Barracuda Networks VERSION SP4 User Manuals

Table of Contents

• Introduction

  6
  • 1.1 Endpoint Security and Network Access Control

    6
  • 1.2 Introduction to Barracuda NG Network Access Client

    6
    • 1.2.1 What can Barracuda NG Network Access Client be used for?

      8
    • 1.2.2 Licensing Aspects

      10
    • 1.2.3 Policy Matching Procedure

      10
  • 1.3 What is a Policy Rule Set?

    10
  • 1.4 Health Matching

    14
    • 1.4.1 Health State "Untrusted"

      15
    • 1.4.2 Health State "Probation"

      15
    • 1.4.3 Health State "Healthy"

      15
    • 1.4.4 Health State "Unhealthy"

      15
    • 1.4.5 Health State Requirements

      16
  • 1.5 Endpoint Security Policy Introduction Practices (Analyse, Enforce, Monitor)

    17
  • 1.6 The Border Patrol

    17
• Server Config – Access Control Service

  19
  • 2.1 General

    19
  • 2.2 Access Control Service Settings

    19
    • 2.2.1 System Health Validator

      19
    • 2.2.2 Remediation Service

      21
    • 2.2.3 Trustzone-Border

      21
    • 2.2.4 802.1X

      21
    • 2.2.5 Advanced

      22
    • 2.2.6 General

      23
  • 2.3 Access Control Objects

    23
  • 2.4 Access Control Service Trustzone

    27
    • 2.4.1 Rules

      29
      • 2.4.2 Identity Matching - Basic

        29
      • 2.4.3 Identity Matching - Advanced

        32
      • 2.4.4 Required Health State - Basic

        33
      • 2.4.5 Required Health State - Advanced

        36
      • 2.4.6 Policy Assignments

        38
    • 2.4.7 Settings

      39
    • 2.4.8 Support Chart

      42
• Server Config – Personal Firewall Rules

  43
  • 3.1 General

    43
  • 3.2 <Rule Set Name> Tab

    43
    • 3.2.1 Rules Incoming / Outgoing

      45
      • 3.2.2 Context Menu

        45
      • 3.2.3 Button Bar

        46
      • 3.2.4 Rule Configuration

        47
    • 3.2.5 Tester

      49
    • 3.2.6 Test Report

      50
    • 3.2.7 Options

      51
  • 3.3 Adapters

    53
  • 3.4 User Objects

    56
  • 3.5 Net Objects

    57
  • 3.6 Service Objects

    60
  • 3.7 Application Objects

    61
• Operating & Monitoring Barracuda NG NAC

  64
  • 4.1 Box – Monitoring and Real-time Information

    64
    • 4.1.1 Available Columns

      64
    • 4.1.2 Filtering

      65
    • 4.1.3 Context Menus

      66
    • 4.1.4 Status Tab

      68
    • 4.1.5 Status VPN Tab

      69
    • 4.1.6 Access Tab

      69
    • 4.1.7 Quarantine Tab

      69
• Client Installation

  70
  • 5.1 Complete Installation

    71
  • 5.2 Custom Installation

    72
  • 5.3 Unattended Setup

    72
  • 5.4 Customer Setup

    75
    • 5.4.1 customer.inf

      75
      • 5.4.2 Section "1. Customer Area" / [PhionCustomerCopyFiles]

        76
      • 5.4.3 Section "2. Customer Area" / [CustomerReg]

        77
      • 5.4.4 Section "3. Customer Area" / [SourceDisksFiles]

        80
    • 5.4.5 silent.cmd

      80
  • 5.5 System Restore

    82
• Update or Migration

  83
  • 6.1 General

    83
• Uninstall

  84
  • 7.1 General

    84
  • 7.2 Procedure

    84
• VPN Configuration

  85
  • 8.1 Overview

    85
  • 8.2 Facts and Figures

    85
• Barracuda NG Personal Firewall

  89
  • 9.1 Overview

    89
    • 9.1.1 Integration within Windows 7

      90
  • 9.2 Rule Set Selection

    91
  • 9.3 User Interface

    92
  • 9.4 General Firewall Settings and Tasks (Menu Bar)

    93
    • 9.4.1 Firewall Menu

      93
    • 9.4.2 View Menu

      95
    • 9.4.3 Security Mode Menu

      96
  • 9.5 Load Display

    96
  • 9.6 NG Control Center - Monitoring Firewall Activities

    97
    • 9.6.1 Summary

      97
    • 9.6.2 Events

      98
    • 9.6.3 History

      99
      • 9.6.4 Listing and Context Menu

        99
      • 9.6.5 History Selection Tab

        100
      • 9.6.6 History Filter Tab

        101
    • 9.6.7 Live Activity

      102
      • 9.6.8 Listing and Context Menu

        103
      • 9.6.9 Filter Conditions

        104
  • 9.7 Current State - Setting the Security Mode

    105
  • 9.8 Configuration

    105
    • 9.8.1 General

      105
    • 9.8.2 Rules

      106
      • 9.8.3 Context Menu

        106
      • 9.8.4 Button Bar

        107
      • 9.8.5 Rule Configuration

        107
    • 9.8.6 Adapters

      110
    • 9.8.7 Networks

      112
    • 9.8.8 Services

      114
    • 9.8.9 Applications

      116
    • 9.8.10 Users

      119
    • 9.8.11 Rule Tester

      120
    • 9.8.12 Test Reports

      121
  • 9.9 Administration - Firewall Settings Wizard

    122
    • 9.9.1 Automatic Adapter Configuration

      123
    • 9.9.2 Automatic Rule Configuration

      124
• VPN Component Configuration

  126
  • 10.1 Create a New Profile Using the Profile Wizard

    126
  • 10.2 Configure a New Profile Manually

    129
    • 10.2.1 Functional Elements of the Barracuda NG Network Access Client’s System Tray Icon

      132
    • 10.2.2 The Barracuda NG VPN Client’s Menu Bar

      133
  • 10.3 Connection Dialog

    134
  • 10.4 Status Dialog

    136
  • 10.5 Message Dialog

    138
  • 10.6 Barracuda Networks Control / Preferences Dialog

    139
    • 10.6.1 VPN Profiles Configuration Window

      139
    • 10.6.2 Certification Authorities Configuration Window

      140
    • 10.6.3 Advanced

      141
    • 10.6.4 Connection Entries Tab

      143
    • 10.6.5 Barracuda Authentication

      144
      • 10.6.6 X509 Authentication

        144
      • 10.6.7 User / Password

        145
    • 10.6.8 Advanced Settings Tab

      145
    • 10.6.9 Adaptation of Profile Creation using an .ini file (Barracuda NG Authentication only)

      148
  • 10.7 Log Window

    149
• Barracuda NG Access Monitor

  151
  • 11.1 Overview

    151
    • 11.1.1 Access Monitor

      151
    • 11.1.2 Port Security

      151
  • 11.2 Monitoring

    152
    • 11.2.1 Health Agent

      152
      • 11.2.2 Advanced Status information

        154
      • 11.2.3 Service Status

        154
      • 11.2.4 Communication Status

        155
      • 11.2.5 Connection Errors

        155
    • 11.2.6 802.1X Authentication - Port Security

      158
      • 11.2.7 Network Interfaces

        158
      • 11.2.8 Advanced Status Information

        159
      • 11.2.9 EAP Tracer

        160
  • 11.3 Configuration

    161
    • 11.3.1 Health Agent Connectivity

      162
      • 11.3.2 Access Control Server IPs from Registry

        162
      • 11.3.3 Access Control Server IPs from DHCP

        162
      • 11.3.4 ICMP Connectivity Checking

        163
      • 11.3.5 Offline Check

        163
    • 11.3.6 Health Agent Authentication

      164
      • 11.3.7 Use Basic Authentication

        164
      • 11.3.8 Use NTLM Authentication

        164
    • 11.3.9 802.1X Settings

      165
      • 11.3.10 IEEE 802.1X Authentication

        165
      • 11.3.11 IEEE 802.1X DHCP Renew

        165
      • 11.3.12 Allow Emergency Network Adapter Repair

        165
      • 11.3.13 Capture 802.1X Traffic (EAP)

        166
    • 11.3.14 Log Settings

      167
      • 11.3.15 Barracuda NG Health Agent Logging

        167
      • 11.3.16 Barracuda NG Network Access Client Logging

        167
  • 11.4 Log Files

    167
• Pre-Connector and Remote VPN

  169
  • 12.1 General

    169
  • 12.2 VPN Connector

    169
    • 12.2.1 Creating a Connector

      170
    • 12.2.2 Connecting And Disconnecting using the Barracuda NG VPN Client

      171
    • 12.2.3 Remote Domain Logon (Pre-Logon)

      171
  • 12.3 Remote VPN (rvpn)

    171
  • 12.4 Connection Procedure

    172
• Example Configuration

  174
  • 13.1 Introduce Access Control Objects

    175
  • 13.2 Personal Firewall Rule Set

    175
  • 13.3 Introduce an Access Control Service Trustzone

    176
  • 13.4 Configure an Access Control Service Trustzone

    178
  • 13.5 Configure Forwarding Firewall Rule Set

    183
• 802.1X – Technical Guideline

  185
  • 14.1 Overview

    185
  • 14.2 Status Monitoring

    186
    • 14.2.1 EAP Packet Tracer

      186
    • 14.2.2 Using the Barracuda NG Access Monitor for Analysis

      187
    • 14.2.3 Log Files on the Client Computer

      187
    • 14.2.4 Switch Web Interface

      188
    • 14.2.5 Switch Console Interface

      190
  • 14.3 Authentication

    190
    • 14.3.1 Notes

      190
    • 14.3.2 Operational Sequence

      191
      • 14.3.3 Startup

        191
      • 14.3.4 Runtime

        191
      • 14.3.5 Shutdown

        191
    • 14.3.6 Start up

      191
    • 14.3.7 Runtime

      194
      • 14.3.8 Re-authentication by the client service

        195
      • 14.3.9 Periodic client re-authentication by the switch

        195
      • 14.3.10 Manually re-authenticating using the command line

        196
      • 14.3.11 Authentication Message Exchange

        196
      • 14.3.12 VLAN Assignment

        197
      • 14.3.13 DHCP

        198
      • 14.3.14 ICMP Connectivity Checking

        199
      • 14.3.15 Resetting the 802.1X Authentication process

        199
    • 14.3.16 Shutdown

      200
      • 14.3.17 Operating System Shutdown

        200
      • 14.3.18 Operating System Logoff

        200
      • 14.3.19 Manual Logoff

        200
  • 14.4 Addendum

    201
    • 14.4.1 Packets

      201
    • 14.4.2 WPA Supplicant Log File Identifiers

      201
    • 14.4.3 Engineering Environment

      205
    • 14.4.4 Known Issues using Cisco Catalyst 3750-E Switch

      205
• Appendix

  207
  • 15.1 customer.inf File Template

    207
  • 15.2 VPN Profile Registry Keys

    211
  • 15.3 Profile Registry Keys

    213
  • 15.4 FAQs

    213
  • 15.5 Configuration Parameters

    215
  • 15.6 Parameter Lists

    219
  • 15.7 Figures

    221
• Warranty and Software License Agreement

  224
  • 0.1 Barracuda Networks Limited Hardware Warranty

    224
  • 0.2 Barracuda Networks Software License Agreement

    224
  • 0.3 Barracuda Networks Software License Agreement Appendix

    227