Control Center Access for End Users

If an end user wants access to the Control Center, a local account will be made. End users don’t get Onelogin accounts but get a local Control Center account.

Because of this, end users are also not able to build a Client to site VPN tunnel to the Control Center.

Prerequisites#

• Root login of the Barracuda Firewall
• Barracuda Firewall Admin >= 8.2.1
• Access to the Barracuda Control Center

All software can be downloaded from the following link: https://dlportal.barracudanetworks.com/

Access Control Center through Remote Management Tunnel#

The following firewall rule will give you the possibility to reach the Control Center through the Remote Management Tunnel of the firewall. This gives you access to the Control Center without having to setup a client to site VPN to the Control Center itself.

For this we will match the internal traffic: Private IPv4 addresses and the CC configuration services object. The destination will be the predefined “Control Center” object.

The main part of this rule is the Connection Object, this will be the key point to route the traffic through the Remote Management Tunnel. For this the Connection Object has to be set to NAT on the interface tap3, which is the interface linked to the VIP and Remote Management Tunnel.