Create proxied web apps to allow SSL VPN users to access web-based internal applications. There are predefined web app types for frequently used services, such as Outlook Web Access and SharePoint servers as well as generic settings that allow you full control over how the web content is rewritten. Web apps can also be customized using user attributes. User attributes are defined by the administrator and filled in by the end user in the mobile or desktop portal. They allow for personalized URLs or single sign-on for web apps.
Configure a generic web app
- Go to CONFIGURATION > Configuration Tree > Box > Virtual Servers > your virtual server > Assigned Services > VPN > SSL-VPN.
- In the left menu, select Web Apps.
- Click Lock.
- In the Proxied Web Apps section, click + to add a web app to the list.
Enter a Name for the web app and click OK. The Proxied Web Apps window opens.
Select Generic from the Web Apps Template drop-down list.
- Enter the Visible Name. This is the name used in the desktop and mobile portal for this web app.
- Enter the Root URL of the web server in the following format: Protocol type (
https://) followed by the FQDN or IP address of the web server. E.g.,
Enter the Launch Path in the following format: "/" followed by the path and file name you want to request when starting the web app. Hash characters (#) in the launch path must be replaced by
[hash]. You can also include user or session attributes in the launch URL. For more information on attributes, see How to Use and Create Attributes.
- (optional) Check Must be Healthy if the Windows client must pass a health check before launching the web app. This setting requires a configured access monitor. For more information, see How to Configure the Barracuda Access Monitor.
- (optional) To restrict access to the web app by user group, replace the * entry in the Allowed User Groups list. Click + to add new user groups.
- (optional) Click + to enter the additional web servers in the Allowed Hosts list. Add all servers that must be proxied by the SSL VPN when accessing this web app.
- (optional) Click Ex/Import to upload a custom icon.
- To configure Authentication (single sign-on) for this web app, see How to Configure Single Sign On for Proxied Web Apps.
- Click OK.
- Click Send Changes and Activate.
For some web apps, more granular control over how the content is rewritten may be required. In the left menu, click on Advanced View to set these parameters.
- Custom Replacements – Rewrite a part of the webpage on the fly. Define a matching and corresponding replacement pattern and assign a weight to each. The lowest weight is processed first.
- Custom Headers – Define rules to replace or remove header values for either requests, responses, or both.
- Mobile Portal Bar Exemptions – The mobile portal bar is not displayed for all paths you enter in this list. This is useful for web applications using frames.