Domain Name Change for CloudGen Access

The domain name of the Barracuda CloudGen Access security product will be changing soon (as of May, 2023). Our Enterprise Console domains for the US cluster will be migrating to https://us.access.barracuda.com ,  and our Enterprise Console domains for the EU cluster will be migrating to https://eu.access.barracuda.com. This change is aimed at improving our services and providing a more secure environment for our customers. 

When is This Change Happening?

The new domains are already available for use, and Barracuda Networks will be phasing out the old domains within the next 3 months. During this period, you can continue to use the old domains, but Barracuda Networks highly recommends that you update your bookmarks and any integrations with the old domains to avoid any issues.

What Do I Need to Do?

For most users, the transition to the new domains should be seamless, and you can start using the new domains right away. However, if you are using custom SAML/OIDC identity provider configurations, you will need to update your configurations.

What to do if you're using a custom SAML/OIDC identity provider:

1. Barracuda Networks recommends that you inform your employees of possible downtime during the operation and suggest selecting a time that causes minimal disruption.

2. Make sure you have an admin configured with password login. This will prevent you from being locked out of your account during the transition.

3. Change the SAML/OIDC settings in your identity provider settings to the following domains:

   1. US Cluster

      1. SAML

         1. https://enterprise.fyde.com/sp/metadata -> https://api.us.access.barracuda.com/sp/metadata

         2. https://enterprise.fyde.com/sp/acs -> https://api.us.access.barracuda.com/sp/acs

         3. https://enterprise.fyde.com/sp/SSO -> https://api.us.access.barracuda.com/sp/SSO

      2. OIDC

         1. https://enterprise.fyde.com/sso/oidc -> https://api.us.access.barracuda.com/sso/oidc

   2. EU Cluster

      1. SAML

         1. https://enterprise.eu.fyde.com/sp/metadata -> https://api.eu.access.barracuda.com/sp/metadata

         2.  https://enterprise.eu.fyde.com/sp/acs -> https://api.eu.access.barracuda.com/sp/acs

         3.  https://enterprise.eu.fyde.com/sp/SSO -> https://api.eu.access.barracuda.com/sp/SSO

      2. OIDC

         1. https://enterprise.eu.fyde.com/sso/oidc -> https://api.eu.access.barracuda.com/sso/oidc

4. At this point, you should start using the new domains when using the Enterprise Console. If you use the old domains, the SSO flow may not work.
   1. Test if you can successfully log in with an admin configured for SSO using the new domain.

5. Configure agents to use the new domains. To do this, go to Devices > Settings and go to the App configuration section. Turn on Use new CGA domains for agent authentication. This will ensure that your agent devices use the new domain settings to authenticate.

   To test an agent authentication, revoke authentication of a device (right upper corner, on the device details page), which should trigger an auth flow in the agent.

Saas Updates

If you have configured any SaaS Resources, Barracuda Networks recommends updating these applications as well to avoid any issues in the future.

Here is what you need to do:

1. Login to https://[eu|us].access.barracuda.com/ (depending on your region) and navigate to the Access tab on the left.
2. A list of resources should be available. For each resource that has SSO configured :
   
   1. Click on the resource and click View Server Settings.
   2. Copy the Issuer/Entity ID, Login/SSO URL and Logout URL.
   3. Log into the respective App and update the fields with the new entries from step b.

If you have any questions or encounter any issues during this process, please contact Barracuda Networks Technical Support for assistance.