Barracuda CloudGen WAN offers point-to-site capabilities. Point-to-site connections are used to connect an individual device, such as a laptop, to the company network. The VPN client running on the client connects to the VPN service of Barracuda CloudGen WAN. Site authentication allows devices physically located within the network to authenticate against the Barracuda CloudGen WAN service to enforce Security Policies.
Before You Begin
- If you want to use your Azure Active Directory users and groups for User Connectivity, Site Authentication, and Security Policies, you must first connect your Azure Active Directory with Barracuda Cloud Control in order to synchronize users and groups.
- If you do not synchronize Azure Active Directory with Barracuda Cloud Control, you must create a user account in Barracuda Cloud Control for each of your users using User Connectivity. For more information, see How to Connect Your Azure Active Directory with Barracuda Cloud Control.
- Create a SAML endpoint in Microsoft Azure. For more information, see How to Create a SAML Endpoint in Microsoft Azure and Basic User Connectivity & Personal Security Configuration.
- If you are using a firewall, you must allow certain Barracuda and Microsoft domains before you continue. For more information, see List of Required Barracuda Authentication & Discovery Services for User Connectivity & Personal Security.
Step 1. Enable / Disable User Connectivity and Site Authentication
For more information on the configuration, see Step 2 of How to Create a SAML Endpoint in Microsoft Azure and Basic User Connectivity & Personal Security Configuration.
- Go to https://cloudgenwan.barracudanetworks.com/ and log in with your existing Barracuda Cloud Control account.
- Click USERS.
- The Users window opens. Specify values for the following:
- Enable User Connectivity – Click to enable/disable.
- Enable Site Authentication – Click to enable/disable.
- Click Save.
Step 2. User Enrollment
Go to https://cloudgenwan.barracudanetworks.com/ and log in with your existing Barracuda Cloud Control account.
Click USERS.
Copy the enrollment link and send it to the user, or click on EMAIL INVITES.
The Send Enrollment Invitations window opens.
To – Enter an email address, or select user/groups from the drop-down menu. Note: To select user or groups, you must have enable synchronization between Cloud Control and your Azure Active Directory. For more information, see How to Connect Your Azure Active Directory with Barracuda Cloud Control.
Subject – Keep the subject or enter your own subject.
Body – Keep the text or enter your own text.
- Click SEND.
Step 3. Connect a Client
- Install the VPN client. Open the link for enrollment retrieved in Step 2 User Enrollment and download the VPN client.
- For more information on the installation on a Windows client, see Installing the Barracuda Network Access/VPN Client for Windows.
- For more information on the installation on a Mac client, see Installing the Barracuda VPN Client for macOS.
- Click Enroll now.
- The Barracuda VPN Client opens and the user must log in with the credentials that were either synchronized from Azure Active Directory or created by the admin in Barracuda Cloud Control.
- Click NEXT.
- Enter your password and click SIGN IN.
- The profile is imported in the VPN client and opens automatically.
- Select the Virtual WAN and hub you want to connect to and click OK.
- The new profile is imported and appears in the list.
- Follow this guide to establish a connection: How to Establish a VPN Connection Using Barracuda VPN Client for Windows or How to Establish a VPN Connection Using Barracuda VPN Client for macOS.
- All available Barracuda CloudGen WAN VPN endpoints are in the Barracuda VPN client.
Step 4. (Optional) Download the VPN Profile from the CloudGen WAN Gateway or Site
Note: When importing the VPN profile, you can either import a Site VPN profile or a Gateway VPN profile. Barracuda CloudGen WAN will automatically add all available VPN endpoints to connect to in your Barracuda VPN client. 
- Go to https://cloudgenwan.barracudanetworks.com/ and log in with your existing Barracuda Cloud Control account.
- Click GATEWAYS.
- Selected the select the workspace containing your gateway.
- Click on the download icon to download the client VPN configuration.
- When importing the downloaded VPN configuration file, make sure to select CloudGen WAN. For more information, see How to Establish a VPN Connection Using Barracuda VPN Client for Windows or How to Establish a VPN Connection Using Barracuda VPN Client for macOS.
Further Information
- For more information on enabling User Connectivity via a site, see How to Enable User Connectivity on a Site.
- For more information on the VPN client, see VPN Client & Network Access Client.
- For more information on importing VPN profiles, see How to Import a *.vpn File into the VPN Client.
- For more information on configuring the VPN client, see How to Configure the Barracuda VPN Client for Windows and How to Configure the Barracuda VPN Client for macOS.
- For more information on establishing VPN connections, see How to Establish a VPN Connection Using Barracuda VPN Client for Windows and How to Establish a VPN Connection Using Barracuda VPN Client for macOS.