Use this article to deploy the Barracuda Cloud Archiving Service component of Advanced Email Security and Compliance for G Suite in your environment.
Step 1. Activate the Service
- Log into https://login.barracudanetworks.com/ using your Barracuda Cloud Control account credentials
- Navigate to Home > Admin > Essentials.
- Click Enter Linking Code and Serial Number to enter this information and activate your subscription.
Step 2. Add Users to Your Barracuda Cloud Control Account
Add users through LDAP authentication and associate a role and whose mail can be viewed with an LDAP user or group, or manually configure and assign roles to local accounts in the web interface.
Understanding Roles
- User – Able only to view messages accessible to the account, either because the username for the account is also that of the sender or recipient of a message, or because it has been given explicit access to view an email address via Alias Linking.
- Auditor – Able to create and activate policies, and view, search, and export any messages to/from the domains to which they have access. Additionally, Auditors can save and name an Advanced search for re-execution at a later time from the Saved Searches tab. To create a Domain Auditor (an auditor with access to only a subset of the domains on your Barracuda Cloud Archiving Service), set the role to Auditor and specify at least one domain. If no domains are specified, then all messages in the entire Barracuda Cloud Archiving Service are accessible. No auditor account has access to any system or network configuration information on the Barracuda Cloud Archiving Service.
- Admin – Able to view all items from any user, not just those listed for the account. Also able to create and activate policies, and can make other system or network changes.
Active Directory Configuration
Add a New LDAP or Azure Active Directory
Log into https://login.barracudanetworks.com/ as the account administrator, and go to Home > Admin > Directories.
- Click the Add Directory button.
Select one of the following sections to add a new LDAP or Azure active directory:
Associate a Role
- Log into the Barracuda Cloud Archiving Service, and go to Users > LDAP User Add/Update.
- In the LDAP User/Group field, enter the LDAP User or Group name to which the permissions apply.
- Select the Role for the specified LDAP user or group account:
- User Role – Specify mailbox addresses to include or exclude from the LDAP account:
Include these Addresses – Enter a mailbox address that you wish to make available to the specified LDAP account, and then click Add.
Exclude these Addresses – Enter a mailbox address that you wish to hide from the specified LDAP account, and then click Add.
Auditor Role – Configure the desired permissions:
Domains – Enter a domain for which the auditor can view mail, and then click Add.
Saved Search – Define Saved Searches on the Basic > Search page, and then select the desired Saved Search from the drop-down menu to filter the auditor's search results.
Exclude these addresses – Enter a mailbox address that you want to hide from the specified LDAP account, and then click Add.
Admin Role – Specify mailbox addresses that you want to hide from the specified LDAP account, and then click Add.
- User Role – Specify mailbox addresses to include or exclude from the LDAP account:
Click Save.
For end-user authentication, refer to How to Set Up LDAP Groups for End-User Authentication.
Manually Add Local Accounts
Local accounts reside only on the Barracuda Cloud Archiving Service.
- Log into the the Barracuda Cloud Archiving Service, and go to Users > LDAP User Add/Update.
- Enter the user's Email Address and the User Display Name.
- Enter all aliases associated with the entered email address, one entry per line.
- Enter the account password and select the user role for the account.
- If you select the user role Auditor enter the following additional details:
- Enter a domain for which the auditor can view messages and other Outlook items, and click Add. Any messages that includes an email address in the listed domains in either the From, To, or CC/Bcc areas, or any items that belong to a user in the specified domains, display in search results. To allow the auditor to view all items from all domains, leave this field blank.
- In the Saved Search drop-down menu, select a defined Saved-Search to automatically apply to all searches performed by this auditor. Note that the parameters in the Saved Search take precedence over any domain limitations that may be specified above, as well as over any attempts by the auditor to Search As any other account.
Step 3. Obtain Your Journaling Address
- Log into the Barracuda Cloud Archiving Service, and go to Mail Sources > SMTP Journaling.
- Verify your journaling address.
Step 4. Configure G Suite
- G Suite Enterprise – If you are using G Suite Enterprise, use the steps in the section G Suite Enterprise Configuration below.
- G Suite; non-Enterprise version – If you are using a version of G Suite that is not G Suite Enterprise, use the steps in the section G Suite Configuration below.
G Suite Enterprise Configuration
- Log into your Google Admin console at https://admin.google.com.
- From the Home page, go to Apps > G Suite > Gmail > Advanced settings.
- Scroll to Advanced settings at the bottom of the page.
- In the Third-party email archiving section, enter a unique name to identify the setting.
- In the Send journal messages to this email address field, enter your journaling address from the Barracuda Cloud Archiving Service Mail Sources > SMTP Journaling page:
- Click Add setting, and click Save.
G Suite Configuration
Use the following steps to configure G Suite. If you are using G Suite Enterprise, use the steps in the previous section, G Suite Enterprise Configuration.
- Log into your Google Admin console at https://admin.google.com.
- From the Home page, go to Apps > G Suite > Gmail > Advanced settings.
- Scroll to Routing, and click Configure.
- Enter a unique name to identify the setting, and select all check boxes under Messages to affect:
- In the Also deliver to section, click Add more recipients, and click Add.
- Under Recipients, select Advanced from the drop-down menu.
- In the Envelope recipient section, select Change envelope recipient.
- In the Replace recipient field, enter the journaling address from the Barracuda Cloud Archiving Service Mail Sources > SMTP Journaling page.
- Clear Do not deliver spam to this recipient and select Suppress bounces from this recipient:
- Click Save. Select Require secure transport (TLS):
- Click Add Setting, and click Save.