Barracuda Networks SSL VPN, Administrator'S Manual

Page: 46 / 124

46 Barracuda SSL VPN Administrator’s Guide
The Barracuda SSL VPN has 2 different Reverse Proxy Forwards:
Path-Based Reverse Proxy
Does it use the Barracuda SSL VPN Agent?
No. The communication link security is provided by the browser encryption and the appliance.
How it works
This type of forward does not modify the data stream. This proxy works by matching unique paths in
the request URI with the configured Web Forwards. For example, if you have a Web site that is
accessible from the URL http://example.com/blog you can configure the Reverse Proxy with the path
/blog so that all requests to the SSL VPN server URL https://sslvpn/blog are proxied to the destination
site.
Usage
Generally the best proxy type to use if possible. Suitable for Web applications that do not exist at the
root path of a Web server i.e. only works for Web sites that exist solely in subdirectories off the root
of a Web server. Therefore this type of proxy will only be suitable if all the paths used by the Web
application are known. If the Web site runs on the root of the Web server, i.e. http://example.com then
there are no defined paths to proxy so another method will have to be used.
NOTE: If the target site has links to other sites and those are selected, then those pages will not be
secured.
Host-Based Reverse Proxy
Does it use the Barracuda SSL VPN Agent?
No. The communication link security is provided by the browser encryption and the appliance.
How it works
Works in a similar way to Path Based Reverse Proxy, but is not restricted to subdirectories The
content is neither altered from the moment it leaves the client to the response that is received; the
appliance acts as a Reverse Proxy Server for the target client.
NOTE: A prerequisite of this web forward is that it requires its own DNS name in order to work.
Usage
Suitable for Web applications which use relative URLs and tend to be more complex than those for
replacement proxy.
NOTE: If the target site has links to other sites and those are selected, then those pages will not be
secured.
Replacement Proxy
Does it use the Barracuda SSL VPN Agent?
No. The communication link security is provided by the browser encryption and the appliance.