This article covers the device enrollment process for SecureEdge Access. Device enrollment invitations can be created via the SecureEdge Enrollment page.
Before You Begin
Create a Barracuda Cloud Control account. For more information, see Create a Barracuda Cloud Control Account.
Subscribe to Barracuda Networks for SecureEdge Access. Barracuda Networks offers a scalable, fully managed Software as a Service (SaaS) solution for SecureEdge Access, and provides globally distributed Points of Presence (PoPs) in various locations. For more information, see Understanding Points of Presence (PoPs) and Points of Entry (PoEs). You can enroll users, groups, or devices based on your chosen SecureEdge Access plan. The available plans include DNS Access, Internet Access, Private Access, and Premium Access.
To use the users or groups from user directories (such as Microsoft Entra ID, LDAP, Google Workspace, Okta, SCIM, and Barracuda Cloud Control) for SecureEdge Access, you must first connect your SecureEdge Identity Management in order to synchronize users and groups. For more information, see Identity Management. Note: To select users or groups from user directories such as BCC-linked Microsoft Entra ID or the BCC-linked LDAP directory in SecureEdge Access, you must first connect your directory with Barracuda Cloud Control in order to synchronize users and groups. For more information, see LDAP Active Directory and Microsoft Entra ID and How to Connect Microsoft Entra ID with Barracuda Cloud Control.
Step 1. Create a Device Enrollment Invitation
Go to https://se.barracudanetworks.com/ and log in with your existing Barracuda Cloud Control account.
The chosen Tenant/Workspace is displayed in the top menu bar.
From the drop-down menu, select the workspace you want to enroll in.
In the left menu, click Access and select Enrollments.
The Enrollments page opens. Note: You must first verify the availability of seats for your SecureEdge Access account at the top-right corner of the Enrollments page and then add devices accordingly.
To enroll a new device, click New Enrollment. You can choose between Users, Group, and Devices.
From the drop-down menu, select Devices.
The New Enrollment window opens. Specify values for the following:
Enrollment type – Enrollment type selected as Devices.
License and seats – Select the license type with available seats. You can choose between DNS Access or Internet Access . For example, in this case, select Internet Access.
For Devices enrollments, specify the Maximum Seats. For example, in this case, the Maximum Seats is 15.
Enrollment profile – Select the security level for enrolled devices. You can choose between the following: Managed, Unmanaged, and 3rd Party. Note: The IT administrator manages and customizes all these profile types as needed. Managed is the most restrictive, Unmanaged offers some flexibility, and 3rd Party is the least restrictive for BYOD scenarios.
Enrollment settings – Configure settings for the enrollment. Specify a value for the following:
Name – Add an enrollment name.
Click Create Enrollment.
The Enrollment Created page opens. You can choose a preferred option:
Copy <unmanaged> token – Use this token for access with your MDM solution.
Copy <unmanaged> link – Send this link directly to enroll your users.
Paste the enrollment link or token in a text file. Note: You will require this link in Step 2.
Click Close.
After creating the device enrollment invitation, the device appears in the Enrollments table. The Enrollments page displays the unmanaged device invitations created by the IT administrator to allow enrollment. You are now ready to proceed to Step 2.
(Optional ) Copy the Link or Copy the Token
If you must copy the enrollment link or token, proceed with the following steps:
On the Enrollments page, click the icon of three vertical dots to copy the enrollment link or token.
You have two options:
Copy <unmanaged> link – To copy the enrollment link, select Copy <unmanaged> link.
Copy <unmanaged> token – To copy the token, select Copy <unmanaged> token.
Step 2. Connect a Barracuda SecureEdge Access Agent
Download and install the Barracuda SecureEdge Access Agent.
Open the SecureEdge Access Agent.
The Enrollment is required page opens.
Paste the link retrieved from Step 1 in the space provided.
Click Enroll.
The Barracuda SecureEdge Access Agent displays, and the Enterprise Enrollment page opens.
Click Accept.
The Activity page opens and shows the status of your device.
You can see your device is enrolled with the selected workspace. For example, in this case, it is the Default workspace.
Click the Settings icon at the bottom of the SecureEdge Access Agent. Note: During the Establishing Connection time frame, you can view the progress bar in the Setup section.
Verify the Protection enabled status once the connection to your device is established.
You can see SecureEdge Access Agent is enrolled on your device. In addition, you can verify the device entry on the respective Access > Enrolled Devices page in the SecureEdge Manager.
Edit a Device Enrollment Invitation
Select the workspace you want to edit a device for.
Go to Access > Enrollments.
The Enrollments page opens. All enrollment invitations for your selected workspace are displayed.
Click the icon of three vertical dots next to the device invitation you want to edit.
Click Edit.
The Edit Enrollment window opens. Edit the value you are interested in. For example, if you have used all 15 seats and want to add more, you can change the number of seats allocated for that enrollment.
Click Save.
Remove a Device Enrollment Invitation
Select the workspace you want to remove a device for.
Go to Access > Enrollments.
The Enrollments page opens. All enrollment invitations for your selected workspace are displayed.
Click the icon of three vertical dots next to the device invitation you want to remove.
Click Delete
The Delete Enrollment window opens.
Click Delete.
(Optional) Filtering and Sorting Features
You can add filters to view specific users, groups, or devices on the page.
Click Filters.
The Filters window opens. Specify the values for the following:
Created timeframe – Select the desired time frame from the drop-down list. You can choose between Last 24 hours, 3 days, 7 days, Last 30 days, Last 3 months, Last 6 months, or Last year.
Select the criteria you wish to search for.
Click Apply. To reset the filter, click Clear all.
Sorting Features
Filter and sort to view specific users, groups, or devices on the Enrollments page. Select the criteria to sort by. The Enrollments table will sort according to your selection.
Next Steps
Set up the Zero Trust Access Policy that specifies the access requirements associated with the various resources that the Barracuda SecureEdge Access Agent can connect to.