The Device Configuration feature allows you to provision resources and other settings configured on the Barracuda SSL VPN directly on a user's device. When logged in, the user will see resources and settings on their RESOURCES > Device Configuration page, depending on what resources you make available to them and the operating system of the device. There they can select the resources to be provisioned and where they should be located on the device, for example, in a folder on the Desktop.
Before you begin
For the user to be able to see the RESOURCES > Device Configuration page, the following conditions must be met:
- The user must have the access right Personal Access Right / Device Configuration View.
- There must be a accessible resource on the client to be provisioned.
- For the items: client certificates, Exchange ActiveSync settings, and LDAP settings, the corresponding option on the RESOURCES > Configuration page must be set to allow the provisioning.
Grant access to users
Follow these instructions to grant users the access right Personal Access Right / Device Configuration View:
- Log into the SSL VPN web interface.
- Verify that you have selected the correct user database on the top right of the page.
- Go to the ACCESS CONTROL > Access Rights page.
- In the Create Access Right section, select the relevant database from the User Database drop-down list.
- Select Personal Right.
- Enter a descriptive Name for this access right.
- In the Available Rights list, select Device Configuration View and click Add >>.
- In the Available Policies list, select the policies for which provisioning should be enabled and click Add.
- Click Add.
On the RESOURCES > Configuration page, in the Device Configuration section, you can configure whether the non-resource items (certificate, exchange, LDAP) can be provisioned.
Windows devices
This table shows the types of items that can be provisioned to Windows devices.
| Item Type | Description |
|---|---|
| All of these resources, if available to the user on their device, can be provisioned as shortcuts that will immediately launch the appropriate resource when selected. Whether they appear or not depends on the user´s access rights and whether they are applicable for the device (SSL tunnels and tunneled web forwards will not be available on iOS devices because they require the agent). The settings for the resource are provisioned only as shortcuts (an URL to the Barracuda SSL VPN and the appropriate icon). |
| Mapped Drives | If the user has access to at least one Network Place resource that has an associated drive mapping, a shortcut will be provisioned to the device that will initiate the drive mapping process. |
| Client Certificates | Installs the selected client certificate into the Windows keystore. Certificates are taken from the ADVANCED > SSL Certificates page (client certificates for the user only). |
| IPsec Settings | Creates a VPN connection on the device using the relevant IPsec settings configured on the RESOURCES > IPsec Server page. |
| PPTP Settings | Creates a VPN connection on the device using the relevant PPTP settings configured on the RESOURCES > PPTP Server page. |
iOS / macOS devices
This table shows the types of items that can be provisioned to iOS and macOS (10.7 and above) devices.
| Item Type | Description |
|---|---|
| Exchange Settings | The remote device is configured to use the Barracuda SSL VPN to proxy the connection. |
| LDAP Settings | For users authenticated with the Barracuda SSL VPN using LDAP or OpenLDAP, the settings from the user database and user account will be provisioned to the device. |
| All of these resources, if available to the user on their current device, can be provisioned as Web Clip shortcuts. Whether these resources appear depends on the user´s access rights and whether they are applicable for the client device (SSL tunnels and tunneled Web Forwards will not be available on iOS devices because they require the agent). These items can be provisioned in the form of a profile installed on the device. The remote user can specify the name of the profile on the RESOURCES > Device Configuration page. |
| Client Certificates | Installs the selected client certificate onto the device. Certificates are taken from the ADVANCED > SSL Certificates page (client certificates for the user only). |
| IPsec Settings | Creates a VPN entry on the device using the relevant IPsec settings configured on the RESOURCES > IPsec Server page. The user will be prompted for their password when installing a profile containing IPsec settings. |
| PPTP Settings | Creates a VPN entry on the device using the relevant PPTP settings configured on the RESOURCES > PPTP Server page. The user will be prompted for their password when installing a profile containing PPTP settings. |
By default, all shortcuts created are added to the user's Desktop, Start Menu and web browser, in a sub-folder whose name matches that of the Barracuda SSL VPN. If the web browser option is selected, the user will be prompted from the Barracuda SSL VPN agent asking which browsers to provision shortcuts to. When the installation is completed, the agent will add the bookmarks to all profiles defined within those browsers.
Bookmark aliases
When shortcuts are created, they point at URLs on the Barracuda SSL VPN. For example, the shortcut looks like https://sslvpn.example.com/webforward/jira. By default, the Barracuda SSL VPN will attempt to generate an alias from the resource name when it is created. This will strip out any illegal characters and append a numeric value if the alias already exists. You can specify these aliases on the edit pages of the respective resources. To disable aliasing, go to RESOURCES > Configuration > Bookmarking. In this case, the provisioned shortcuts will instead refer to the verbose URL.