Direct Access DMZ Deployment
The Barracuda SSL VPN is deployed behind the firewall. Only one port (443) has to be opened up by the firewall and forwarded to the SSL VPN.
You have direct access to all services (authentication, file, web, etc.) in the intranet without further configuration.
Multilayer Firewall DMZ Deployment
The Barracuda SSL VPN is deployed in a DMZ behind the corporate
before the internal network firewall.
on the
firewall but
All access to services
internal network requires ports to be opened on the internal firewall. By deploying the Barracuda SSL VPN between the two firewalls, another
security layer is added. It is also possible to install the Server Agent on a computer the internal network, which initiates an SSL tunnel on port
in
443 from the inside of the network so you can limit the ports that you must open on the internal firewall.
Isolated Deployment
The Barracuda SSL VPN is deployed and isolated from the rest of the network. All resources are located in networks which are not directly
accessible by the Barracuda SSL VPN. Server Agents inside the networks initiate tunnels to the SSL VPN and act as proxies for the local
resources. This deployment minimizes security implications caused by opening various ports on the firewalls to access the resources located
behind them.
In this Section