It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda SSL VPN
Overview Documentation

This Product is End-of-Life and End-Of-Support

End-Of-Life and End-Of-Support on December 1st, 2020: All Barracuda SSL VPN sales will cease; neither new sales nor any renewals will be available. If you currently hold a maintenance and support contract, you will continue to receive our award-winning support and services until your contract expires. Please see the End-Of-Life definition as described in the End of Support and End of Life Information.

How to Configure ActiveSync for Microsoft Exchange Servers

  • Last updated on

If you are using Microsoft Exchange Server, your users can securely access their email, calendar, contacts and tasks from their mobile devices using Microsoft Exchange ActiveSync via the Barracuda SSL VPN. ActiveSync allows mobile users to securely connect to an Exchange server. As an added layer of security, you can use the Barracuda SSL VPN to authenticate ActiveSync requests and proxy all the traffic. The advantage of this deployment is that only the Barracuda SSL VPN will accept HTTPS traffic from the Internet.

 When used in combination with a Barracuda Spam and Virus Firewall  protecting the Exchange servers from direct external access.

ActiveSync.png

Before you begin

  • Make sure that you have a valid SSL certificate signed by a trusted root Certification Authority (CA) or a self-signed certificate. If you are using a self-signed certificate, you must import it to the local certificate store on all the client machines on which you want to use Outlook.
  • If required, open port 443 on your internal firewall so that the Barracuda SSL VPN can communicate with the Exchange Server.

Step 1. Configure the Barracuda SSL VPN 

Configure the Barracuda SSL VPN to allow Outlook Anywhere access (see Step 1. of  Best Practice - Protect your Exchange Server with the Barracuda SSL VPN).

Step 2. Configure Exchange Server 2013

For each Exchange server, configure the settings as described in Step 2. of Best Practice - Protect your Exchange Server with the Barracuda SSL VPN.

Step 3. Configure the client mobile device for ActiveSync

Follow the instructions below for the type of mobile device that you want to connect to the Barracuda SSL VPN.

Connecting an Android Mobile Device

To set up your Exchange ActiveSync account on your Android device, proceed as follows:

  1. On your Android device, start Settings and scroll to the Accounts section.
  2. Tap Add Account, then Corporate. Type in your email address and password and click Next.
    The mobile device attempts to retrieve the account information and does not succeed.
    The device prompts for further information.
  3. Type in your Active Directory domain name in front of your username so that it is in the format: domain\username 
  4. For Server, type in the SSL VPN hostname. e.g., sslvpn.example.com
  5. Verify Use secure connection (SSL) is selected. If you are using a self-signed certificate, select Accept all SSL certificates.
  6. Tap Next.
    The device will now prompt "The server <sslvpn hostname> requires that you allow it to remotely control some security features of your Android device. Do you want to finish setting up this account?"
  7. Tap OK.
  8. Configure the Account Options and tap Next.
  9. Tap Next.

You can now access your email using the Android Mail Application.

Connecting an Apple iOS device

Follow these steps to set up your Exchange ActiveSync account on your Apple iPhone, iOS device or iPod Touch:

  1. On your iOS device, tap Settings > Mail, Contacts, Calendars > Add Account... > Microsoft Exchange.
  2. In the window that appears, enter your Email, Username and Password, where Email and Username are your full email address (for example: somebody@example.com). Tap Next.
    The iOS device tries to verify the account, fails and prompts you to enter some extra details.
  3. Complete the following fields and then tap Next.
    • Server – Type in your company's Barracuda SSL VPN hostname (for example: mysslvpn.example.com).
    • Domain – Type in the Active Directory domain name (for example: example.com).
  4. This time the settings are verified. Select which items to synchronize between your account and your device and tap Save. 

You can now access your email by opening the Mail Application.

Special Case: Multiple user databases

Many customers only use one user database. However, If you are using multiple user databases, then you need a different hostname for each user database that you want to use with ActiveSync, except for the default user database.

As an example, if your Barracuda SSL VPN uses the hostname sslvpn.example.com, then you may choose something like ad1.sslvpn.example.com as a user database hostname. You will also need to create a publicly-available DNS entry that maps ad1.sslvpn.example.com to the IP address of the Barracuda SSL VPN.

You can tell if a user database is set as default by looking at ACCESS CONTROL > User Databases. The user databases that are not built-in have a More.. menu to the right hand side. If you click on that, and it displays an option to set this user database as default, then this is not the default database.

  1. Navigate to ACCESS CONTROL > User Databases. The User Databases section shows the built-in databases and the user databases that you have already configured. If there is an Edit option on the same row as the relevant user database, click it.
  2. In the User Database Details section, enter a hostname in the User Database Host field. This is normally a subdomain of your Barracuda SSL VPN hostname.
  3. Add an entry for this hostname in your external DNS servers so that it resolves to the public IP address of the Barracuda SSL VPN. 
  4. When connecting mobile devices to the Barracuda SSL VPN, use this new user database hostname as the server address.