The Barracuda CloudGen Firewall Access Control service defines security policies for network users (e.g., VPN clients) and enables the CloudGen Firewall to perform identity and health checks on clients. The Access Control service of the CloudGen Firewall interacts with the VPN Client & Network Access Client 5.x and needs to be set up simultaneously. For proper operation, all components of the Barracuda Network Access Client framework, the Access Control service on the CloudGen Firewall, and the client software require up-to-date virus and spam protection.
Configure the Access Control Service
Create an Access Control service and configure the Barracuda CloudGen Firewall to perform health state validation checks on your network and VPN clients. For more information, see How to Configure the Access Control Service.
Access Control Service Objects
Access Control Service Objects are assigned to clients according to access control policies and enable administrators to perform certain actions such as registry checks and repairs on a client. Create Access Control Service Objects with policy rulesets specifying required system and service settings to let the CloudGen Firewall perform identity and health checks on connecting clients and groups. Access Control Service Objects permit access only to administrators with appropriate administrative scope and appropriate permission.
For more information, see Configuring Access Control Service Objects.
Access Control Service Trustzones
Access Control services within the same trustzone share the same set of security policies that are defined in access control objects. If you are using the Access Control service on a managed CloudGen Firewall, the Barracuda Firewall Control Center provides Access Control Service trustzones as global objects. Access Control Service trustzones can be configured on a range or cluster basis.
For more information, see Configuring Access Control Service Trustzones.