It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda SecureEdge
Overview Documentation Training Certification Materials

How to Configure the SecureEdge Connector

  • Last updated on

The SecureEdge Connector is a small piece of software that can be installed on Windows or Linux servers to keep your devices secure by redirecting their traffic through a secure VPN connection. The Barracuda SecureEdge Manager allows administrators to configure the SecureEdge Connector, a software solution for establishing a connection between the service and a resource that cannot be reached via routing. Registration of the SecureEdge Connector is token based. Once enrolled, each Connector is assigned a single static IP address within the SecureEdge environment. You can also configure a list of resources that the Connector can connect to. Each resource can be reached via the Barracuda SecureEdge Agent if permitted by an existing policy. In addition, the Connector can be used for app-to-app communication between Connectors or between a Connector and the SecureEdge environment. This requires Routed mode to be activated. You can connect to numerous applications on Windows and Linux servers and in the cloud via one-click Connector deployments. The Connector supports all Edge Services including Private Edge Service and Edge Service for Virtual WAN.

For new features of the Connector to work, you must update your SecureEdge Connector to the newest version. Note that older versions of the Connector will not work.

Before You Begin

  • For the Barracuda SecureEdge Connector to work on a Windows client, you must install Microsoft .NET Framework 6.0.

Connector Deployment Modes

Inbound Mode

Inboundmode-conn.png

Routed Mode

routedmode-conn.png

System Requirements

Inbound Mode

Routed Mode (app to app)

License

No license required

Additional license required

Supported Operating Systems

  • Windows 10 or higher

  • Windows Server 2019 or higher

  • RedHat-based Linux Distributions

  • Ubuntu

  • Windows 10 or higher

  • Windows Server 2019 or higher

  • RedHat-based Linux Distributions

  • Ubuntu

Supported Architectures

X86

X86

Minimal Requirements

1 Core 1GB RAM

1 Core 1GB RAM

For Linux Distributions

  • Firewalls supported ufw and firewalld

  • DNS resolution supported systemd-resolved

  • Firewalls supported ufw and firewalld

  • DNS resolution supported systemd-resolved

If you use .local domains on Apple iOS devices, it will ignore local DNS records and the resolution will not work. For more information, see https://support.apple.com/en-us/101903

Step 1. Configure Client Network

  1. Go to https://se.barracudanetworks.com and log in with your existing Barracuda Cloud Control account.

  2. Select the workspace your Connector should be assigned to.

  3. Go to Infrastructure > Settings.

    settings_inf.png

  4. The Settings window opens. Scroll to the Connector section.

  5. In the CLIENT NETWORK RANGE section, specify values for the following: 

    • Client Network – Enter the network used for the clients.

      client-network.png

  6. Click Save.

Step 2. Create a SecureEdge Connector

  1. Go to https://se.barracudanetworks.com and log in with your existing Barracuda Cloud Control account.

  2. Select the workspace your Connector should be assigned to.

  3. In the left menu, click the Infrastructure icon, and select Connectors.

    inf_conn.png

  4. The Connector page opens. All enrolled Connectors deployed in the selected workspace are displayed. Click Add.

    new-conn-01.png

  5. The Add Connector window opens. Specify values for the following:

    • Name – Enter a unique name.

    • Description – Enter a brief description.

    • Edge Service – Select the edge service you wish to connect to from the drop-down list.

    • Bi-directional – Enable Routed mode for app-to-app communication. Note: For the Inbound mode, Bi-directional is disabled.

      new-conn-02.png

Note: For the initial release, Connectors will be able to connect to only two providers or instances of the Edge Service they are attached to. For this reason, the first two static providers will be used and added under the WAN settings in the Private Edge. Any additional providers will be ignored. This is also true for cloud services when scale units are increased.

  1. Click Next, and specify values for the following:

    • Servers – Enter the names of the servers. To add a server, click +. To remove a server, click on the trash can icon . 

    • Hostname – Enter your unique hostname. Note: For Routed mode, the predefined internal DNS suffix secureedge.barracuda.internal must be used.

    • Ports – Enter ports. You can enter ports as a single number, in ranges, or as a comma-separated list of these.

    • Internal IP – Enter the internal IP address on which the resource will be reachable. 

      new-conn-03.png

Note: The parameters added above will be used to create resources, and these resources can be used to control access to the exposed services. In this case, for example, a resource is created naming BackupOps-Frostbite to hostname frostbite.net and the port is 443. In addition, the IP address is assigned from the connector pool, e.g. 192.168.33.0. This Connector app can then be used as source or destination for Network Access Control List policies as well as for other security policies including ZTNA resources. For more information, see Apps and Resources and Custom Applications.

  1. Click Next. 

  2. The Summary page opens. Review your settings and click Save.

    new-conn-04.png

    The Connector status is now displayed. 

  3. Verify the status of the Connector and follow the instructions in the configuration window.

  4. You can download and install the required connector for Windows and Linux. Click Finish.

    new-conn-05.png

  5. After the configuration is completed, your Connector is created. On the Connectors page, you will see a new Connector has been enrolled. 

    new-conn-06.png

  6. On the Connector page, click the icon with the three vertical dots.
     

    click-three-dots.png

    • You have three options:

      • Generate Registration token – To generate new registration token for the Connector, select Generate Registration token.

      • Download the Windows agent – To download the Windows agent, select Download the Windows agent.

      • Download the Linux agent – To download the Linux agent, select Download the Linux agent.

  7. Click Generate Registration Token. The Generate Registration Token window opens. Copy the Connector token.

    new-conn-07.png

  8. Paste the token into a text file.

  9. Click OK.

Step 3. Install the Barracuda Connector

  1. Launch the setup of the Connector. 

    connector-install-01.png

  2. Accept the terms in the License Agreement window and click Next.

  3. The Enrollment Token window opens. Enter the token retrieved in Step 1 and click Next.

    token.png

  4. To install the Barracuda Connector, click Install.

  5. After the installation is complete, click finish. You must verify that the connector is up and running in your system's services menu.

    services.png

The exposed resources are accessible over the SecureEdge environment via the domain name you configured in the server configuration of the Connector in Step 1. The resources and services are now reachable via the Barracuda SecureEdge Agent for any client. The Barracuda SecureEdge Agent is a Zero Trust Network Access (ZTNA) agent running on the client that connects to the services offered by Barracuda SecureEdge. For more information, see How to Enroll Users in Barracuda SecureEdge. You are now ready to access the configured resources and services of the Connector over the SecureEdge environment.

After completing the installation and enrollment process, open the Barracuda Connector application. 

Connector-app.png

You can verify the status of your Connector. In addition, the Connector page provides following details:

  • Enter Enrollment Token – You can re-enter the enrollment token.

  • Open Log File – You can open a log file and display a log text file in .txt format. You can see detailed information about your tokens.

  • Open Log File Folder – When selecting Open Log File Folder, you can go directly to a log file folder location.

  • Quit – You can exit the Connector.

Edit an Existing Connector

Note that if your Connector software license expires, updates are not automatically pushed to the Connector and you cannot edit or update the Connector in Routed mode. However, your Connector in Inbound mode will still work.

  1. Go to https://se.barracudanetworks.com/ and log in with your existing Barracuda Cloud Control account.

  2. Select the workspace you want to edit the existing enrolled Connector from.

  3. In the left menu, go to Infrastructure > Connectors.
    The Connector page opens. All Connectors enrolled in the selected workspace are displayed.

  4. Click on the pencil icon next to the Connector you want to edit.

    new-conn-08.png

  5. The Edit Connector window opens. Edit the value you are interested in.

  6. Click Save.

Remove an Existing Connector

  1. Go to https://se.barracudanetworks.com/ and log in with your existing Barracuda Cloud Control account.

  2. Select the workspace you want to remove the existing enrolled Connector from.

  3. In the left menu, go to Infrastructure > Connectors.
    The Connector page opens. All Connectors enrolled in the selected workspace are displayed.

  4. To remove an enrolled Connector, click on the trash can icon next to the enrolled Connector.

    new-conn-11.png

  5. The Delete Connector < Connector-Name> page opens. 

    new-conn-10.png

  6. Click OK to confirm.

(Optional) Download Windows/Linux Agent

To download the Windows or Linux agent, proceed with the following steps:

  1. On the Connectors page, click the icon of three vertical dots.

    download agent.png

  2. As per your requirement, download the corresponding Windows or Linux agent.

Re-Entering the Enrollment Token on Windows 

In Windows operating systems, the Connector application is located in the path C:\Program Files\Barracuda\Connector. When no configuration is available, the Connector service waits for a token; otherwise, you must restart the service to use a newly supplied token.

To re-enter new token in Windows:

  1. Go to C > Program Files > Barracuda > Connector.

  2. Click the application ConnectorUI. The Connector application opens.

  3. In the upper left of the Connector application, click the cog wheel icon and select Enter Enrollment Token.

    connector-settings.png

  4. The Enter Enrollment Token window opens. Enter the token retrieved in Step 1.

    enter-en-tck.png

  5. Click OK.

The new token gets enrolled after a restart of the Connector service.

Additional Information

Firewall Settings on a Connector

Windows:

  • The Connector will add firewalld rules to allow everything that is coming from the bsdwcsvc.exe application and going out of it.

fw-1.png

Further Information