Deploying a Barracuda NextGen FSC-Series network requires at least one FSC Access Cluster, a NextGen Control Center, and the deployment of the individual FSC devices.
FSC Access Cluster and NextGen Control Center Deployment
Each Secure Connector connecting to your network must be assigned to an FSC Access Cluster, comprised of one Access Concentrator and a border firewall as well as a NextGen Control Center managing all Access Concentrators, F-Series Firewalls, and the Secure Connectors. The FSC Access Clusters forward management traffic directly to the Control Center and send the rest via the border firewall to its destination. The border firewall routes incoming FSC VPN tunnels to the Access Concentrator. It also scans and filters user traffic according to your company policies for outgoing traffic from the FSC networks.
For more information, see Secure Access Concentrator and Control Center Deployment.
Secure Connector Deployment via Configuration File
The configuration for the Secure Connector is created centrally on the Control Center using SC templates to reduce the configuration overhead. The SC configuration file is then exported and copied to the Secure Connector via USB OTG or web interface. The Secure Connector then automatically connects to the Access Concentrator in the FSC Access Cluster assigned to it via the sca.conf. This allows the Secure Connector to connect in VPN operational mode and authenticate by the certificates included in the configuration file.
For more information, see FSC Deployment via FSC Configuration File.
Secure Connector Deployment via VPN Deployment Mode
If you do not have physical access to the device, configure the Secure Connector in the Control Center. Directly on the Secure Connector, configure the WAN connection and VPN so the Secure Connector can connect to the Access Concentrator in VPN deployment mode. No certificates are required because the Access Concentrator uses a passphrase to authenticate. Once connected, the Control Center immediately pushes the operational configuration to the Secure Connector and switches the VPN to operational mode.
For more information, see FSC Deployment via VPN Deployment Mode.