirements apply to the modified work as a whole. If identifiable sections of th

21 Barracuda NG Network Access Client - Administrator’s Guide2.2.6 General2.3 Access Control ObjectsPolicy rule sets can reference to so-called Acce

228 This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License.8. If the distribution and/or

229 Barracuda Networks Warranty and Software License AgreementFor example, if you distribute copies of such a program, whether gratis or for a fee, yo

230 The “Corresponding Source” for a work in object code form means all the source code needed to generate, install, and (for anexecutable work) run

231 Barracuda Networks Warranty and Software License Agreementlegal rights of the compilation's users beyond what the individual works permit. In

232 Program, that part may be used separately under those permissions, but the entire Program remains governed by thisLicense without regard to the

233 Barracuda Networks Warranty and Software License Agreementeach party to that transaction who receives a copy of the work also receives whatever li

234 the GNU Affero General Public License, section 13, concerning interaction through a network will apply to the combination assuch.14. Revised Ver

235 Barracuda Networks Warranty and Software License Agreementthink carefully about whether this license or the ordinary General Public License is the

236 The "Library", below, refers to any such software library or work which has been distributed under these terms. A "workbased on t

237 Barracuda Networks Warranty and Software License AgreementIf distribution of object code is made by offering access to copy from a designated plac

22 Server Config – Access Control ServiceFor those already familiar with Barracuda NG VPN, the Access Control Objects are similar to theobjects avai

238 b) Give prominent notice with the combined library of the fact that part of it is a work based on the Library, and explainingwhere to find the

239 Barracuda Networks Warranty and Software License AgreementFOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING

240 aggregate with other (possibly commercial) programs as part of a larger (possibly commercial) software distributionprovided that you do not adve

241 Barracuda Networks Warranty and Software License Agreement1.7 "Larger Work'' means a work which combines Covered Code or portions

242 (d) Notwithstanding Section 2.2(b) above, no patent license is granted: 1) for any code that Contributor has deleted from theContributor Version

243 Barracuda Networks Warranty and Software License Agreement3.6. Distribution of Executable Versions.You may distribute Covered Code in Executable

244 8.2. If You initiate litigation by asserting a patent infringement claim (excluding declatory judgment actions) against InitialDeveloper or a C

245 Barracuda Networks Warranty and Software License AgreementEXHIBIT A -Mozilla Public License."The contents of this file are subject to the Moz

246 list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.Neither the name of t

247 Barracuda Networks Warranty and Software License AgreementTERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION1. Definitions."License

23 Barracuda NG Network Access Client - Administrator’s GuideAssigned pictures are displayed in the client after successfully connecting to the Acce

248 NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution noticeswithin Derivative Works t

249 Barracuda Networks Warranty and Software License Agreement2. Redistributions in binary form must reproduce the above copyright notice, this list

250 THE WORK (AS DEFINED BELOW) IS PROVIDED UNDER THE TERMS OF THIS CODE PROJECT OPEN LICENSE ("LICENSE").THE WORK IS PROTECTED BY COPYRIG

251 Barracuda Networks Warranty and Software License Agreemente. You may distribute the Executable Files and Source Code only under the terms of this

252 Barracuda Networks Products may contain programs and software that are Copyright (c) 1999-2001, Angelos D. Keromytis.All rights reserved. Redist

253 Barracuda Networks Warranty and Software License AgreementBarracuda Networks Products may contain programs and software that are Copyright (c) 19

254 name "PHP" must not be used to endorse or promote products derived from this software without prior written permission.For written per

255 Barracuda Networks Warranty and Software License Agreement([email protected])". THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ’’AS IS'' A

256 OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING INANY WAY OUT OF THE USE OF THIS SOFTWA

257 Barracuda Networks Warranty and Software License Agreementa) distribute a Standard Version of the executables and library files, together with i

24 Server Config – Access Control Service• Registry Check ObjectsThese objects allow an administrator to define registry checks to be performed on t

258 HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,THE IMPLIED WARRANTIES OF MERCHA

259 Barracuda Networks Warranty and Software License Agreementor use of this software must display the following acknowledgement: "This product i

260 Portions Copyright 1989 by Carnegie Mellon. Permission to use, copy, modify, and distribute this program for any purposeand without fee is hereb

261 Barracuda Networks Warranty and Software License Agreementa) If you make changes to Vim yourself, you must clearly describe in the distribution ho

262 EXPRESS OR IMPLIED. BY WAY OF EXAMPLE, BUT NOT LIMITATION, PSF MAKES NO AND DISCLAIMS ANYREPRESENTATION OR WARRANTY OF MERCHANTABILITY OR FITNES

263 Barracuda Networks Warranty and Software License AgreementBarracuda Networks makes available the source code used to build Barracuda products avai

264

25 Barracuda NG Network Access Client - Administrator’s Guide2.4 Access Control Service TrustzoneEach Access Control Service belongs to a so-called

26 Server Config – Access Control ServiceThe pre-defined Access Control Service Trustzones can be referenced within the configuration dialogue Virtu

27 Barracuda NG Network Access Client - Administrator’s Guide2.4.1 RulesThe main window of a Access Control Service Trustzone is split up into a nav

1 Barracuda NG Network Access Client - Administrator’s GuideBarracuda NG Network Access ClientChapter 1 - Introduction . . . . . . . . . . . . . .

28 Server Config – Access Control ServiceIf the identity match fails, the next rule is taken into account.Fig. 2–10 Access Control Service Trustzone

29 Barracuda NG Network Access Client - Administrator’s GuideList 2–21 Access Control Service Trustzone - Rules - Identity Matching Basic – section

30 Server Config – Access Control Service2.4.3 Identity Matching - AdvancedFig. 2–11 Access Control Service Trustzone - Rules - Identity Matching Ad

31 Barracuda NG Network Access Client - Administrator’s Guide2.4.4 Required Health State - BasicAfter successful verification of the client’s identi

32 Server Config – Access Control ServiceIn case of third-party products (for example Virus scanner), Auto-Remediation may not work with allavailabl

33 Barracuda NG Network Access Client - Administrator’s GuideLast AV Scan Action • Manual• Auto RemediationDepending on this parameter either the us

34 Server Config – Access Control Service2.4.5 Required Health State - AdvancedAS Pattern Definitions Required• Ignore• Latest (default)• Previous•

35 Barracuda NG Network Access Client - Administrator’s GuideSelect New (context menu) to create a new entry. The configuration dialog provides foll

36 Server Config – Access Control Service2.4.6 Policy Assignments Fig. 2–15 Access Control Service Trustzone - Rules - Policy AssignmentsList 2–30 A

37 Barracuda NG Network Access Client - Administrator’s Guide2.4.7 SettingsIf no policy rule matched identity for a client or at least one matched,

2 Chapter 6 - Update or Migration. . . . . . . . . . . . . . . . . . . 81General. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

38 Server Config – Access Control ServiceFig. 2–16 Access Control Service Trustzone - SettingsList 2–33 Access Control Service Trustzone - Settings

39 Barracuda NG Network Access Client - Administrator’s GuideHealth Passport Verification KeyHere set the RSA public key for verifying a digital pas

40 Server Config – Access Control Service2.4.8 Support ChartThis view provides information concerning Antivirus and Antispyware vendors and versions

41 Server Config – Personal Firewall Rules Chapter 3Server Config – Personal Firewall Rules3.1 GeneralTo configure the personal firewall rules brows

42 Server Config – Personal Firewall RulesFig. 3–1 Rules Incoming

43 Barracuda NG Network Access Client - Administrator’s Guide3.2.1 Rules Incoming / OutgoingRules controlling incoming traffic are arranged in the R

44 Server Config – Personal Firewall Rules3.2.3 Button BarIn the button bar, the Up and Down buttons complement options are available in the context

45 Barracuda NG Network Access Client - Administrator’s Guide3.2.4 Rule ConfigurationSelect New … from the context menu to create a new rule. Config

46 Server Config – Personal Firewall RulesConfigure the following connection details in the Advanced view of the Rule Object window:Modifying an obj

47 Barracuda NG Network Access Client - Administrator’s Guide3.2.5 TesterThe Tester view allows testing rule sets for consistency.Fig. 3–5 Time rest

3 Barracuda NG Network Access Client - Administrator’s GuideLog Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

48 Server Config – Personal Firewall RulesThe following entities are available for rule testing:3.2.6 Test ReportTest reports are saved on a first c

49 Barracuda NG Network Access Client - Administrator’s GuideChanging any parameter in any configuration area that influences the result of a test r

50 Server Config – Personal Firewall RulesICMP Parameters This tab allows you to configure blocking of ICMP packets.Connect to the Internet with ADS

51 Barracuda NG Network Access Client - Administrator’s Guide3.3 AdaptersThe Adapters tab allows you to view and configure network adapters availabl

52 Server Config – Personal Firewall RulesThis object summarizes all wireless adapters available on the system (for example, WLANcards).The followin

53 Barracuda NG Network Access Client - Administrator’s GuideComment Optionally, insert an adapter descriptionTrust Type Select Trusted to add a ref

54 Server Config – Personal Firewall Rules3.4 User ObjectsThe User Objects tab allows you to create User and User Group objects, which may be employ

55 Barracuda NG Network Access Client - Administrator’s Guide3.5 Net ObjectsThe Net Objects tab facilitates IP address/network management. Use this

56 Server Config – Personal Firewall RulesNet-[Network Connection name] objects may be used to set up abstract rule sets.• InterNetThe InterNet obj

57 Barracuda NG Network Access Client - Administrator’s GuideClick New … to open the Net Object dialog.Insert Name and Description of the Net Object

4 Introduction Chapter 1Introduction1.1 Endpoint Security and Network Access ControlWith the advent of novel technologies, work habits have changed

58 Server Config – Personal Firewall Rules3.6 Service ObjectsThe Service Objects tab facilitates port and protocol management. Use the Services wind

59 Barracuda NG Network Access Client - Administrator’s GuideThe following services are available in the Barracuda NG Personal Firewall by default:3

60 Server Config – Personal Firewall Rules• Insert Name and Application Object Description for easier identification. • Again, click New … to specif

61 Barracuda NG Network Access Client - Administrator’s GuideThe following application objects, that are required in Microsoft Windows domains, are

62 Operating & Monitoring Barracuda NG NAC Chapter 4Operating & Monitoring Barracuda NG NAC4.1 Box – Monitoring and Real-time InformationThe

63 Barracuda NG Network Access Client - Administrator’s GuideSummary of the client's health status or more details of a failed connection. Valu

64 Operating & Monitoring Barracuda NG NAC• IsolationThe categories "Not restricted", "Restricted", and "Probation"

65 Barracuda NG Network Access Client - Administrator’s GuideBy selecting this context menu entry on a selected entry all entries with the selected

66 Operating & Monitoring Barracuda NG NAC• Entry• This Computer• -ALL-Removes either the selected entry, or all entries belonging to the select

67 Barracuda NG Network Access Client - Administrator’s Guidemodifications or re-installation of the operating system. This means that the Access Co

5 Barracuda NG Network Access Client - Administrator’s GuideBefore we have a closer look at the interplay of the various components and their roles

68 Client Installation Chapter 5Client InstallationInstallation files for VPN client installation are provided on the Barracuda NG Firewall Applicat

69 Barracuda NG Network Access Client - Administrator’s Guide• Barracuda NG VPN Client• Barracuda NG SSL VPN and NAC Client (complete installation)•

70 Client InstallationAs soon as the installation procedure has completed, Barracuda NG Network Access Client is readyfor use (for a feature list, s

71 Barracuda NG Network Access Client - Administrator’s GuideBarracuda NG Network Access Client specific properties. The available options for this

72 Client Installation• Connect to the Internet with ADSL (PPTP)see description for parameter Connect to the Internet with ADSL (PPTP), page 120• As

73 Barracuda NG Network Access Client - Administrator’s Guide5.4 Customer SetupCustomer setup is a comprehensive installation method, allowing you t

74 Client InstallationThe customer.inf file directs copying of required files and insertion of registry entries. It is divided intothree sections of

75 Barracuda NG Network Access Client - Administrator’s Guide5.4.3 Section "2. Customer Area" / [CustomerReg]This section controls the con

76 Client InstallationThis section is used for creating profiles and defining default values.Table 5–4 Directives applicable in the "Customer A

77 Barracuda NG Network Access Client - Administrator’s Guide1.) Edit default entryHKU, .DEFAULT\Software\Phion\phionvpn\Profile\1, Default, 0x00010

6 Introduction1.2.1 What can Barracuda NG Network Access Client be used for?It can be used to implement an endpoint security policy on Windows based

78 Client Installation5.4.4 Section "3. Customer Area" / [SourceDisksFiles]A SourceDisksFiles section names the source files used during

79 Barracuda NG Network Access Client - Administrator’s GuideFor an overview of specific properties see table 5–1, page 71.

80 Client Installation5.5 System RestoreBarracuda NG Network Access Clients installation and removal processes create restore points in theWindows S

81 Update or Migration Chapter 6Update or Migration6.1 GeneralIn case you are updating from predecessor versions, simply execute the setup executabl

82 Uninstall Chapter 7Uninstall7.1 General7.2 ProcedureTo uninstall the client, browse to Start > Control Panel > Add or Remove Programs >

83 VPN Configuration Chapter 8VPN Configuration8.1 OverviewVirtual Private Networks are an efficient and cost-saving way to use the internet as a

84 VPN ConfigurationOptionally, the Barracuda NG SSL VPN and NAC subscription license is availabe. It enables SSL VPNfunctionality and includes Barr

85 Barracuda NG Network Access Client - Administrator’s Guide• Usage ScenarioAntivirus (AV) product installed AV active AV realtime protection act

86 VPN Configuration• Architecture• OS requirementsTable 8–5 ArchitectureFunction Barracuda NG VPN Client Barracuda NG SSL VPN and NACIntegrated hea

87 Barracuda NG Personal Firewall Chapter 9Barracuda NG Personal Firewall9.1 OverviewThe Barracuda NG Personal Firewall is a lighter version of the

7 Barracuda NG Network Access Client - Administrator’s GuideThe remediation server is the component from which policy attributes, such as firewall r

88 Barracuda NG Personal Firewall• Modify objects and rules that have been created in the History view by selecting Add Pass/Block - Traffic Policy

89 Barracuda NG Network Access Client - Administrator’s Guide9.2 Rule Set SelectionClick Rule Set Selection … to select one of the available rule se

90 Barracuda NG Personal Firewall9.3 User InterfaceThe graphical user interface of the Barracuda NG Personal Firewall is built up of the following i

91 Barracuda NG Network Access Client - Administrator’s Guide9.4 General Firewall Settings and Tasks (Menu Bar)The following configuration items of

92 Barracuda NG Personal FirewallICMP Parameters Tab:This tab allows you to configure blocking of ICMP packets.Automatic Adapter Assignment Selectin

93 Barracuda NG Network Access Client - Administrator’s Guide• Export Firewall Rule Set …This item allows you to export the rule set from the Barrac

94 Barracuda NG Personal FirewallDisplays every Access Control Server the client knows of.9.4.3 Security Mode MenuThe items in the Security Mode men

95 Barracuda NG Network Access Client - Administrator’s Guide9.6 NG Control Center - Monitoring Firewall ActivitiesItems arranged in the NG Control

96 Barracuda NG Personal Firewall9.6.2 EventsThe Events view details all applications that are currently or have been executed on the machine,irres

97 Barracuda NG Network Access Client - Administrator’s Guide9.6.3 HistoryThe History view details the entire network traffic (established connectio