This article describes what to expect when moving from Barracuda Email Security Gateway to Barracuda Email Security Service.
There are two options for moving:
- Converting from Barracuda Email Security Gateway data to Barracuda Email Security Service data.
- Migrating all of your existing settings – including settings, domains, and users – from Barracuda Email Security Gateway to Barracuda Email Security Service
Option 1: Converting Data
Before Conversion
Before you can begin the conversion process, you must complete the following steps.
1. Create a Barracuda Essentials Account
You must have a Barracuda Essentials account.
- Create an account in Barracuda Cloud Control, as described in Create a Barracuda Cloud Control Account.
Start a free trial of Barracuda Essentials, as described in the Step 1. Set Up Essentials section of Set Up Essentials for Office 365.
2. Add Domains and Test Connectivity
- Add and verify your domains as described in the Step 2. Configure Connectors and Permissions section of Set Up Essentials for Office 365.
- Test domain connectivity by sending a test email. Repeat this sequence for each domain.
- In Barracuda Cloud Control, select Email Security in the left panel.
- Navigate to the Domains page. For the appropriate Domain Name, go to Settings > Edit. At the top of the Domain Settings page, under Mail Server, click Test.
- Enter an email address and click Send. The system sends a message to the email address you specify, with the return address Barracuda Email Test.
3. Open IP Ports to Receive Email
Open IP ports on your firewall, based on your region, as described in Barracuda Email Security Service IP Ranges.
4. Open Ports for LDAP Synchronization
Open your firewall ports to allow the IP address ranges for LDAP connectivity based on your Barracuda Email Security Service instance, as described in Barracuda Email Security Service IP Ranges.
The Conversion Process
Converting data from Barracuda Email Security Gateway to Barracuda Email Security Service requires the following steps:
- Convert and Import Configurations
Copy Users into Barracuda Email Security Service
Change MX Records to point to Barracuda Email Security Service
1. Convert and Import Configurations
Configurations to Import
The following table lists configurations in Barracuda Email Security Gateway that you must convert to a format compatible with Barracuda Email Security Service.
Email Security Gateway | Email Security Service |
---|---|
Block/Accept > IP filters | Inbound Settings > IP Address Policies |
Allowed IP/Range | IP Blocking / Exemption |
Blocked IP/Range | IP Blocking / Exemption (Tagging is not an option) |
Block/Accept > Recipient Filters | Inbound Settings > Recipient Policies |
Allowed Recipients | Recipient Policies |
Blocked Recipients | Recipient Policies (Tagging is not an option) |
Encrypted Sender Addresses and Domains (Outbound Only) | - |
Redirected Sender Addresses and Domains (Outbound Only) | - |
Block/Accept > Sender Filters | Inbound Settings > Sender Policies |
Allowed Senders | Sender Policies |
Blocked Senders | Sender Policies (Tagging is not an option) |
Encrypted Sender Addresses and Domains (Outbound Only) | - |
Redirected Sender Addresses and Domains (Outbound Only) | - |
Block/Accept > Content Filtering | Inbound Settings > Content Policies |
Content Filters | Message Content Filter (Subject, Header, Body) |
Attachment Content Filters | Message Content Filter (Attachments) |
Predefined Filters | Predefined Filters |
Block/Accept > Content Filtering | Outbound Settings > Content Policies |
Content Filters | Message Content Filter (Subject, Header, Body) |
Attachment Content Filters | Message Content Filter (Attachments) |
Predefined Filters | Predefined Filters |
Block/Accept > Attachment Filters | Inbound Settings > Content Policies |
Attachment Filename Filters | Attachment Filter |
Attachment File Type Filters | - |
Attachment MIME Type Filters | Attachment Filter |
Password Protected Archive Filtering | Attachment Filter |
Block/Accept > Attachment Filters | Outbound Settings > Content Policies |
Attachment Filename Filters | Attachment Filter |
Attachment File Type Filters | - |
Attachment MIME Type Filters | Attachment Filter |
Password Protected Archive Filtering | Attachment Filter |
2. Copy Users into Barracuda Email Security Service
Use this section to set up directory services for one or more of your domains. You can use either Azure AD or LDAP directory services to enable single sign on (SSO) and synchronization of users lists.
- LDAP – Configure LDAP authentication through your organization's LDAP servers. Refer to How to Configure User Authentication Using LDAP for details.
- Azure AD – Configure user authentication through your organization's Azure AD service. Refer to How to Configure User Authentication with Azure AD for step-by-step instructions.
3. Change Your MX Records to point to Barracuda Email Security Service
Update your MX records to point to Barracuda Email Security Service, as described in How to Set Up MX Records for Domain Verification.
After Conversion
After you complete the conversion process, perform the following steps:
1. Verify Email Flow
Send a test email to each of your domains to verify that you configured your account and migrated your settings correctly.
In the Barracuda Email Security Service, navigate to Overview > Message Log to ensure that you can see the messages.
2. (Optional) Configure Outbound Email for Barracuda Email Security Service
Optionally follow Step 7. Configure Outbound Mail in Configure Office 365 for Inbound and Outbound Mail.
Caveats
- Message Log data will not be transferred to Barracuda Email Security Service.
- Per user settings must be added separately.
- Domain-specific settings are not transferred automatically.
- Sender and Recipient Encryption exemptions will NOT be transferred to Barracuda Email Security Service.
- End users must log into a different URL to access quarantined email.
- If you have an existing Cloud Protection Layer or Barracuda Essentials account into which you are migrating data, all of the existing data in that account will be replaced by the data from your Barracuda Email Security Gateway device.
- Inbound and outbound rate control limits can be customized in Barracuda Email Security Gateway, but not in Barracuda Email Security Service. Refer to the following articles for details:
Option 2: Migrating All Settings, Domains, and Users
In this option, contact Barracuda Networks Support for assistance with migrating all of your Barracuda Email Security Gateway settings, domains, and users to Barracuda Email Security Service.
After migration is completed, check the Barracuda Email Security Service service settings to ensure that the migrated information is correct.
Note that Message Log data will not be transferred to Barracuda Email Security Service.
Note again that domains moved through migration are not verified. Verifying each domain individually:
- Proves that you are authorized to manage mail in that domain.
- Allows you to activate each domain at your own pace.
- Does not allow Barracuda Email Security Service to start processing mail for a domain before it is ready.
- Enables you to correct the Destination Mail Server in Barracuda Email Security Service for each domain.
The last step of the migration process is to change your MX records for each domain to point to Barracuda Email Security Service. It is important that the MX record you use is the correct one for each domain. Each domain has its own unique MX record. Note that MX records must all point to Barracuda Email Security Service. Any MX records pointing elsewhere will compromise the protection from spam and attacks provided by Barracuda Email Security Service.
Review the Barracuda Email Security Service articles in Barracuda Campus to ensure you have no problems with your migration.
If you have any questions on moving from Barracuda Email Security Guardian to Barracuda Email Security Service, contact Barracuda Networks Support.