How to Configure Disable Agent by Location in SecureEdge

The Disable Agent by Location feature automatically disables the Barracuda SecureEdge Access Agent when a device is connected to a trusted network identified by configured DNS locations. This enables organizations to apply a lighter security posture for users working from trusted environments, such as corporate offices, without requiring manual intervention. When the device leaves the trusted location, the agent automatically re-enables. Users can also manually enable the tunnel while the agent remains disabled.

• You must have at least a valid Barracuda SecureEdge DNS Access subscription.

• At least one DNS Location must be configured. Go to Infrastructure > DNS Locations to create one before completing the steps below.

• For the Disable Agent by Location feature to work, you must install SecureEdge Access Agent version 3.1.0 or higher.

Before enabling Disable Agent by Location, confirm that the network you want to treat as a trusted location is defined as a DNS Location.

1. Go to https://se.barracudanetworks.com and log in with your existing Barracuda Cloud Control account.

2. The chosen Tenant/Workspace is displayed in the top menu bar. From the drop-down menu, select the workspace you want to configure this feature for.

3. Go to Infrastructure and select DNS Locations.

4. The DNS Locations page opens and lists existing locations with their Name, Description, Region, Type, IP Addresses, and DNS Proxy addresses.

5. If the required location does not yet exist, click Add and configure a Static DNS Location. For location, set Type to Static and enter the network's public IP address. For more information, see How to Add a DNS Location in SecureEdge.
   
   

   Open

   

    

After the configuration is complete, you can see the location listed in the table with its IP addresses and DNS Proxy addresses.

1. Go to Access > Device Profiles.

2. The Device Profiles page opens. Click the three vertical dots icon (⋮) for the profile you want to configure, then select Edit profile.
   
   

   Open

   

3. Scroll down to the Security Settings section.

4. Specify value for the following:

   • Disable Agent by Location – Click to enable.

     • When enabled, the following sub-options appear:

       • All Locations – Toggle on to automatically apply this setting to every configured DNS Location. Leave it off to select specific locations.

       • Select Available Locations – When All Locations is off, use this dropdown to choose one or more DNS Locations. Each added location appears in the list below with its name and IP address. Click the delete icon next to a location to remove it.
         For example, select the location you specified in Step 1.
         
         

         Open

         

5. Click Save Profile. A confirmation dialog appears, summarizing:

   • Configurations - lists each Security Setting and whether it is enabled or disabled.

   • Users and devices affected – shows the count of users and devices that will receive the updated policy.

   • DNS Locations – lists the locations selected for this feature.
     
     

     Open

     

6. Review the summary and click Save profile to apply the changes.

After the configuration is complete, you can see that the Disable Agent by Location toggle is shown as enabled in the Security Settings section of the profile, and the selected DNS Locations are listed below.

1. Check your internet connection and ensure your public network IP is configured as described in Step 1.

2. Open your SecureEdge Access Agent app and check enrollment details, such as user email, to confirm device protection is disabled.
   Note that this occurs only if they are in the configured location

   Open

   

Once the profile is saved:

• When a device connects to a network whose public IP matches a configured DNS Location, the Barracuda SecureEdge Access Agent automatically disables. The agent tray shows that protection is no longer active.
  
  

  Open

  

   

• When the device connects to any other network, the agent re-enables and the tray shows Protection Enabled – Your device is protected.

• Users can still manually enable the tunnel from the agent while at the registered location if they need access to company resources.

To change which locations are selected, or to disable the feature:

1. Go to Access > Device Profiles.

2. Click the row menu (⋮) on the profile and select the edit action.

3. In the Edit Profile panel, scroll to Security Settings > Disable Agent by Location.

4. Adjust the toggle or location list as needed, then click Save Profile and confirm.

To turn off this feature entirely for a profile:

1. Go to Access > Device Profiles.

2. Open the Edit Profile panel for the relevant profile.

3. Scroll to Disable Agent by Location and turn the toggle off.

4. Click Save Profile and confirm.