The CloudGen Access Proxy is a software tool that contains Envoy Proxy and CloudGen Access Proxy Orchestrator services:

Envoy Proxy

• Listens to requests and proxies them to the correct destination.
  
• Requires a valid token (CloudGen Access Proxy enrollment link) that contains the necessary information to bootstrap and authorize the service.
  
• You can obtain the enrollment link by registering the proxy in the CloudGen Access Console.

• Ensures that the Envoy Proxy is correctly configured.
  
• Requires connectivity to internal/protected resources and must have an outbound open port, which is configured in the CloudGen Access console. This port is used only for the clients to connect to (the CloudGen Access App that runs on the devices).
  
• Communicates with the CloudGen Access Console to obtain policies (control plane).
  

Recommendations

• As a rule of thumb, a CloudGen Access Proxy (possibly with high availability) should be deployed per network/VLAN.
• Proxies should be deployed as close as possible to the resources that they serve, in order to maximize security and performance.
  

What is Barracuda CloudGen Access?

Barracuda CloudGen Access is an innovative Zero Trust Access solution that provides secure access to applications and data from any device and location. CloudGen Access continuously verifies that only the right person, with the right device, and the right permissions can access company data or apps, or any infrastructure.

Free trial: https://www.barracuda.com/cga-trial

Purchase: https://azuremarketplace.microsoft.com/en-us/marketplace/apps/barracudanetworks.prod-zt-access-az-usr?tab=Overview