We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda SSL VPN

How can I secure the ssladmin account on my Barracuda SSL VPN?

  • Type: Knowledgebase
  • Date changed: 7 years ago

Solution #00004322

 

Scope:

This solution applies to all Barracuda SSL VPNs.

 

Answer:

It is advisable that all users on the SSL VPN have a secure login procedure; the user that needs this most of all is the ssladmin account. The best method to increase the ssladmin account security is to create a high security login scheme that only the ssladmin will use.

 

To begin creating authentication schemes for ssladmin, login to the SSL VPN with the ssladmin account. The operating database will need to be changed to Super Users. You can do this by selecting the Super Users database from the dropdown menu at the top right of the page.

 

Go to Access Control > Authentication Schemes, create a new scheme and specify at least two authentication modules and assign it to the Everyone policy (in the Super Users database there is only one user and new users cannot be created). Now, increase the priority of the new scheme to the highest level. This is done from the More.. menu. Repeat this until the new scheme is at the top of the list. Each time Increase Priority is selected the scheme will move one place up the list.

 

When the scheme is set in the highest priority the details for logging in will need to be set. Create the appropriate credentials for the ssladmin to use with the new scheme. Once all credentials are set, test the credentials by logging off and attempting to login again with the new login details.

 

Assuming that the login completes successfully, the Password scheme in the Super Users database can be disabled (highly recommend NOT deleting it in the event that it needs to be re-enabled in the future).

 

Link to this page:

https://campus.barracuda.com/solution/50160000000HqOAAA0