User`s guide

Configuring Advanced Settings

■ Barracuda Spam Firewall User’s Guide

Implementing Single Sign-on

The ADVANCED-->Single Sign-On page lets you configure the Barracuda Spam Firewall to authorize

user accounts using an LDAP or Active Directory server. This feature is available in the Barracuda

Spam Firewall 400 and 600 models.

With single sign-on, users can automatically log into their quarantine interface or the administration

interface using their domain passwords instead of a password managed separately by the Barracuda

Spam Firewall.

The following table describes the fields on the ADVANCED-->Single Sign-On page.

Cluster System List Cluster System lists the other systems in this cluster.

Mode specifies whether a system is Standby or Active. Designate a server

as Standby if you want a spare system to switch to in the event another

system goes down. Only Active servers filter incoming messages.

You must manually switch a standby server to Active if you want the

standby server to begin filtering messages. The switchover does not

automatically occur when an active server fails.

Status displays if the system is up and running (green dot).

Local Host Map

Host Name /

IP Address

Map a local host name to an IP address for a system in the cluster. This

mapping results in a local override of DNS hostname-to-IP address

lookups.Click Add after specifying each new entry. This mapping is not

synchronized with other systems in the cluster.

Use the local host map feature in the following situations:

• There are clustered Barracuda Spam Firewalls on different private

networks and systems on the same private network must communicate

using the private IP address of the other systems while systems on

different networks must communicate using the public IP address of the

other systems.

• Different clustered Barracuda Spam Firewalls need to forward to different

destination mail servers. In this case, the Destination Server field on the

Domain configuration page could be "localmail" and each Barracuda

Spam Firewall in the cluster would have a different IP address assigned

to "localmail" in the Local Host Map field.

Field Description

username. This is used to support single sign on.

Local Realm Name The realm name as displayed for local authentication (where the password

is generated and stored on the Barracuda Spam Firewall).

Advanced Single Sign-on Configuration

Realm Name The name of the realm as displayed to the users in the Realm Selector as

well as in the Domain Settings for the administrator. This is a required field.

Field Description