It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda XDR

Setting up WatchGuard Collector

  • Last updated on

This setup is for the XDR Collector only. If you are using a physical or virtual sensor, refer to Integrating WatchGuard Firebox Firewall.

To set up WatchGuard Collector, follow the procedures below:

  • Enable WatchGuard Collector
  • Install the XDR Collector
  • Open the Port on the XDR Collector Host

Enable WatchGuard Collector

  1. In Barracuda XDR Dashboard, navigate to Administration >  Integrations.
  2. On the WatchGuard Collector card, click Setup.
  3. Select the Enable check box.
  4. Click Save.

Install the XDR Collector

When collecting logs from one or more integrated data sources, always set up the XDR Collector on a dedicated host server. Don't use an existing server because the amount of data produced by logs can impact critical infrastructure.

Configure the Firewall

  • To add a Syslog server to the WatchGuard Firewall, follow the steps in the Watchguard documentation.
  • When entering the necessary information for each syslog server that is added, make sure that the port is pointing to 9270, not to the default port that is mentioned in the documentation.

Open the Port on the XDR Collector Host

Ensure incoming traffic is allowed on UDP port 9270.


sudo ufw allow 9270/udp


netsh advfirewall firewall add rule name="WatchGuard Events" dir=in action=allow protocol=UDP localport=9270