It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda XDR

Setting up Cisco Meraki Collector

  • Last updated on

This setup is for the XDR Collector only. If you are using a physical or virtual sensor, refer to Integrating Cisco Meraki.

  • Enable the Cisco Meraki Collector integration
  • Install the XDR Collector
  • Configure the Firewall
  • Open the port on the XDR Collector Host

Enable Cisco Meraki

  1. In Barracuda XDR Dashboard, navigate to Administration Integrations.
  2. On the Cisco Meraki card, click Setup.
    2024-02-29_11-23-00.png
  3. Select the Enable check box.
    2024-02-29_11-23-38.png
  4. Click Save.

Install the XDR Collector

When collecting logs from one or more integrated data sources, always set up the XDR Collector on a dedicated host server. Don't use an existing server because the amount of data produced by logs can impact critical infrastructure.

Configure the Firewall

  1. To define Syslog servers, in the Meraki Dashboard navigate to Network-wide > Configure > General.

  2. Click the Add a syslog server link to define a new server and enter the following:

    • IP address: The static IP address of the system hosting the XDR Collector

    • UDP port: 9221

    • Roles: The roles to send to the server need to be defined. Supported roles include Airmarshal, Events, Flows, IDS Alerts, IP flows, Security, and URLs.

The Cisco Meraki documentation is available here.

Open the Port on the XDR Collector Host

Ensure incoming traffic is allowed on UDP port 9221.

Linux

sudo ufw allow 9221/udp

Windows

netsh advfirewall firewall add rule name=“Meraki Firewall Events” dir=in action=allow protocol=UDP localport=9221