Specifications

15
Deployment Scenarios
The following diagrams have been provided to show some basic deployments. A brief description of
some of the more major characteristics is also provided.
Non-DMZ!
The first diagram depicts an installation of the Barracuda SSL VPN behind a firewall. Typically all
port 443 (standard SSL port) traffic is routed through the firewall to the appliance. A proxy server
could easily be included by placing it on the Internet facing side of the appliance should it be required.
As the appliance simply sits behind the firewall all port 443 traffic passes through unchecked. This
being the case care should be taken to ensure that unwanted traffic is dealt with correctly.
Within the DMZ
In this instance the Barracuda SSL VPN sits within the DMZ. Access is made through the firewall
securely on port 443. Any access to resources on the trusted network requires another port to be
opened on the firewall. This allows for traffic to reach the resource as there is no direct connection for
the VPN to the internal network.