Barracuda NGFW Integration Guide
integrations network barracuda
Barracuda next-generation firewalls (NGFW) must be configured to send logs via syslog to the Taegis™ XDR Collector.
Connectivity Requirements ⫘
| Source | Destination | Port/Protocol |
|---|---|---|
| Barracuda NGFW | XDR Collector (mgmt IP) | UDP/514 |
Data Provided from Integrations ⫘
| Antivirus | Auth | DHCP | DNS | Encrypt | File | HTTP | Management | Netflow | NIDS | Process | Thirdparty | ||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Barracuda Firewall | D |
Y = Normalized | D = Out-of-the-Box Detections | V = Vendor-Specific Detections
Note
XDR detectors are not guaranteed to be triggered, even if a data source's logs are normalized to a schema associated with a given detector. However, you can create Custom Alert Rules to generate alerts based on normalized data from a data source.
Configuration Instructions ⫘
To configure the Barracuda NGFW syslog, follow the guide provided by Barracuda. Ensure you complete the following fields with the correct values:
- IP Address — The IP address of the XDR Collector
- Port — 514