How to Set Up the Barracuda NG SSL VPN Client

The Barracuda NG SSL VPN Client (Transparent Agent) for MS Windows operating systems is a powerful VPN client that lets you establish transparent network access (Layer 3) to internal company network infrastructures. The client is fully integrated into the SSL VPN Portal and can be executed by starting the my Network applet. It supports the following authentication schemes: 

• X.509 certificate
• user/password
• X.509 certificate & user/password
• license file

After installing the Barracuda NG SSL VPN Client, complete the steps in the following section to set it up.

Set Up the SSL VPN Client

1. Open the SSL-VPN page for the VPN service (Config > Full Config > Box > Virtual Servers > your virtual server > Assigned Services > VPN-Service).
2. Click Lock.
3. In the left menu, click NG SSL VPN Client.
4. In the left menu, click Switch to Advanced View.

5. In the NG SSL VPN Client table, add or edit settings for the SSL VPN client. For each entry, you can specify the following settings:

   Setting	Description
   Active	Select the Active check box. This setting enables the my Network link in the SSL VPN web portal for fully transparent network access. This feature uses the Barracuda NG SSL VPN Client applet to establish a client-to-site connection to a Barracuda Networks VPN service, using the SSL VPN web portal. This requires a configured and running VPN service and client-to-site access.
   VPN-Server Listen IPs	The listen IP address for SSL VPN. By default, the listen IP address of the VPN service is selected from this list. You can also select: First-IP – Uses the First-IP address that is specified in the VPN service properties. Second-IP – Uses the Second-IP address that is specified in the VPN service properties. First+Second-IP – Uses the First-IP and Second-IP addresses that are specified in the VPN service properties. explicit – To use explicit IP addresses that you enter in the Explicit Listen IP's table, select this option. To verify the IP addresses that are specified for the VPN service, open its Service Properties page (Config > Full Config > Box > Virtual Servers > your virtual server > Assigned Services > VPN-Service).
   Explicit Listen IPs	If you select explicit from the VPN-Server Listen IPs list, enter the IP addresses for  the SSL VPN in this table.
   Advanced Options	If required, enter advanced options for the transparent agent in this field.
   Connection Type	The client-to-site connection type. You can select: External CA – Provides single sign-on to SSL VPN users. Barracuda VPN CA
   Show GUI	To open a license file selection window before login, select this check box.
   Must be Healthy	If the connected user must perform a health check before transparent network access is granted, select this check box.
   Allowed User Groups	To restrict transparent network access to defined user groups only, add the distinguished name of allowed user groups in this table. For example: *OU=admins*

6. Click OK.
7. Click Send Changes and Activate.

To configure the SSL VPN service, continue with How to Configure the SSL VPN Service.