Barracuda Mobile Device Manager

Barracuda Mobile Device Manager Overview

Use Barracuda Mobile Device Manager to manage mobile devices from the cloud, and deploy applications and resources to
mobile devices. The Barracuda Mobile Device Manager Service provides a web interface for the administrator to configure
the service, along with the Barracuda Mobile Companion application for end users, to provide complete Bring Your Own
Device (BYOD) security and assigned device scenarios. Protect and apply secure browsing policies for groups of students,
employees, and guests who are using their personal mobile devices inside or outside of your network, or manage business or
institutionally owned devices within your network.

Where to Start

Configure the Service

Step 1 - Initial Service Setup

Step 2 - Configure Your Barracuda Mobile Device Manager Profile
Step 3 - Enroll Mobile Devices
Step 4 - Set Up the Apple Volume Purchase Program

Configure Devices
Once Barracuda Mobile Device Manager is configured, you can set up and enroll devices. If you enroll users using Barracuda
Mobile Companion, see the following articles:

Understanding Barracuda Mobile Companion

Barracuda Mobile Companion User Guide

Key Features

Enroll Android and iOS devices

Enroll Android and iOS devices using provisioned IP address method
Configure secure mobile device authentication
Configure LDAP or Active Directory for user authentication
Set passcode restrictions and boundaries
Push applications out to iOS devices through the Apple Volume Purchase Program
Deploy, manage, and troubleshoot iOS devices through the Apple Device Enrollment Program
Enroll iOS devices using Apple Configurator
Push iOS Enterprise applications out to iOS devices
Assign a user to a device
View subscription, device enrollment, and system activity from the Barracuda Mobile Device Manager Dashboard
Access device details, including installed applications and device activity by user
View queued actions and a log of all activities initiated by any user in the service

https://techlib.barracuda.com/MDM

1 / 17

Barracuda Mobile Device Manager Release

Notes
What's New in Release 2.0
The following new Android features are added to Barracuda Mobile Device Manager version 2.0:

Major Server Features Android Support

Device enrollment and management via the Barracuda Mobile Companion app
Perform device actions including message, clear passcode, lock, and wipe
View device information including installed apps, location, hardware, and network information
Push application installation and uninstallation intents to devices
Create device profiles including passcode policies, camera restrictions and Wi-Fi settings

What's New in Release 1.3

The following new features are added to Barracuda Mobile Device Manager version 1.3:

Major Server Features

Support for multiple profiles

Profiles and Applications can be assigned based on Groups.
Custom Groups Groups defined and applied to devices by the admin.
Smart Groups Automatically generated by the system based on device attributes.
User Groups Retrieved from LDAP group membership.

Barracuda Mobile Companion App - Features, Enhancements, and Fixes

Support for iPhone 6 and iPhone 6 plus screen size [BNMDM-1612, BNMDM-1617]
Enhancements to Barracuda CudaSign integration [BNMDM-1473, BNMDM-1466]
Fixes related to iOS 8 [BNMDM-1489, BNMDM-1713, BNMDM-1717]
Fixed issue where assigning user would log user out of Companion App [BNMDM-1501]

What's New in Release 1.2

The following new features are added to Barracuda Mobile Device Manager version 1.2:

Major Features

Configurable event notifications via email or syslog (Settings > Notifications page)
User management on non-LDAP connected accounts via LDIF or CSV import
Barracuda Mobile Device Manager Companion integration with Barracuda SignNow

https://techlib.barracuda.com/MDM

2 / 17

General Features and Enhancements

Option to provide device wipe password (BNMDM-763)

Jailbroken device detection (BNMDM-1162)
Device Notes (BNMDM-1441)
Ability to change device name, wallpaper, and roaming settings (BNMDM-1440)
Resources: support for uploading multiple files at once (BNMDM-1240)
Improved web navigation and improved search (BNMDM-439, BNMDM-751, BNMDM-943, BNMDM-1388)
Improved Audit Log messages (BNMDM-600)

Fixes

Allow for free app installation via Apple VPP for silent install (BNMDM-1432)
Fixed issue where sometimes application information was incomplete (BNMDM-1433)
Changes to enterprise apps no longer trigger a reinstall of other apps (BNMDM-1436)
Fixed issue where edits would require files to be re-uploaded (BNMDM-1426)
Fixed issue where disabled command buttons are enabled after any command button is clicked (BNMDM-1371)

What's New in Release 1.1

The following new major features are added to Barracuda Mobile Device Manager version 1.1:

Support for iOS 7 Profile Settings

Configuration Settings including AirPlay, AirPrint, Single Sign-On, Fonts, simple Web Content Filters
Restrictions including Open in Management, Autonomous Single Application Mode, and many others

General Features and Enhancements

Multiple device enrollment program profiles (BNMDM-1264)

URL enrollment via Apple Configurator (BNMDM-1276)
Ability to assign a user to a device (BNMDM-1181)
Better message when users try to upload incorrect file type as Apple Push Certificate (BNMDM-1353)

Fixes

Barracuda Mobile Companion Improvements when previewing and opening files on the Resource Page (BNMDM-1227,
BNMDM-1341, BNMDM-1243, BNMDM-1172, BNMDM-1244, BNMDM-1280)
Allow an inactive device to be deleted (BNMDM-1369)
Disable Send Message button for devices that do not have Barracuda Mobile Companion installed (BNMDM-1322)
Improvements to Apple Device Enrollment Program (DEP) integration (BNMDM-1273, BNMDM-1310, BNMDM-1312)

Initial Release 1.0

The initial release of Barracuda Mobile Device Manager includes the following features:

Deploy applications through the Apple Volume Purchase Program (VPP) to iOS 7 mobile device users
Deploy and manage applications through the Apple Device Enrollment Program
View device details as well as administrator and user actions
View device details and take actions with devices
View all applications installed on all enrolled devices

https://techlib.barracuda.com/MDM

3 / 17

View all queued actions performed on or by devices connected to this account

Create a comprehensive device profile, including:
Passcode and functionality restrictions
Configure email settings and Microsoft Exchange Server synchronization using Exchange ActiveSync
Define network connectivity including global proxy and Wi-Fi and VPN settings
Configure LDAP settings and upload certificates for SSL authentication
Configure non-email item synchronization for CalDAV, iOS calendar subscriptions, and CardDAV
Set up web clips for iOS website and web page shortcuts

Select the manner in which to enroll users:

Enrollment key and shared secret
Barracuda Mobile Companion Application
Clickable link within an email
Apple Configurator
Store and administer user account credentials based on your organization's LDAP or Active Directory server
Configure Guest user access
Connect Barracuda Mobile Device Management to a Barracuda Copy account where you can share content with enrolled
users

https://techlib.barracuda.com/MDM

4 / 17

Getting Started
Recommended Steps

Step 1 - Initial Service Setup

Step 2 - Configure Your Barracuda Mobile Device Manager Profile
Step 3 - Enroll Mobile Devices
Step 4 - Set Up the Apple Volume Purchase Program

https://techlib.barracuda.com/MDM

5 / 17

Email Settings and Authentication

This article refers to Barracuda Mobile Device Manager and iPhone, iPad, or iPod running iOS 6.0 or above, and Android
devices running Ice Cream Sandwich (version 4.0) and above, except where noted.

Authentication Server
Store and administer user account credentials based on your organization's LDAP or Active Directory server on the
SETTINGS > Authentication page.

Email Settings (iOS Only)

If you are using a device profile to manage mobile device users in your environment, you can:

Specify email account settings and incoming/outgoing server details including authentication method and SSL
communication on the DEVICE CONFIG > Profiles > BASIC > Email page
Upload encryption and signing certificates for outgoing mail S/MIME encryption
Configure user address books to look up users from an LDAP directory on the DEVICE CONFIG > Profiles >
Authentication > LDAP page
Set up contact synchronization using CardDAV on the DEVICE CONFIG > Profiles > Advanced > Add Contact page

SSL Inspection (iOS Only)

If iOS device traffic is to be routed through a Barracuda Web Filter or other such appliance that uses SSL Inspection, install
an SSL certificate (.der file) obtained from the appliance on mobile devices enrolled in Barracuda Mobile Device Manager on
the DEVICE CONFIG > Profiles > Authentication > Certificates page.

Exchange ActiveSync Profile (iOS Only)

Configure Microsoft Exchange Server synchronization using the Exchange ActiveSync protocol to allow enrolled users to
securely access corporate or institution email. Configure Exchange ActiveSync on the DEVICE CONFIG > Profiles > Basic
> Add Exchange ActiveSync Server page.

https://techlib.barracuda.com/MDM

6 / 17

Event Notifications
To configure event notifications via email or syslog, go to the SETTINGS > Notifications page, and click Add
Notification. You can select an entire category, for example Configuration, or select individual events within a category,
then select one or more delivery methods:

Email When selected, enter one or more email addresses to which to send the notification in the Emails field.
Syslog When selected, a Syslog message is generated based on the settings defined on the SETTINGS >
Configuration page.

https://techlib.barracuda.com/MDM

7 / 17

Available Device Actions

This article refers to Barracuda Mobile Device Manager and iPhone, iPad, or iPod running iOS 6.0 or above, and Android
devices running Ice Cream Sandwich (version 4.0) and above.

Assign a User to a Device

The device must be enrolled with a status of either Active or Inactive to assign a user to a device.
To assign a user to the device:
1. Navigate to the Status > Devices page, select one or more devices, and then click Assign User.
2. In the Assign User to Device page, use the search tools to refine the list of users.
3. Click Assign User to the right of the user name in the table, and then click Back to Devices to return to the Device
Details page.

Send Message
The device must be enrolled with a status of either Active or Inactive to send a message to the device.
To send a message to a device:
1. Navigate to the Status > Devices page, select the device, and then click Send Message.
2. In the Send Message dialog box, enter the content of your message, and then click Send.

Clear Passcode
The device must be enrolled with a status of either Active or Inactive to clear the device passcode.
To clear the passcode on a device, navigate to the Status > Devices page, select a single device, and then click Clear
Passcode. The passcode is no longer required on the selected device.

Lock Device
The device must be enrolled with a status of either Active or Inactive to lock the device.
To lock a device, navigate to the Status > Devices page, select a device, and then click Lock. The device is locked and
cannot be logged into.

Query a Device
The device must be enrolled with a status of either Active or Inactive to query the device.
To retrieve device-specific details:
https://techlib.barracuda.com/MDM

8 / 17

1. Navigate to the Status > Devices page, select a single device, and then click Query; the Device Details page displays
all device-specific data including remaining battery power, location, installed applications, available storage, and any
other related details.
2. Click the Device Name to return to the Device Details page.

Check-In
The device must be enrolled with a status of either Active or Inactive to check-in with a device.
To check-in with the device, navigate to the Status > Devices page, select a single device, and then click Check-In to ping
the device to determine if it has network connectivity.

Group

Assign devices and device profiles to a group you define on the Device Config > Group Management page.

Unenroll
The device must be enrolled with a status of either Active or Inactive to unenroll the device.
To unenroll a device, navigate to the Status > Devices page, select a device, and then click Unenroll.

Wipe a Device
The device must be enrolled with a status of either Active or Inactive to wipe the device; note that this action removes all
data from the device, and returns it to the factory settings.

This action displays only if Allow Device Wipe is set to Yes in the SETTINGS > Configuration page.

To wipe a device, navigate to the Status > Devices page, select a device, and then click Wipe.

Delete an Inactive Device

This action removes all device information from Barracuda Mobile Device Manager; you must unenroll the device before you
can delete it from the system.
To delete an inactive device, navigate to the Status > Devices page, select the device with a status of Inactive, and then
click Delete. Confirm that you want to remove the selected device.

https://techlib.barracuda.com/MDM

9 / 17

Monitoring
The Barracuda Mobile Device Manager provides tools for the administrator to monitor both user and device activities, as well
as system events.

In this Section

Viewing Device Details

Viewing System Tasks

https://techlib.barracuda.com/MDM

10 / 17

Mobile Resources
This article refers to Barracuda Mobile Device Manager and iPhone, iPad, or iPod running iOS 6.0 or above.
Upload and share documents with enrolled devices from a Barracuda Copy account you link to Barracuda Mobile Device
Manager on the DEVICE CONFIG > Resources page. Shared files can then be opened on enrolled iOS devices via the
Barracuda Mobile Companion.

https://techlib.barracuda.com/MDM

11 / 17

Application Management
This article refers to Barracuda Mobile Device Manager and iPhone, iPad, or iPod running iOS 6.0 and above.
Barracuda Mobile Device Manager integrates with the Apple Volume Purchase Program (VPP), Apple App Store, and iTunes
for ease of application installation and delivery to your users.

Apple Volume Purchase Program

Apple VPP allows you to purchase and distribute applications and books in volume, and assign them to specific iOS 7 mobile
devices in your organization. To set up your Apple VPP account, go to the SETTINGS > Apple VPP page in the Mobile
Device Manager web interface, and follow the onscreen instructions. Once your account is set up, determine the best
method of distribution:

Managed Distribution Purchase bulk software licenses which you assign to users. You can reclaim managed
distribution licenses at any time for assignment to another user, and specify automatic removal of managed distribution
applications upon unenrollment of the device from Barracuda Mobile Device Manager.
Redeemable Codes Purchase books and applications and download a spreadsheet of redeemable codes that you
distribute to users. Users can then decide whether to download the book or application to their iOS device using the code.
Once the redeemable code is associated with their device, it is permanently transferred to the Apple ID and remains with
that device indefinitely.

To add users to the Apple VPP account, go to the SETTINGS > Apple VPP page, and click Manage Users.

Restrict Application Installation Functionality

If you are using a device profile to manage mobile devices in your environment, determine the level of iOS application
functionality restrictions on the DEVICE CONFIG > Profiles > Basic > Restrictions page. For example, you can specify
whether users can install or remove applications, access YouTube, and select content rating levels.

Add Free, Managed, and Proprietary Applications

Add and manage iOS and iOS Enterprise books and applications from the DEVICE CONFIG > Applications page. Download
free applications, Barracuda applications, proprietary enterprise applications using an IP file, or add managed distribution
licenses or redeemable codes you purchase through your Apple VPP account. Note that Apple VPP applies only to iOS 7
devices in your organization.

For details on adding Apple VPP purchased applications, refer to Apple VPP Deployment Options.

Push Purchased Applications to Users

Once books and applications are added to Barracuda Mobile Device Manager, you can distribute them to users in your
organization:

Managed Distribution Invite iOS7 mobile device users to join the Apple VPP account from the SETTINGS > Apple
VPP > Manage Users page, and then grant licenses to users once they accept the invitation to join and their status is set
to Associated from the DEVICE CONFIG > Applications > Add New menu.

https://techlib.barracuda.com/MDM

12 / 17

Redeemable Codes Once you have purchased an application, you download a spreadsheet of codes that you add to
Barracuda Mobile Device Manager, and then email the associated redeemable URL to a iOS 7 mobile device user. For a
complete step by step process, refer to How to Deploy Apple VPP Applications using Redeemable Codes.
Barracuda Mobile Companion App If users are enrolled through the Barracuda Mobile Companion App, you can push
applications directly to these user devices using the device profile.
iOS Enterprise Apps In addition to adding applications from the iTunes Store, you can add iOS Enterprise proprietary
applications that are not published to the iTunes Store using an IPA file which stores the iOS application.

View Installed Applications

From the SETTINGS > Installed Applications page, you can view all applications installed across all devices in Barracuda
Mobile Device Manager including applications managed through Apple VPP. Use the search tools to view a specific set of
applications. Additionally, you can export the current search results to a CSV file.

https://techlib.barracuda.com/MDM

13 / 17

Device and Application Security and

Restrictions
Track managed devices and set the level of device and application security for devices enrolled in Barracuda Mobile Device
Manager.

You cannot wipe a device that is not enrolled or is inactive. Additionally, Allow Device Wipe must be set to Yes on
the Settings > Configuration page prior to enrollment of a device for this action to take effect.

Device Monitoring
From the STATUS > Devices page, click on a mobile device name to view device-specific details including:

A map of the device's current location (if available);

Device name, type, number (if applicable), enrollment dates, and the last the device was seen in Barracuda Mobile Device
Manager;
General device details including serial number and encryption;
Network settings including Wi-Fi and Bluetooth Mac Addresses and cellular details (if applicable);
Installed profiles, applications, and certificates.

Additionally, you can query a device to retrieve device-specific data and add notes specific to the selected device.

Device Notification
From the STATUS > Devices page, click on a mobile device name, and then click Send Message to send a text message
to the device.

Reset Devices
From the STATUS > Devices page, click on an enrolled mobile device name, and select from the available reset options:

Wipe a device to return it to factory settings;

Lock a device so that it cannot be accessed by the user;
Unenroll a user from Barracuda Mobile Device Manager;
Query a device to retrieve all device-specific data including location.

Reset Passcode Policy

From the STATUS > Devices page, click on a mobile device name, and then click Clear Passcode so that one is no longer
required to log in to the selected device.

https://techlib.barracuda.com/MDM

14 / 17

Application Distribution

Managed Distribution Grant licenses you purchase through Apple Volume Purchase Program (VPP) to iOS 7 mobile
device users:
Reclaim licenses any time, or select to automatically remove the application from the device upon unenrollment of the
device
Disable data backup to iCloud
Redeemable Codes Purchase redeemable codes through Apple VPP which you distribute to iOS 7 mobile device users
as a redeemable URL:
User decides whether to install the application
The application is permanently transferred and remains with the device and cannot be revoked by the administrator
Barracuda Mobile Companion Push application profile to enrolled users, and set restrictions:
Prevent guest access
Allow device wipe
Require users to approve before changes are applied to their device

Device Profile Security and Restrictions

If you are managing devices in your environment through a Barracuda Mobile Device Manager device profile, you can further
define device and application restrictions, including:

Some restrictions are iOS version-specific; for details, log in to Barracuda Mobile Device Manager, go to the DEVICE

CONFIG > Profiles > BASIC > Edit Functionality Restrictions page, and click the Help (

) icon.

Set passcode restrictions and the level of control including minimum passcode length, minimum number
of complex characters, and maximum passcode age, on the DEVICE CONFIG > Profiles > BASIC page
Set iOS device and application restrictions on the the DEVICE CONFIG > Profiles > BASIC > Edit
Functionality Restrictions page, including:
Specify device functionality including voice assistant (Siri) usage, fingerprint unlock

Define application restrictions, including whether users can install or remove applications
Prevent access to YouTube, iTunes, Game Center, and Bookstore
Set Safari browser restrictions
Prevent access to iCloud
Select security and privacy settings
Set Content Ratings
Select whether users can accept untrusted TLS certificates
Force encrypted backups

https://techlib.barracuda.com/MDM

15 / 17

Troubleshooting
When a Barracuda Mobile Device Manager profile is pushed to iOS mobile devices, some functionality may be disabled based
on administrator settings. For example, the administrator can disable Siri voice assistance. Contact your local administrator
for more information.

In this Section

Apple Device State Restrictions

Understanding Device Supervision
How to Determine if an iOS Device is Jailbroken
How to Locate and Manage a Lost or Stolen Device
How to Test Enrolled Device Connectivity
Understanding How Device Restrictions Affect Applications
Understanding Why iOS Camera Functionality is Missing in Mobile Applications
Understanding Missing Android Device Phone Numbers

https://techlib.barracuda.com/MDM

16 / 17

User Guides
Administrators can provide their mobile device users with the following user guides for users enrolled in Barracuda Mobile
Device Manager, as well as for those who are not enrolled, but who are participating in the Apple Volume Purchase Program
(VPP) for managed application distribution:

Barracuda Mobile Companion User Guide

Apple Volume Purchase Program User Guide

https://techlib.barracuda.com/MDM

17 / 17