Introduction to Barracuda SSL VPN by yaofenjin

VIEWS: 20 PAGES: 12

									Barracuda SSL VPN
Introduction to the Barracuda SSL VPN
• Remote access for USERS
  (Traditional IPSec VPNs connect SITES)
• Works with any firewall
• Full-featured, scalable SSL VPN
• Familiar Barracuda Networks interface / ease of use
• Economical – no per user fees
Traditional Remote Access Challenges
• Market still dominated by “IP VPN”
   – PPTP built into Windows
   – IPSec offered with many firewalls
• IP VPN fraught with problems
   – IP address conflicts between networks
   – Double-NAT, GRE ports, and VPN Passthrough
   – Requirement for “fat client” software that is OS dependent and that can
     create compatibility issues with other software
   – Often supported only on dedicated company laptops to specific users
• After getting an IP, the rest is left to the users
   – Need to educate users on what is available to them over VPN

      Impact: IP VPN is one of biggest sources of IT help desk expenses
Augment IPSec with SSL VPN
Traditional VPN
•   Site-to-site
•   Some users on
    dedicated company
    laptops
•   Generally limited to
    sales or field
    technicians

SSL VPN
•  End user portal
•  Enables work from
   home during disasters
•  Can be used securely
   from public kiosks,
   home PCs and personal
   laptops
Barracuda SSL VPN Benefits


       POWERFUL
                              SECURE
       REMOTE ACCESS




         EASY TO USE         AFFORDABLE
Barracuda SSL VPN Benefits

POWERFUL REMOTE ACCESS
       POWERFUL
                                             SECURE
       REMOTE ACCESS
                  • Intranet Web sites

                     • Network file shares

                     • Remote Desktop, VNC, Citrix

                   •
         EASY TO USE Other client / server applications
                                           AFFORDABLE
Barracuda SSL VPN Benefits

SECURE
         POWERFUL
                                              into
                  • Uses SSL encryption built SECURE
         REMOTE ACCESS
                    modern browsers
                    • Anti-virus scanning of uploaded files
                    • Granular access policy
                    • Client access controls
                   • Cache cleaning
           EASY TO USE                         AFFORDABLE
                    • Supports LDAP, RADIUS, and
                      multifactor authentication
Barracuda SSL VPN Benefits

EASY TO USE
       POWERFUL
                                        SECURE
       REMOTE ACCESS any Java-enabled Web browser
           • Works with

              • End user portal to display available resources

           • Single sign-on to Web, RDP, and other
             applications
         EASY TO USE                            AFFORDABLE
           • Installable client for use with legacy applications
Barracuda SSL VPN Benefits

AFFORDABLE
       POWERFUL
                                        SECURE
       REMOTE ACCESS

                       • No per user fees




         EASY TO USE                  AFFORDABLE
Deployment Options
 • Single unit on LAN
   – Route incoming connections to firewall on port 443 directly to the Barracuda
     SSL VPN
   – Simple firewall, port forwarding and NAT rules




 • Load balanced clusters
   – Typically, behind either a Layer 4 or Layer 7 load balancer



                                   Load Balancer
                                                   Clustered Barracuda
                                                        SSL VPNs
Model Comparison
Feature                              180   280   380   480   680
Maximum number of concurrent users   15    25    50    100   500
LDAP and Active Directory Support                        
Network Connector / VPN Agent                            
Web Forwarding                                           
Network File Access                                      
Remote Desktop                                           
Antivirus                                                
Barracuda SSL VPN Server Agent                             
Multiple User Realms                                       
RADIUS Authentication                                      
Hardware Token Support                                     
Syslog Logging                                              
SNMP                                                        
Summary
          • Opportunity to improve
            access for end users
          • Enable access from home
            PC’s and personal laptops
          • Provide a consistent
            interface even if you change
            network firewalls
          • Plan for disasters and
            enable employees to work
            remotely

								
To top