It seems like your browser didn't download the required fonts. Please revise your security settings and try again.

Configure Microsoft Exchange Online Email Import Using EWS

  • Last updated on

This article refers to Barracuda Message Archiver firmware version 5.3 or higher, and Microsoft Exchange Online.

To set up Exchange Online with Barracuda Message Archiver firmware version 5.2, see Configure Microsoft Exchange Online Email Import.

Exchange Integration now supports the Exchange Web Services (EWS) protocol for connecting to Exchange Online. With the deprecation of Basic Authentication in Exchange Online at the end of October 2020, using EWS will allow Exchange Integration to continue to work with Exchange Online. You will need to configure a new Exchange Integration source, and new actions configured using that source will use EWS. The ability to update existing nightly actions to use the new source is currently not available. 

In addition to ensuring that Exchange Integration will continue to connect to Exchange Online after October 2020, the switch to EWS simplifies the Exchange Integration configuration by eliminating the need to use a service account and the accompanying requirement to update the service account's permissions after creating new users with mailboxes.

Note that EWS sources do not support Email Stubbing actions.

Requirements

  • You must have an Office 365 account with administrator privileges. 
  • Ensure outbound connections to port 443 are open and use the MAS hostname mas.barracudanetworks.com to allow the Barracuda Message Archiver outbound connection to the Barracuda Cloud Archiving Service (BCAS). This is required to authorize a new source and to run each action.

    Your Microsoft administrator account credentials will only be used to authorize the BCAS application to keep track of authorization details that allow the appliance access to EWS. Using Exchange Integration with EWS does not require a BCAS subscription or connecting the Barracuda Message Archiver to Cloud Storage. BCAS does not handle any data in the mailboxes.


Note that you will no longer need a service account to set up an Exchange Online source.

Add a New Exchange Online Source

These instructions will set up a new Exchange Online source using EWS. To add a new Exchange Server source, see Microsoft Exchange Server Deployment.

  1. Log into the Barracuda Message Archiver as the admin, and go to MAIL SOURCE > Exchange Integration.
  2. Click Start New Action. In the Select Action page, click Email Import.

  3. In the Select Source page, click Add New Source.
  4. Select Exchange Online to configure using EWS.
    exint-source-choice.png
  5. Enter a configuration name and click Authorize.
    exint-exchange-online.png
  6. If you are not already logged in, a new tab or pop-up window prompts you to enter your Office 365 administrator account login information from which Exchange Integration will process mail. 

    If you are not logged in and do not see the tab or window, ensure that pop-ups from the Barracuda Message Archiver are not blocked.

  7. Click Accept to authorize the Barracuda Cloud Archiving Service application to access your details.
    exint-microsoft-authorization.png
  8. You are redirected back to the Select Source page. You should now see the new source in the list. Select the new source and click Continue.
    exint-sources.png
  9. In the Configure Action page, select All Users from the drop-down menu, and specify the desired Date and Schedule settings. Click Continue.

  10. Verify the configuration settings in the View Summary page, and then click Submit to add the Email Import to the Scheduled Actions table.

Edit an Exchange Online Source

You can revoke access to the Barracuda Cloud Archiving Service application by removing it from your organization's Enterprise Applications in Microsoft's Admin interface. To restore access, you can add a new source and authorize the application again. If you have not removed the Exchange Online source on the Exchange Integration page, you can edit the source and click Re-authorize. This takes you back to Microsoft's site to log in and consent to the required application permissions again.

  1. Log into the Barracuda Message Archiver as the admin, and go to MAIL SOURCE > Exchange Integration.
  2. Click Start New Action. In the Select Action page, click Email Import.
  3. In the Select Source page, click Edit next to the source you want to change.
  4. If needed, change the configuration name and click Save. Click Re-authorize to re-authorize consent to the Barracuda Cloud Archiving Service application.
    exint-ews-edit.png
Last updated on