It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus

How to Update Microsoft Exchange Online Existing Nightly Actions with EWS

  • Last updated on


This article refers to Barracuda Message Archiver firmware early release version 5.3.0.009 or higher, and Microsoft Exchange Online. For more information on how to update to the latest firmware, see Updating Your Firmware and Definitions.

Exchange Integration now supports the Exchange Web Services (EWS) protocol for connecting to Exchange Online. With recent changes from Microsoft, using EWS ensures that Exchange Integration will continue to work with Exchange Online. In addition, the switch to EWS simplifies the Exchange Integration configuration by eliminating the need to use a service account and the accompanying requirement to update the service account's permissions after creating new users with mailboxes.

Note that EWS sources do not support Email Stubbing actions.

Requirements

  • You must have a Microsoft 365 account with administrator privileges. 

  • An Application Id and secret from Microsoft 365. See How to Create an Application ID and Application Secret for Barracuda Message Archiver in Microsoft 365.
  • Your Tenant Name and Primary domain name from Microsoft 365. See How to Find Your Tenant and Primary Domain.

  • Ensure outbound connections to port 443 are open and use the MAS hostname mas.barracudanetworks.com to allow the Barracuda Message Archiver outbound connection  to  the Barracuda Cloud Archiving Service (BCAS).  This is required to authorize a new source and to run each action.

    Your Microsoft administrator account credentials will only be used to authorize the Barracuda Message Archiver to keep track of authorization details that allow the appliance access to EWS. Using Exchange Integration with EWS does not require a BCAS subscription or connecting the Barracuda Message Archiver to Cloud Storage. BCAS does not handle any data in the mailboxes.


Note that you will no longer need a service account to set up an Exchange Online source.

Update an Existing Nightly Action

Use the following instructions to update an existing nightly action to use EWS.

  1. Log into the Barracuda Message Archiver as the admin, and go to MAIL SOURCE > Exchange Integration.

  2. For existing actions, click Upgrade Connector next to the nightly action you want to change.

    Note that you can only update existing nightly actions to new EWS sources.

    ewsMigrate.png

  3. Enter a Configuration Name, App Id, Secret Key, Tenant Name, and O365 Domain Name.

  4. Click Authorize.
    bma_authorizeExchangeNew.png

    An inaccurate computer system clock can cause authorization problems. Check that your computer's system clock is set to the current date and time before you click Authorize


  5. Alternatively, if you are unable to use the Upgrade Connector option, you can manually add a new EWS source:

    1. At the top left of the Scheduled Actions section, click Start New Action. In the Select Action page, click Email Import.

    2. In the Select Source page, click Add New Source.
    3. Select Exchange Online to configure using EWS.
      ewsNewSource.png
    4. Enter a Configuration Name, App Id, Secret Key, Tenant Name, and O365 Domain Name. 
    5. Click Authorize.

  6. If you are not already logged in, a new tab or pop-up window prompts you to enter your Microsoft 365 administrator account login information from which Exchange Integration will process mail. 

    If you are not logged in and do not see the tab or window, ensure that pop-ups from the Barracuda Message Archiver are not blocked.

    ewsPermissions.png

  7. Click Accept to authorize the Barracuda Message Archiver to access your details.

  8. After the authorization tab or window closes, switch back to the Select Source page. You should now see the new source in the list. Select the new source and click Continue.
    ewsSources.png
    The selected source is now at the top of the nightly job list using the new connector. The Upgrade Connector option is no longer available, indicating that the EWS server configuration is being used.
    ewsSuccess.png

How to Find your Tenant and Primary Domain

  1. Log into the Microsoft 365 Admin center as a global admin https://admin.microsoft.com/.

  2. On the left-hand menu, select Overview and copy down the Name and Primary domain.
    bma_TenantPrimaryDomain.png

The Name and Primary domain you copied down can now be used to authorize the Barracuda Message Archiver permissions to import data from Exchange Online.