We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.

Migrating from Barracuda Email Security Gateway to Barracuda Email Security Service

  • Last updated on

This article describes what to expect when migrating from Barracuda Email Security Gateway to Barracuda Email Security Service.

Before Migration

Before you can begin migration, you must complete the following steps. 

1. Create a Barracuda Essentials Account

To perform this migration, you must have a Barracuda Essentials account. 

  1. Create an account in Barracuda Cloud Control, as described in Create a Barracuda Cloud Control Account.
  2. Start a free trial of Barracuda Essentials, as described in the Step 1. Set Up Essentials section of Set Up Essentials for Office 365.

    Note that you must purchase a license for Barracuda Essentials before the 14-day trial period expires.

2. Add Domains and Test Connectivity
  1. Add and verify your domains as described in the Step 2. Configure Connectors and Permissions section of Set Up Essentials for Office 365.
  2. Test domain connectivity by sending a test email. Repeat this sequence for each domain.
    1. In Barracuda Cloud Control, select Email Security in the left panel.
    2. Navigate to the Domains page. For the appropriate Domain Name, go to Settings > Edit. At the top of the Domain Settings page, under Mail Server, click Test.
    3. Enter an email address and click Send. The system sends a message to the email address you specify, with the return address Barracuda Email Test
3. Open IP Ports to Receive Email

Open IP ports on your firewall, based on your region, as described in Barracuda Email Security Service IP Ranges.

4. Open Ports for LDAP Synchronization

Open your firewall ports to allow the IP address ranges for LDAP connectivity based on your Barracuda Email Security Service instance, as described in Barracuda Email Security Service IP Ranges.

The Migration Process

Migrating from Barracuda Email Security Gateway to Barracuda Email Security Service requires the following steps:

  1. Convert and Import Configurations
  2. Copy Users into Barracuda Email Security Service

  3. Change MX Records to point to Barracuda Email Security Service


1. Convert and Import Configurations
For this step, you can convert your configurations manually or you can choose to use Barracuda's conversion tool. For instructions on using the conversion tool, refer to Conversion Tool for Migrating to Barracuda Email Security Service.

 

This article contains all of the required steps for complete migration from Barracuda Email Security Gateway to Barracuda Email Security Service. If you choose to use the conversion tool, you must still perform all of the other steps described in this article.

 

Configurations to Import

The following table lists configurations in Barracuda Email Security Gateway that you must convert to a format compatible with Barracuda Email Security Service. 

Email Security Gateway

Email Security Service

Block/Accept > IP filters Inbound Settings > IP Address Policies

Allowed IP/Range

IP Blocking / Exemption

Blocked IP/Range

IP Blocking / Exemption (Tagging is not an option)

Block/Accept > Recipient Filters Inbound Settings > Recipient Policies

Allowed IP/Range

Recipient Policies

Blocked IP/Range

Recipient Policies (Tagging is not an option)

Encrypted Sender Addresses and Domains (Outbound Only)

-

Redirected Sender Addresses and Domains (Outbound Only)

-

Block/Accept > Sender Filters Inbound Settings > Sender Policies

Allowed IP/Range

Recipient Policies

Blocked IP/Range

Recipient Policies (Tagging is not an option)

Encrypted Sender Addresses and Domains (Outbound Only)

-

Redirected Sender Addresses and Domains (Outbound Only)

-

Block/Accept > Content Filtering Inbound Settings > Content Policies

Content Filters

Message Content Filter (Subject, Header, Body)

Attachment Content Filters

Message Content Filter (Attachments)

Predefined Filters

Predefined Filters

Block/Accept > Content Filtering Outbound Settings > Content Policies

Content Filters

Message Content Filter (Subject, Header, Body)

Attachment Content Filters

Message Content Filter (Attachments)

Predefined Filters

Predefined Filters

Block/Accept > Attachment Filters Inbound Settings > Content Policies

Attachment Filename Filters

Attachment Filter

Attachment File Type Filters

-

Attachment MIME Type Filters

Attachment Filter

Password Protected Archive Filtering

Attachment Filter

Block/Accept > Attachment Filters Outbound Settings > Content Policies

Attachment Filename Filters

Attachment Filter

Attachment File Type Filters

-

Attachment MIME Type Filters

Attachment Filter

Password Protected Archive Filtering

Attachment Filter

 

2. Copy Users into Barracuda Email Security Service

Use this section to set up directory services for one or more of your domains. You can use either Azure AD or LDAP directory services to enable single sign on (SSO) and synchronization of users lists. 

3. Change Your MX Records to point to Barracuda Email Security Service

Update your MX records to point to Barracuda Email Security Service, as described in How to Set Up MX Records for Domain Verification.

After Migration

After you complete the migration process, complete the following steps.

1. Verify Email Flow

Send a test email to each of your domains to verify that you configured your account and migrated your settings correctly.

In Barracuda Email Security Service, navigate to Overview > Message Log to ensure that you can see the messages.

2. (Optional) Configure Outbound Email for Barracuda Email Security Service

Optionally follow "Step 5. Configure Outbound Mail" in How to Configure Office 365 for Inbound and Outbound Mail.

Migration Caveats

  • Message Log data will not be transferred to Barracuda Email Security Service.
  • Per user settings must be added separately.
  • Domain-specific settings are not transferred automatically.
  • End users must log into a different URL to access quarantined email.
  • If you have an existing Cloud Protection Layer or Barracuda Essentials account into which you are migrating data, all of the existing data in that account will be replaced by the data from your Barracuda Email Security Gateway device.
  • Inbound and outbound rate control limits can be customized in Barracuda Email Security Gateway, but not in Barracuda Email Security Service. Refer to the following articles for details:

Important

  • When importing configurations, copy your settings to the global account level, and not to the domain level.
  • You must manually add configurations that are not moved by the conversion tool.
  • Ensure that you have migrated all the settings and configurations needed.

 

 

Last updated on