This solution applies to the Email Security Gateway, firmware version 5.x and up.
The Cloud Protection Layer provides yet another layer of security by pre-filtering inbound email for spam and viruses in the cloud before it reaches your actual network and/or the Email Security Gateway. Here are some of the great benefits of enabling this feature:
- Dual Protection Points - comprehensive onsite and cloud-based threat protection including the Barracuda Anti-Virus Super Computing Grid and Barracuda Advanced Anti-Fraud Intelligence.
- Email Burst Handling - email surge suppression during peak traffic and spam spikes, which offloads a significant volume of spam email to be filtered via the cloud.
- Immediate Response - automatic updates in real-time leveraging threat intelligence from Barracuda Labs and Barracuda Central to continuously stay ahead of quickly morphing threats.
- Email continuity - Optional spooling (queueing) of email for up to four days and backup MX for email rerouting to a separate destination. Ensures seamless disaster recovery capabilities in the event of network downtime or system outage.
There are some steps we need to take.
- If you don't already have an account with Barracuda Networks, visit http://www.barracudanetworks.com and click the Customer Login link in the upper right corner of the page. If you already have an account, log in and skip to step 4.
- From the Sign In page, click the Create a new account link. Enter your name and contact information, business name and location. Make a note of your username (email address) and your password.
- After submitting your new account information, you'll see the Account > Users page which shows your account name, associated privileges, username and products you've associated with your Barracuda Networks account. Any additional user accounts you add at a later time will be listed on this page.
- Click on the Appliance Control tab on the left side of the page. This will bring you to Basic -> Device Management, under Appliance Control. You'll see a message indicating that no products have yet been connected.
- In another browser tab or window, log into your Email Security Gateway. From the product ADVANCED > Firmware Upgrade page, check to make sure you have the latest firmware installed. If not, download and install it now.
- From the ADVANCED > Cloud Control page, enter the username and password you created for your Barracuda Networks account. Click Yes for Connect to Barracuda Control Center to connect your Email Security Gateway to the Barracuda Cloud Control, and then click the Save Changes button. Note that your Email Security Gateway can connect with only one Barracuda Cloud Control account at a time.
- In the Barracuda Cloud Control window, refresh your browser page. You should see, in the Products column in the left side of the page, the Spam Firewall group with two components listed:
- The Cloud Protection Layer component
- All Email Security Gateways
- Enter one of the domains you have configured on the Email Security Gateway using the New Domain Name field on this page.
- In the Destination Server field, enter the external facing IP address of your Email Security Gateway. This is typically, but not always, the IP Address from the BASIC > IP Configuration page. Important: If your Email Security Gateway is behind a firewall that is blocking the necessary ports or IP ranges, the Cloud Protection Layer will not be able to validate your domains.
- Add the port of the destination server in the Dest. Port field and click Add Domain. Repeat this step for each domain.
- To verify a domain MX records for the domain must be pointing to the physical BESG for domains they are trying to add to CPL. They will then be able to verify the domains on the CPL (the status of the domain in the table will change from Verify to Re-verify).
Allowing connections from the Barracuda IP ranges
- When using the cloud protection layer all your incoming mail should come from our IP ranges. See the following webpage for the IP ranges in your region.
- If desired you can restrict incoming mail to only these IP addresses which will prevent any spammers from sending mail directly to your Barracuda.
If there are any problems or questions with any of these steps, please contact Barracuda Networks Technical Support.
Link to this page: