It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda Network Access Client
Overview Documentation Training Materials

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see End-of-Support for CloudGen Firewall Firmware for further information on our EoS policy.

How to Configure the Barracuda Access Monitor

  • Last updated on

In the Barracuda Access Monitor, you can configure connectivity settings, Health Agent authentication, and notification and log parameters. You can also modify some registry settings according to your requirements. The configuration of the Barracuda Access Monitor is done in the Advanced Settings section.

Configure the Barracuda Access Monitor

  1. Launch the Access Monitor by left-clicking the red cross icon in the system tray.

  2. In the Configuration menu, select Settings to open the Advanced Settings window.

access_monitor_advanced.png

Within the Barracuda Access Monitor Advanced Settings menu, you can modify the following parameters:

Health Agent Connectivity

This section holds all configuration items regarding the connectivity of the Barracuda Access Monitor.

  • Access Control Server IPs From Registry – This dialog allows you to create, edit, and delete Access Control Server IP addresses stored within the registry. You can configure as many Access Control Server IP addresses as required to ensure continuous connectivity.
    ip_from_reg.png
    The configured IP addresses are then stored in the registry:
    • Path – HKEY_USERS\.Default\Software\phion\phionha\PolSrv
    • Key – N (enumeration)
    • Value – IP or Hostname of an Access Control Server
  • Access Control Server IPs From DHCP – When the Barracuda Networks DHCP server is configured to distribute the Access Control Server IP addresses using DHCP, these addresses are listed in an advanced dialog. If required, clear the Access Control Server IP addresses received through DHCP by clicking Clear Policy IPs.
    ip_from_dhcp.png
  • ICMP Connectivity Checking – The Barracuda Access Monitor can determine the connectivity to the Access Control Server using ICMP packets. It is recommended to enable this feature when connecting to the Access Control Server through a VPN connection because otherwise the connectivity may not work as expected.

    • If enabled, the Barracuda Access Monitor sends an ICMP packet to the Access Control Server before connecting and starting a health evaluation. If the ICMP packet returns successfully, the Barracuda Access Monitor connects to the Access Control Server and starts the health evaluation.

    • If disabled, the Barracuda Access Monitor starts immediately connecting to the Access Control Server, instead of checking for connectivity first.

    • To edit this option manually, modify the following registry key:

      • Path – HKEY_USERS\.Default\Software\phion\phionha\settings

      • Key – ICMPProbing

      • Value – 0 (disabled); 1 (enabled, default)

        • When ICMP Connectivity Checking is enabled, the firewall must be configured to pass ICMP packets through; otherwise, the Barracuda Access Monitor will not connect to the Access Control Server.
  • Offline Check – This option lets you disable the Health Agent if no network connection is active. This prevents the local firewall from unintentionally entering quarantine mode. The default value is 0 (the Health agent is not disabled when offline).
    • You can enable or disable quarantine in offline mode using the UseOfflineQuarantineMode registry key. The defauilt value is 1 (quarantine in offline mode is enabled).
    • You may configure whether to display the health dialog window or not using the ShowAgentDlg registry key. Default value is 1 (the dialog is displayed).
    • To edit this option manually, modify the following registry key:
      • Path – HKEY_USERS\.Default\Software\phion\phionha\settings

      • Key – UseConnectionState

      • Value – 0 (disabled); 1 (enabled, default)
Connectivity Timeout Settings

You can manipulate the timeout periods for the Barracuda Access Monitor’s connection to the Access Control Server by using registry switches. Reduce the default values in HKEY_USERS\.Default\Software\phion\phionha\settings in order to get a more reactive client behavior.

  • Key – WaitForNextTry

  • Value – [Timeout value in milliseconds, default value is 30000 (30 sec)]

and:

  • Key – WaitForNextLocalComputerAuth

  • Value – [Timeout value in milliseconds, default value is 60000 (30 sec)]

Connection wait time for the Access Control Server, if VPN is active:

  • Key – WaitForNextVPNTry

  • Value – [Timeout value in milliseconds, default value is 1000 (1 sec)]

The waiting time for the next user prompt, if Cancel was clicked in the basic authentication request:

  • Key – WaitCancel

  • Value – [Timeout value in milliseconds, default value is 3600000]
Health Agent Authentication
  • Use Basic Authentication – This option specifies if basic user-and-password or certificate authentication should be used in case the NTLM authentication fails. Defaults to 1 (basic user-and-password authentication is used). To edit this option manually, modify the UseBasicAuthFallback registry key in .DEFAULT\Software\Phion\phionha\settings\. Default value is 1 (enabled).
  • Use NTLM Authentication – By enabling this option, the Barracuda Access Monitor will use the Windows user credentials provided by NTLM for authentication. Defaults to 1 (NTLM is used). To edit this option manually, modify the UseNTLM registry key: Default value is 0 (disabled).
  • Check Access Control Trust Relationship – By enabling this option, the Barracuda Network Access Client will check the Access Control Service X509 trust relationship.
NAC Client Settings
  • Use Default Quarantined Ruleset – Enable this option to automatically start the firewall with the default quarantine ruleset.
  • On Power Resume Auto Quarantine – Enable this option to automatically load the quarantine ruleset when recovering from Standby/Hibernate.
  • On Power Resume Quarantine Load Only – Only load the quarantine ruleset; do not terminate existing connections. This option only applies when On Power Resume Auto Quarantine is enabled.
  • Use enhanced health state detection – Specifies if enhanced health state checks by using the OESIS Framework (OPSWAT) should be carried out.
  • Detect installed OS Hotfixes – Specifies if the installed OS hotfixes should be considered for health check.
  • Use Cache for list of Hotfixes – Specifies if the list of hotfixes that were loaded in the last session are initially used for health check and the new list is loaded in the background.
Notification Settings
  • Healthy – Enable this option to display a notification pop-up whenever the state 'Healthy' is reached.
  • Quarantine – Enable this option to display a notification pop-up whenever the state 'Quarantine' is reached.
Log Settings

Enables /disables logging for the Barracuda Network Access Client. For more information, see Network Access Client Logging.

Advanced Setting for the Access Control Service Port

It is possible to change the default port of 44000 through which the Access Monitor reaches the Access Control Server by manipulating the DefaultPort registry key in .DEFAULT\Software\Phion\phionha\settings\