Edit… button. If required, clear the Access Control Server IP addresses, which are received through DHCP, with the button Clear Policy IPs.

Fig. 11–12Access Control Server IP addresses, received by DHCP.

11.3.4ICMP Connectivity Checking

As an advanced feature, the Barracuda NG Access Monitor is able to determine the connectivity to the Access Control Server using ICMP packets. If this option is enabled the Barracuda NG Access Monitor will send an ICMP packet to the Access Control Server, before connecting and starting health evaluation. If the ICMP packet sent, returns successfully the Barracuda NG Access Monitor will connect to the Access Control Server and start health evaluation. When this option is disabled, the Barracuda NG Access Monitor will start immediately connecting to the Access Control Server, instead of checking for connectivity first.

It is highly recommended to enable this feature when connecting to the Access Control Server through a VPN connection; otherwise connectivity may not be as satisfying as expected.

When ICMP Connectivity checking is enabled, the NG Firewall must be configured to pass through ICMP packets, otherwise the Barracuda NG Access Monitor will not connect to the Access Control Server.

To edit this option manually, modify the following registry key:

Table 11–6Registry entry for ICMP connectivity

Item

Description

 

 

Path

HKEY_USERS\.Default\Software\phion\phionha\settings

 

 

Key

ICMPProbing

 

 

Value

(Default=1)

 

0

- disabled

 

1

- enabled

 

 

 

11.3.5Offline Check

Allows to disable the Health Agent if no network connection is active. This prevents the local firewall from unwantedly entering quarantine mode. The default and recommended value is Yes.

161 Barracuda NG Network Access Client - Administrator’s Guide

Page 163
Image 163
Barracuda Networks VERSION SP4 manual Key, Value