Barracuda Email Security Gateway Integration

Barracuda Email Security Gateway

Version: Barracuda Email Security Gateway v6.0 and above.

The Barracuda Email Security Gateway is an integrated hardware and software solution designed to protect the email server from spam, virus, spoofing, phishing, and spyware attacks. Outbound filtering and encryption options also prevent Data Leakage Prevention (DLP). The optional cloud protection layer (CPL) shields email servers from inbound malware and DoS attacks while filtering out normal spam before it ever touches the network’s perimeter.

The Netsurion Open XDR platform facilitates monitoring events retrieved from Barracuda Email Security Gateway. The alerts, reports, dashboard, and saved search in the Netsurion Open XDR platform benefit in detecting any suspicious activities.

The following are the key Data Source Integrations available in the Netsurion Open XDR platform.

Alerts

Type	Name	Description
Security	Barracuda ESG - Malicious file detected in email	This alert is generated whenever any virus is detected in the email attachment.

Reports

Type	Name	Description
Security	Barracuda ESG - Email Traffic details	The report offers comprehensive data regarding inbound, outbound, email scanning, and email statistics. It includes details such as the sender's email address, recipient email, hostname, source IP address, action taken against malicious activities, and email subject. This report simplifies the process of analyzing sensitive audit data and answering questions related to the "who, what, when, where, and how" of specific scenarios. It helps meet the audit requirements for various industries' regulations.
Security	Barracuda ESG - Virus detection in emails	This report provides the information about any virus detected in the email attachment, including the details of sender and recipient address.

Dashboards

Type	Name	Description
Security	Barracuda ESG - Action taken on inbound emails	This dashlet displays the actions taken on inbound emails with their sender and recipient address.
Security	Barracuda ESG - Action taken on outbound emails	This dashlet displays the actions taken on outbound emails with their IP address.
Security	Barracuda ESG - Emails blocked by geolocation	This dashlet displays the emails blocked by geolocation.
Security	Barracuda ESG - Virus detection by sender address	This dashlet displays virus detected by sender address.
Security	Barracuda ESG - Spam emails detail	This dashlet displays all the spam emails with their sender and recipient address.

Saved Search

Type	Name	Description
Security	Barracuda ESG - Email Traffic details	This saved search contains in-depth data about inbound and outbound emails, including email scans and statistics. The data provided includes the sender's email address, recipient email, hostname, source IP address, any action taken against malicious activity, and email subject. This saved search simplifies the process of sorting through sensitive audit data to identify specific scenarios and answer questions related to the "who, what, when, where, and how" of such events. It helps satisfy audit requirements for various industry regulatory standards.
Security	Barracuda ESG - Virus detection in the email	This saved search provides the information about any virus detected in the email attachment, also provides the details of sender and recipient address.

Documentation

The configuration details are consistent with Netsurion version 9.3 and later, and Barracuda Email Security Gateway VX600.

Download Integration Guide for configuration instructions and more information.