It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda NextGen Firewall X
Overview Documentation Materials

This Product is End-of-Life and End-Of-Support

End-Of-Life and End-Of-Support on December 1st, 2020: All Barracuda Firewall X-Series sales will cease; neither new sales nor any renewals will be available. If you currently hold a maintenance and support contract, you will continue to receive our award-winning support and services until your contract expires. Please see the End-Of-Life definition as described in the End of Support and End of Life Information.

How to Configure TS Agent Authentication

  • Last updated on

The Barracuda Terminal Server Agent enables the Barracuda NextGen Firewall X-Series to identify network users on a Microsoft Terminal Server. The TS Agent must be installed on the Microsoft Terminal Server. On the X-Series Firewall, configure TS Agent authentication and add the management IP address to the TS Agent on the Microsoft Terminal Server. The TS Agent then sends authentication information to the X-Series Firewall over an optionally SSL-encrypted connection. The Barracuda TS Agent also writes a debug log that helps you monitor your Terminal Server and identify possible problems.

Barracuda TS Agent Components

The Barracuda TS Agent comprises the following:

  • TSAgentDrv – Windows Filtering Platform driver. TSAgentDrv intercepts the network traffic and assigns the specific source port number.
  • TSAgentSvc – Service that communicates with the TSAgentDrv driver and the X-Series Firewall. It automatically starts on system start and recovers when terminated unexpectedly.
  • TSAgentConfig – Configuration utility. TSAgentConfig also shows the current debug log and helps identify problems.

Before You Begin

  • Download and install the Barracuda TS Agent on the Microsoft Terminal Servers. The TS Agent can be downloaded directly from the X-Series Firewall:
    1. Go to the USERS > External Authentication page.
    2. Click the TS Agent tab.
    3. Click Download TS Agent.
    For more information, see Barracuda Terminal Server Agent.
  • (Optional) Use SSL certificates for authentication.

Configure TS Agent Authentication

On the X-Series Firewall, enter the IP address of the Terminal Server running the Barracuda TS Agent. The TS Agent must be configured to allow connections to the management IP address of the X-Series Firewall.

  1. Go to the USERS > External Authentication page.
  2. Click the TS Agent tab.
  3. Set Enable Terminal Server Agent to Yes.
  4. Enter the IP address for the Terminal Server running the TS Agent and click + .

ts_ip_67.png

The X-Series Firewall will now receive authentication information from the TS Agent on the Microsoft Terminal Server.

Use Custom SSL Certificates

If you enable SSL, the connection between the X-Series Firewall and the TS Agent is SSL encrypted. By uploading your own SSL certificates to the TS Agent and X-Series Firewall, the connection will only be established if the SSL certificate is valid.

If the TS Agent is configured to use SSL, an SSL-encrypted connection will be established, even if the Use SSL option is disabled on the X-Series Firewall.

  1. Go to the USERS > External Authentication page.
  2. Click the TS Agent tab.
  3. Click Show Advanced Options.
  4. Enable Use SSL.

  5. Enter the Subject Alternative Name of the SSL client certificate.

  6. Upload the SSL client certificate.

  7. Click Save.

The X-Series Firewall will now use SSL and verify the SSL certificate when connecting to the TS Agent.