The domain name of the Barracuda CloudGen Access security product will be changing soon (as of May, 2023). Our Enterprise Console domains for the US cluster will be migrating to
https://us.access.barracuda.com/ , and our Enterprise Console domains for the EU cluster will be migrating to
https://eu.access.barracuda.com/ . This change is aimed at improving our services and providing a more secure environment for our customers.
When is This Change Happening?
The new domains are already available for use, and Barracuda Networks will be phasing out the old domains within the next 3 months. During this period, you can continue to use the old domains, but Barracuda Networks highly recommends that you update your bookmarks and any integrations with the old domains to avoid any issues.
What Do I Need to Do?
For most users, the transition to the new domains should be seamless, and you can start using the new domains right away. However, if you are using custom SAML/OIDC identity provider configurations, you will need to update your configurations.
What to do if you're using a custom SAML/OIDC identity provider:
Barracuda Networks recommends that you inform your employees of possible downtime during the operation and suggest selecting a time that causes minimal disruption.
Make sure you have an admin configured with password login. This will prevent you from being locked out of your account during the transition.
Change the SAML/OIDC settings in your identity provider settings to the following domains:
https://enterprise.fyde.com/sp/metadata -> https://api.us.access.barracuda.com/sp/metadata
https://enterprise.fyde.com/sp/acs -> https://api.us.access.barracuda.com/sp/acs
https://enterprise.fyde.com/sp/SSO -> https://api.us.access.barracuda.com/sp/SSO
https://enterprise.fyde.com/sso/oidc -> https://api.us.access.barracuda.com/sso/oidc
https://enterprise.eu.fyde.com/sp/metadata -> https://api.eu.access.barracuda.com/sp/metadata
https://enterprise.eu.fyde.com/sp/acs -> https://api.eu.access.barracuda.com/sp/acs
https://enterprise.eu.fyde.com/sp/SSO -> https://api.eu.access.barracuda.com/sp/SSO
https://enterprise.eu.fyde.com/sso/oidc -> https://api.eu.access.barracuda.com/sso/oidc
- At this point, you should start using the new domains when using the Enterprise Console. If you use the old domains, the SSO flow may not work.
- Test if you can successfully log in with an admin configured for SSO using the new domain.
Configure agents to use the new domains. To do this, go to Devices > Settings and go to the App configuration section. Turn on Use new CGA domains for agent authentication. This will ensure that your agent devices use the new domain settings to authenticate.
To test an agent authentication, revoke authentication of a device (right upper corner, on the device details page), which should trigger an auth flow in the agent.
If you have any questions or encounter any issues during this process, please contact Barracuda Networks Technical Support for assistance.