It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda SecureEdge

Zero Trust Network Access Set Up Wizard

  • Last updated on

The Barracuda SecureEdge Manager displays the entry point into the Zero Trust Network Access (ZTNA) wizard via the Status and the Quick Start dashboards. The ZTNA set up wizard is a self-explanatory, step-by-step guide.

dashboard-status-qs.png

The benefits of using the ZTNA set up wizard
  • The Zero Trust Network Access wizard provides an easy, step-by-step process to set up all your components or infrastructures required in SecureEdge for ZTNA use cases.

  • It allows administrators to input information in a prescribed order.

  • On the Status dashboard and the Quick start page, you can see an overview of your existing complete/incomplete configuration and the entry point link to the wizard itself.

  • In the Set up Zero Trust Network Access card/widget, you can do the following:

    • The entire card/widget steps are clickable and will open the wizard from your previous point of configuration.

    • The card/widget displays the completion status of the individual wizard steps with a green check mark. If a wizard step displays a green check mark, you can proceed with next step. In addition, you can see relevant resources that you have already deployed, and verify the deployment status.

    • You can change the Set up Zero Trust Network Access card appearance per workspace.

    • You can drag-and-drop the ZTNA card.

    • You can always edit the dashboard to show/hide the Set up Zero Trust Network Access card and save it in your dashboard.

    • After completing the simple wizard process, you can add more advanced ZTNA settings in the SecureEdge Manager.

  • After deploying the basic SecureEdge infrastructure and getting ZTNA deployed, you can verify the capabilities of the SecureEdge ZTNA solution.

Verify the Status of the Set up Zero Trust Network Access Card

  1. Go to https://se.barracudanetworks.com and log in with your existing Barracuda Cloud Control account.

  2. In the left menu, click the Tenants/Workspaces icon and select the workspace you want to access information on the dashboard for.

  3. Click the Dashboard icon. The Status dashboard page opens.

    zta-step1.png

In the Set up Zero Trust Network Access section, you can verify the status of your deployed infrastructure. For example, if you have not completed the first step (“Create Point of Entry”), the wizard will take you there. To start from scratch, proceed with the following steps:

Step 1: Create Point of Entry

When you complete this step, both an Edge Service and a Point of Entry for that Edge Service will be created.

Click Create Point of Entry to open the Set Up Zero Trust Network Access page. This page provides a brief introduction of ZTNA and basic information about the wizard.

  • Click Setup and specify the values for the following: 

    • Region – Select the region from the drop-down menu.

    • Bandwidth – Select the bandwidth from the drop-down menu. You can choose between 50 Mbps, 100 Mbps, 200 Mbps, 500 Mbps, 1000 Mbps, 2500 Mbps, and 5000 Mbps.

  • For Point of Entry, specify the value for the following:

    • Edge Services – Select the region from the drop-down menu. Note: It is recommended to select the region that is closest to the majority of your users.

If you have already deployed an Edge Service, it will be available in the drop-down list when configuring an Edge Service as a Point of Entry.

ztna-setup.png

After completing the first step, the Create Point of Entry icon displays a green check mark if you have one or more Point of Entry whose status is online.

step1-done.png

For more information, How to Configure Point of Entry.

Step 2: Set Up Directory & Authentication

You must create a local user directory. To add a user, you must specify the username and email. The Set up Directory & Authentication icon displays a green check mark when successfully complete.

zta-02-success.png

The local user directory uses Email OTP as an identity provider.

For more information on identity providers and user directories, see Identity Management.

Step 3: Add Application

You must define one application to appear in the SecureEdge Access Agent app catalog. For more information, see How to Configure Application Catalog Entries. In this step, you can select a predefined public app, or create your own public web app. You can choose between two application types: Public Predefined Application or Public Custom Application.

  • If you select the application type Public Predefined Application, specify the values for the following:

    • In the Select one application section, specify the value for the following:

      • Application – Select the application from the drop-down menu or type to search.

    • In the Add application to the agent catalog section, specify the values for the following:

      • Display Name – Enter the display name.

      • Launch URL – Enter the URL.

  • If you select application type Public Custom Application, specify the values for the following:

    • In the Add application to the agent catalog section, specify the values for the following:

      • Display Name – Enter the display name.

      • Launch URL – Enter the URL.

After successfully completing this step, the Add Application icon displays a green check mark.

zta-step-04.png

Note that if an application is not accessible via routing, you can define internal applications and even establish SecureEdge connectors. For more information, see How to Configure SecureEdge Connector.

Step 4: Configure ZTNA Policy

In this step, you create a Zero Trust policy for the previously created application. You can configure the following device postures: Antivirus enabled, Screen lock enabled, Firewall enabled, Block jail broken, Enforce disk encryption, Barracuda SecureEdge Agent updates, and OS updates. For more information, see Zero Trust Access Policies. In addition, you can add users this policy should apply to.

After successfully completing this step, the Configure ZTNA Policy icon displays a green check mark.

zta-step-05.png

Step 5: Deploy SecureEdge Agent

The final step is to enroll users. You can select users or groups to be enrolled for SecureEdge Access. The enrolled users will receive an email with instructions to install and enroll the SecureEdge Agent on their device.

The number of users/groups you can enroll depends on the availability of seats in your SecureEdge Access subscription.

After completing the final step of the wizard, all your basic infrastructure set up and ZTNA policy for the application will display a green check mark. By clicking Done, you will be redirected back to the dashboard.

zta-all-done.png

For more information on the user enrollment procedure, see How to Enroll Users in Zero Trust Network Access.

Further Information