When you configure your Barracuda NextGen Firewalls to send log data to USM Appliance, you can use the Barracuda Next Gen Firewall plugin to translate raw log data into normalized events for analysis. The table below provides some basic information for the plugin.
| Device | Details |
|---|---|
| Vendor | Barracuda |
| Device Type | Firewall |
| Connection Type | Syslog |
| Data Source Name | barracuda-ng |
| Data Source ID | 1753 |
Note: The Barracuda Next Gen Firewall plugin supports both Barracuda NextGen Firewalls X-Series and F-Series.
Integrating Barracuda NextGen Firewalls
To configure Barracuda NextGen Firewalls to forward log data over Syslog to USM Appliance
-
Go to the LOGS > Log Streaming.
-
In the Stream target field, type the hostname or IP address of your USM Appliance Sensor.
Note: Only one target can be defined.
-
In Protocol / Port, enter
- port 514 if you're using UDP
- port 601 if you're using TCP
-
Select the log streams you want to enable.
-
Click Save Changes.
-
Verify that a connection exists between the device and the USM Appliance Sensor.
- Go to BASIC > Recent Connections.
-
Filter the list of connections for the Protocol, Service, and Destination IP of your USM Appliance Sensor.
Plugin Enablement
For plugin enablement information, see Enable Plugins.
Additional Resources and Troubleshooting
https://campus.barracuda.com/product/nextgenfirewallf/article/NGF70/LogsConfigSyslogStreaming/
For troubleshooting, refer to the vendor documentation:
Feedback