Barracuda Cloud Control now includes multi-factor authentication

The Barracuda Cloud Control team is pleased to announce that multi-factor authentication is now available as an option in BCC.

Barracuda Cloud Control is the management interface that allows you to manage your Barracuda infrastructure from a single browser window. Remember, Barracuda Cloud Control is your management interface for Barracuda Backup, Barracuda Web Security, Barracuda Email Security Service, and Barracuda Appliance Control. With multi-factor authentication available as an option, administrators can increase the security on BCC and the Barracuda infrastructure.

Let's talk about multi-factor authentication for a bit. Multi-factor authentication is known by a handful of common names, such as MFA, two-factor authentication, two-step verification, 2FA, and so on. It's a process that adds an additional layer of security on top of the normal user name & password set of credentials. Multi-factor authentication usually requires two or more of the following:

• Something only you know, such as a user name & password, PIN (think ATM card), or an authentication code.
• Something only you have, such as a smart card, smart phone, or fob
• Something you are, which involves biometrics like a thumb print or retina scan

Barracuda Cloud Control isn't about to scan your retinas, but we have implemented MFA across two of these authentication sets. Now you can enable BCC to require a user name and password (through LDAP if you have that enabled) AND an authentication code entered through your smartphone. This authentication code is a time-based one time password, which means that you can only use it once, and only within a certain period of time. In other words, the new BCC multi-factor authentication feature requires you to provide something you know as well as something you have in your possession for a short period of time. When enabled, MFA prevents an intruder from accessing BCC unless he has both sets of authentication during the time that the authentication code is valid.

The time-based one time password (ToTP) is supported on the iOS version of Barracuda Mobile, which is available in the iTunes app store.  You can also use the Google Authenticator or Duo Mobile app, which run on a variety of platforms.

Multi-factor authentication is a completely optional feature on Barracuda Cloud Control, but it can be enabled and required by the administrator at any time.

Back to Barracuda Cloud Control for a second. BCC currently supports Barracuda Backup, Email Security, Web Security and Appliance Control services.  You can also use Barracuda Cloud Control to access support cases and the community support forum.

LDAP (beta) and MFA are just two examples of our ongoing investment in Barracuda Cloud Control. We have many more authentication and security enhancements planned in the near future. If you're not using Barracuda Cloud Control, now is a great time to get started.

For more information on Barracuda Cloud Control, check out these resources:

• Introducing Barracuda Cloud Control
• New features in Barracuda Cloud Control
• LDAP now available as a beta feature in Barracuda Cloud Control
• Barracuda Cloud Control Documentation

Connect with us on Facebook, LinkedIn, Twitter or Google +. Check out our videos on YouTube