Configuring Barracuda Sentinel Email Monitoring

This will walk you through the steps of configuring the Barracuda Sentinel App

 

First Enable the Sentinel Monitor App

Logon to the console and enable the Sentinel App

Screen Shot 2021-01-19 at 2.25.49 PM

  1. From the Left Hand Navigation, Click On App Store
  2. Switch On the Barracuda Sentinel Monitor App

Map The Sentinel Customers

  1. From the Left Hand Navigation, Click Integrations

Screen Shot 2021-01-19 at 2.29.00 PM

2.   Click Email Security, then Click Barracuda Sentinel Monitor

This form will allow you to paste in the Account Access Token (ID) for Barracuda Sentinel for each customer that is managed.

To Find the Account Access Token (ID)

1.   Logon to Barracuda Sentinel Dashboard and change context to the appropriate customer account.

Screen Shot 2021-01-19 at 2.32.33 PM

 

2.   In the url bar of the browser, click to display the full url

Screen Shot 2021-01-19 at 2.34.21 PM

3.   In the url find the Account Access Token (ID), it should be formatted like :

86d6d158-738e-4139-81b3-6944488e137c

4.   Copy the Account Access Token (ID) from the url to the Integrations tab for the appropriate customer.

5.    Repeat steps 1-4 for all customer accounts, when finished click Save on the Integrations tab in the RocketCyber console.

 

Configure Sentinel Syslog Destination

1.    Logon to the Sentinel Dashboard

Screen Shot 2021-01-19 at 2.41.21 PM

2.    Click the Gear icon on the upper right hand corner of the screen

Screen Shot 2021-01-19 at 2.42.34 PM

3.    Click on Syslog Integration

4.    In the IP Address/Hostname field type: syslog.rocketcyber.com

5.     Leave Port set to 6514

6.    Click Save

Screen Shot 2021-01-19 at 2.44.49 PM

7.    Click the Test button to test the connection.

 

Congratulations. Sentinel Monitoring app should now start forwarding data to the RocketCyber Console.