Configuring Barracuda ESS Monitoring

This article will walk through setting up and configuring the Barracuda ESS monitoring app.

 

First Enable the ESS Monitor App

Logon to the console and enable the Sentinel App

Screen Shot 2021-01-19 at 2.55.22 PM

  1. From the Left Hand Navigation, Click On App Store
  2. Switch On the Barracuda ESS Monitor App

Map The ESS Customers

  1. From the Left Hand Navigation, Click Integrations

Screen Shot 2021-01-19 at 2.56.24 PM

2.   Click Email Security, then Click Barracuda ESS Monitor

This form will allow you to paste in the Account ID (ID) from Barracuda ESS for each customer that is managed.

To Find the Account ID (ID)

1.   Logon to Barracuda ESS Dashboard and change context to the appropriate customer account.

Screen Shot 2021-01-19 at 2.58.35 PM

2.   In the lower part of the Dashboard you should see Account ID / ESS ID

3.   Copy the Account ID that begins with ESS  from the Dashboard to the Integrations tab for the appropriate customer. You must include ESS as part of the ID, such as ESS12345.

4.    Repeat steps 1-3 for all customer accounts, when finished click Save on the Integrations tab in the RocketCyber console.

 

Configure ESS Syslog Destination

1.    Logon to the ESS Dashboard

Screen Shot 2021-01-19 at 3.06.04 PM

2.    Click Account Management Tab 

3.    In the IP Address/Hostname field type: syslog.rocketcyber.com

5.     Port set to 6514

6.    Click Add

Screen Shot 2021-01-19 at 3.07.18 PM

7.    Click the Test button to test the connection.

Congratulations. The ESS Monitoring app should now start forwarding data to the RocketCyber Console.