It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda NextGen Firewall X
Overview Documentation Materials

This Product is End-of-Life and End-Of-Support

End-Of-Life and End-Of-Support on December 1st, 2020: All Barracuda Firewall X-Series sales will cease; neither new sales nor any renewals will be available. If you currently hold a maintenance and support contract, you will continue to receive our award-winning support and services until your contract expires. Please see the End-Of-Life definition as described in the End of Support and End of Life Information.

How to Configure Email Notifications

  • Last updated on

The Barracuda NextGen Firewall X-Series can alert the administrator of important system events by sending notification emails. You can configure a notification email policy for each event, and to limit the number of emails for frequently occurring events, you can define up to three thresholds. Thus, the administrator will receive an email only when the number of events exceeds the threshold set in the timespan. The following events can trigger email notifications:

Security Events
  • ATD Cloud Status – State of the connection between the firewall and the Barracuda ATP cloud.
  • ATD malicious activity detected – A malicious file has been detected by Advanced Threat Protection (ATP).
  • User added to quarantine – A user has been added to the ATP/ATD quarantine.
  • Duplicate IP Detected – An IP address living on the system has additionally been detected in the network.
  • IPS Drop Alert – Traffic matching an IPS Event with the Action set to Drop and the Log set to Alert.
  • IPS Drop Warning – Traffic matching an IPS Event with the Action set to Drop and the Log set to Warning.
  • IPS Drop Notice – Traffic matching an IPS Event with the Action set to Drop and the Log set to Notice.
  • IPS Log Alert – Traffic matching an IPS Event with the Action set to Log and the Log set to Alert.
  • IPS Log Warning – Traffic matching an IPS Event with the Action set to Log and the Log set to Warning.
  • IPS Log Notice – Traffic matching an IPS Event with the Action set to Log and the Log set to Notice.
Operational Events

  • Critical Disk Space – More than 90% of available disk space is in use on at least one partition.

    This event is always triggered during firmware updates. Do not set the Notification policy to Immediate.

  • Critical System Load – System load is extremely high. The X-Series Firewall will reboot if this condition persists.
  • Route Changed, uplink not available – An uplink has become unreachable due to changes in the routing configuration.
  • HA Partner Unreachable – The other HA unit in the HA cluster is no longer reachable.
  • HA Failover to this System – This X-Series Firewall has taken over as the active HA partner.
  • HA Failover to Partner – The other X-Series Firewall in the HA cluster has taken over as the active HA partner.
  • License expired or invalid – The system license has expired or is running on invalid hardware.
  • System Reboot – The X-Series Firewall has rebooted.
  • System Shutdown – The X-Series Firewall has been shut down.

Step 1. Enable Email Notifications

  1. Go to the BASIC > Administration page.
  2. In the Email Notifications section, enter the System Alerts Email Address. 
  3. Set Enable Email Notifications to Yes. 

  4. Enter the SMTP Server. E.g., mailserver.yourdomain.com

    Enter an SMTP server that does not require authentication or encryption.

    notification01.png

  5. Enter the Sender Address. Emails sent by the X-Series Firewall use this email in the FROM section.
  6. Click Save.

Step 2. Configure Thresholds and Event Notifications

  1. Stay on the BASIC > Administration page.
  2. In the Email Notifications section, click Show next to the Advanced Options. The Email Notification Advanced pop-over opens.
    notification02.png
  3. For each Threshold:
    • Enter how many events must occur.
    • Select the timespan from the dropdown. 
    notification03.png
  4. Select the Notification for each Security and Operational Event: When the number of events in the time-span defined for the first threshold has been reached and email notification is sent.
    • None – No notification emails are sent for this event.
    • Immediate – An email notification is immediately sent for every event.
    • Threshold 1 – When the number of events in the timespan defined for the first threshold has been reached and an email notification is sent.
    • Threshold 2 – When the number of events in the timespan defined for the second threshold has been reached and an email notification is sent.
    • Threshold 3 – When the number of events in the timespan defined for the third threshold has been reached and an email notification is sent. 
    notification04.png
  5. Click Save.