In the left menu, select TS Agent Authentication.Go to CONFIGURATION > Configuration Tree > Box > Infrastructure Services > Authentication Service.On the Barracuda CloudGen Firewall, enable and configure connections with the Barracuda TS Agent. You can find the default Host Firewall rules here: Default Host Firewall Rules. Verify that the Host Firewall rule BOX-AUTH-TSAGENT-SYNC-IN (TCP Port 5050) is present in the Host Firewall Inbound rule list ( CONFIGURATION > Configuration Tree > Box > Infrastructure Services > Host Firewall Rules).(Optional) Create SSL client certificates.For instructions, see How to Set Up the Barracuda Terminal Server Agent. Install the Barracuda TS Agent on the Microsoft Terminal Server(s).Depending on the firewall size, you may have to balance Terminal Server Agents (250 or more) to multiple firewalls. TS Agent authentication with automatic port mapping does NOT work for SMB sessions on TCP port 445 and 139. If no SSL certificates are configured, all incoming SSL connections from the server are allowed. You can use SSL client certificates to authenticate the remote TS Agent on the Terminal Server. The Barracuda TS Agent also writes a debug log that helps you monitor your Terminal Server and identify possible problems. Mapping information for users is sent only after connections are established. Connections with the Barracuda TS Agent are SSL encrypted. The firewall can now check the source port of a TCP or UDP packet from the Terminal Server and, with the port-user information from the TS Agent, determine the username and group context. Because the source IP address for all users on the terminal server is the same, the Barracuda TS Agent assigns each user a specific port range and sends this mapping information to the firewall. The Barracuda TS Agent is the connector between various Barracuda Networks products and Microsoft Terminal Servers to transparently monitor user authentication.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |