Deploying Microsoft ADFS with the Barracuda Load Balancer ADC

Download PDF

The Barracuda Load Balancer ADC allows you to scale Microsoft Active Directory Federation Services (ADFS) with ease. Improve performance and availability with the built-in intelligent load balancing and Global Server Load Balancing (GSLB) capabilities. Secure your deployment with SSL/TLS offload and high-level application security features.

Challenges

  • Ensuring availability and resilience of ADFS services
  • Deploying ADFS across geodispersed locations
  • Improving ADFS performance
  • Securing ADFS servers

Solution

  • Barracuda Load Balancer ADC
  • Included Global Server Load Balancing (GSLB), application security, access control integration (LDAP/AD, RADIUS) and SSO
  • Up to 15Gbps throughput
  • Physical and virtual form factors

Benefits

  • Clustering and high availability ensure continual ADFS availability
  • Global Server Load Balancing (GSLB) enables geo-dispersed deployments and disaster recovery
  • Reverse proxy features enable secure Internet access to ADFS services
  • Intelligent load-balancing ensures efficient resource usage
  • SSL/TLS offloading and application security features secure the deployment

Introduction

Microsoft Active Directory Federation Services (ADFS) is an Identity and Access solution that provides users seamless single sign-on access to various applications and services across organizations. A simple example of this would be logging into SalesForce using your organizations Active Directory credentials. When you log into SalesForce, ADFS authenticates your credentials against the organization’s internal Active Directory. The Active Directory system then provides a claim token to allow SalesForce access. ADFS extends this capability further by working with any claims-aware software that is connected to the system. ADFS proxy servers also allow users to login from outside the organization’s network, and administrators can configure advanced claims rules to perform granular access control to various parts of an application.

Deploy Microsoft ADFS with Confidence

With an increasingly mobile workforce, ADFS deployments are now a critical part of many organizations’ network infrastructures. The Barracuda Load Balancer ADC enables highly available ADFS deployments, improves the performance of the ADFS cluster, and secures the deployment. It also enables geo-dispersed deployments with the built-in Global Server Load Balancing (GSLB) features. The Barracuda Load Balancer ADC’s built-in SSL/TLS Offloading and Application Security features enable complete security against application attacks. This security is especially important for ADFS Proxy deployments since the proxy servers are directly accessible from the Internet for remote users.

In some situations, where advanced claims rules are not configured, the Barracuda Load Balancer ADC can also perform the Web Proxy role in the DMZ, eliminating the need for ADFS proxy servers and saving expenditure.

The Barracuda Load Balancer ADC also improves the performance of ADFS clusters. It’s built-in adaptive scheduling algorithm ensures that users logging in are directed to ADFS servers with lower load to ensure faster login times. Any ADFS server in the cluster that goes down is immediately removed from service, and login requests are redistributed across the other servers in the cluster, guaranteeing continued access to critical resources. The Barracuda Load Balancer ADC’s session persistence capabilities also ensure that users are not asked to re-authenticate themselves frequently.

Distributed ADFS deployments, including hybrid deployments, are often designed to provide business continuity and disaster recovery. The Barracuda Load Balancer ADC’s Global Server Load Balancing (GSLB) capabilities enable administrators to easily deploy geo-dispersed ADFS clusters. The GSLB capabilities redirect users to the nearest ADFS cluster for authentication, reducing load times. If an ADFS cluster goes down, the Barracuda Load Balancer ADC automatically switches users to the next nearest cluster, thus providing always-on availability.

The Barracuda Load Balancer ADC delivers reverse proxy capabilities for ADFS deployments. It also provides a secure SSL/TLS front-end to ensure that user sessions to the ADFS cluster are fully secured against MITM attacks. Application security features on the Barracuda Load Balancer ADC also secure the ADFS deployment against any web-based HTTP/S attacks and subtle application layer DDoS attacks. Put together, all these features enable you to deploy a highly secure, highly available and resilient ADFS deployment. To try the Barracuda Load Balancer ADC for free for 30 days, visit www.barracuda.com/ADC.

Application Delivery with Barracuda

Designed for today’s high-traffic data centers, the Barracuda Load Balancer ADC is a high-performance application delivery controller that combines application acceleration, availability, and control with advanced security capabilities. Deployed by thousands of organizations worldwide, the Barracuda Load Balancer ADC is a robust, proven solution that manages and secures billions of application transactions daily. It’s available as a multiport platform with fiber and copper network interfaces, as well as a virtual appliance.

To learn more about upgrading your Forefront TMG installation to Barracuda’s Application Delivery Controller solution, visit www.barracuda.com/ADC. Or call 1-408-342-5400 or 1-888-268-4772 (US & Canada) to request a free 30-day trial.

About Barracuda Networks, Inc.

Barracuda (NYSE: CUDA) simplifies IT with cloud-enabled solutions that empower customers to protect their networks, applications, and data, regardless of where they reside. These powerful, easy-to-use and affordable solutions are trusted by more than 150,000 organizations worldwide and are delivered in appliance, virtual appliance, cloud and hybrid deployments. Barracuda’s customer-centric business model focuses on delivering high-value, subscription-based IT solutions that provide end-to-end network and data security. For additional information, please visit www.barracuda.com.