How to Enroll Devices
This article covers the device enrollment process for SecureEdge Access. Device enrollment invitations can be created via the SecureEdge Enrollment page.
Before You Begin
Create a Barracuda Cloud Control account. For more information, see Create a Barracuda Cloud Control Account.
Subscribe to Barracuda Networks for SecureEdge Access. Barracuda Networks offers a scalable, fully managed Software as a Service (SaaS) solution for SecureEdge Access, and provides globally distributed Points of Presence (PoPs) in various locations. For more information, see Understanding Points of Presence (PoPs) and Private Points of Presence (PPoPs). You can enroll users, groups, or devices based on your chosen SecureEdge Access plan. The available plans include DNS Access, Internet Access, Private Access, and Premium Access.
To use the users or groups from user directories (such as Microsoft Entra ID, LDAP, Google Workspace, Okta, SCIM, and Barracuda Cloud Control) for SecureEdge Access, you must first connect your SecureEdge Identity Management in order to synchronize users and groups. For more information, see Identity Management. Note: To select users or groups from user directories such as BCC-linked Microsoft Entra ID or the BCC-linked LDAP directory in SecureEdge Access, you must first connect your directory with Barracuda Cloud Control in order to synchronize users and groups. For more information, see LDAP Active Directory and Microsoft Entra ID and How to Connect Microsoft Entra ID with Barracuda Cloud Control.
Device enrollment allows a device to be enrolled for web filtering without requiring any user authentication.
Step 1. Create a Device Enrollment Invitation
Go to
Barracuda SecureEdge and log in with your existing Barracuda Cloud Control account.The chosen Tenant/Workspace is displayed in the top menu bar.
From the drop-down menu, select the workspace you want to enroll in.
In the left menu, click Access and select Enrollments.
The Enrollments page opens, allowing you to enroll a new user, group, or device.
To verify the availability of seats for your SecureEdge Access account, click Subscription seat usage.
The Subscription seat usage window opens, providing the following information:
The Subscription seat usage window monitors license seat assignment and usage within your SecureEdge Access subscription.
It provides detailed breakdowns by license, including total seats, seats assigned to users and devices, pending enrollments, and seats used in other workspaces. Note: When all seats for a license are used, new enrollments for that license are disabled.
To enroll a new device, click New Enrollment. You can choose between Users, Group, and Devices.
From the drop-down menu, select Devices.
The New Enrollment window opens. Specify values for the following:
Enrollment type – Enrollment type selected as Devices.
License and seats – Select the license type with available seats. You can choose between DNS Access or Internet Access . For example, in this case, select Internet Access.
For Devices enrollments, specify the Maximum Seats. For example, in this case, the Maximum Seats is 15.
Enrollment profile – Select the security level for enrolled devices. You can choose between the following: Managed, Unmanaged, and 3rd Party. Note: The IT administrator manages and customizes all these profile types as needed. Managed is the most restrictive, Unmanaged offers some flexibility, and 3rd Party is the least restrictive for BYOD scenarios.
Enrollment settings – Configure settings for the enrollment. Specify a value for the following:
Name – Add an enrollment name.
Click Create Enrollment.
The Enrollment Created page opens. You can choose a preferred option:
Copy <unmanaged> token – Use this token for access with your MDM solution.
Copy <unmanaged> link – Send this link directly to enroll your users.
Paste the enrollment link or token in a text file. Note: You will require this link in Step 2.
Click Close.
After creating the device enrollment invitation, the device appears in the Enrollments table. The Enrollments page displays the unmanaged device invitations created by the IT administrator to allow enrollment. You are now ready to proceed to Step 2.
(Optional ) Copy the Link or Copy the Token
If you must copy the enrollment link or token, proceed with the following steps:
On the Enrollments page, click the icon of three vertical dots to copy the enrollment link or token.
You have two options:
Copy <unmanaged> link – To copy the enrollment link, select Copy <unmanaged> link.
Copy <unmanaged> token – To copy the token, select Copy <unmanaged> token.
Step 2. Connect a Barracuda SecureEdge Access Agent
Download and install the Barracuda SecureEdge Access Agent.
Open the SecureEdge Access Agent.
The Enrollment is required page opens.
Paste the link retrieved from Step 1 in the space provided.
Click Enroll.
The Barracuda SecureEdge Access Agent displays, and the Enterprise Enrollment page opens.
Click Accept.
The Activity page opens and shows the status of your device.
You can see your device is enrolled with the selected workspace. For example, in this case, it is the Default workspace.
Click the Settings icon at the bottom of the SecureEdge Access Agent. Note: During the Establishing Connection time frame, you can view the progress bar in the Setup section.
Verify the Protection enabled status once the connection to your device is established.
You can see SecureEdge Access Agent is enrolled on your device. In addition, you can verify the device entry on the respective Access > Enrolled Devices page in the SecureEdge Manager.
Edit a Device Enrollment Invitation
Select the workspace you want to edit a device for.
Go to Access > Enrollments.
The Enrollments page opens. All enrollment invitations for your selected workspace are displayed.
Click the icon of three vertical dots next to the device invitation you want to edit.
Click Edit.
The Edit Enrollment window opens. Edit the value you are interested in. For example, if you have used all 15 seats and want to add more, you can change the number of seats allocated for that enrollment.
Click Save.
Remove a Device Enrollment Invitation
Select the workspace you want to remove a device for.
Go to Access > Enrollments.
The Enrollments page opens. All enrollment invitations for your selected workspace are displayed.
Click the icon of three vertical dots next to the device invitation you want to remove.
Click Delete
The Delete Enrollment window opens.
Click Delete.
(Optional) Filtering and Sorting Features
You can add filters to view specific users, groups, or devices on the page.
Click Filters.
The Filters window opens. Specify the values for the following:
Created timeframe – Select the desired time frame from the drop-down list. You can choose between Last 24 hours, 3 days, 7 days, Last 30 days, Last 3 months, Last 6 months, or Last year.
Seats available – Select the seats available from the drop-down list. You can choose between Seats available or No Seats available.
Select the criteria you wish to search for.
Click Apply. To reset the filter, click Clear all.
Sorting Features
Filter and sort to view specific users, groups, or devices on the Enrollments page. Select the criteria to sort by. The Enrollments table will sort according to your selection.
The Enrollment page automatically sorts by available seats, placing enrollments with available seats at the top.
(Optional) Bulk Delete Enrollments
You can delete a single enrollment or multiple enrollments at once.
To delete enrollments in bulk, select the Select all check box on the left, then click Delete Selected.
The Delete Enrollment window opens.
Click Delete.
Next Steps
Set up the ZTNA Policy that specifies the access requirements associated with the various resources that the Barracuda SecureEdge Access Agent can connect to.