We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see End-of-Support for CloudGen Firewall Firmware for further information on our EoS policy.

FSC-Series Deployment

  • Last updated on

Deploying a Barracuda NextGen FSC-Series network requires at least one FSC Access Cluster, a NextGen Control Center, and the deployment of the individual FSC devices.

FSC Access Cluster and NextGen Control Center Deployment

Each Secure Connector connecting to your network must be assigned to an FSC Access Cluster, comprised of one Access Concentrator and a border firewall as well as a NextGen Control Center managing all Access Concentrators, F-Series Firewalls, and the Secure Connectors. The FSC Access Clusters forward management traffic directly to the Control Center and send the rest via the border firewall to its destination. The border firewall routes incoming FSC VPN tunnels to the Access Concentrator. It also scans and filters user traffic according to your company policies for outgoing traffic from the FSC networks.

For more information, see Secure Access Concentrator and Control Center Deployment.

Secure Connector Deployment via Configuration File

The configuration for the Secure Connector is created centrally on the Control Center using SC templates to reduce the configuration overhead. The SC configuration file is then exported and copied to the Secure Connector via USB OTG or web interface. The Secure Connector then automatically connects to the Access Concentrator in the FSC Access Cluster assigned to it via the sca.conf. This allows the Secure Connector to connect in VPN operational mode and authenticate by the certificates included in the configuration file.

For more information, see FSC Deployment via FSC Configuration File.

Secure Connector Deployment via VPN Deployment Mode

If you do not have physical access to the device, configure the Secure Connector in the Control Center. Directly on the Secure Connector, configure the WAN connection and VPN so the Secure Connector can connect to the Access Concentrator in VPN deployment mode. No certificates are required because the Access Concentrator uses a passphrase to authenticate. Once connected, the Control Center immediately pushes the operational configuration to the Secure Connector and switches the VPN to operational mode.

For more information, see FSC Deployment via VPN Deployment Mode.

Last updated on