Setting up ATR

In Barracuda XDR, Automated Threat Response (ATR) is automated threat remediation for alerts reported by:

• Barracuda CloudGen Control Center

• Barracuda CloudGen Standalone

• Cisco Meraki

• FortiGate

• Microsoft 365 Cloud

• Palo Alto

• Sophos

• SonicWall

• SecureEdge

Automated threat remediation saves time and money and frees human efforts to focus on other tasks.

The following is the ATR process:

1. An event occurs that triggers an alarm in Barracuda XDR.

2. The alert is sent to the Barracuda XDR ATRplatform.

3. The ATR platform determines whether the alert is malicious.

4. If the alert is identified as malicious, the IP Address is automatically added to the Barracuda CloudGen Firewall Block list.

5. The alert is closed.

6. If the alert is not identified as malicious, the IP Address is not blocked and the alert is closed.

To set up ATR, do one of the following:

• Setting up ATR for Barracuda CloudGen Standalone Firewall

• Setting up ATR for Barracuda CloudGen Control Center Firewall

• Setting up ATR for Cisco Meraki Firewall

• Setting up ATR for FortiGate Firewall

• Setting up ATR for Microsoft 365 Cloud

• Setting up ATR for the Palo Alto Firewall

• Setting up ATR for SecureEdge

• Setting up ATR for Sophos XG and XGS Firewall

• Setting up ATR for SonicWall Firewall

• Setting up ATR for SonicWall Firewall

• Editing XDR ATR settings for a firewall