Setting up SOAR

In Barracuda XDR, Security Orchestration, Automation, and Response (SOAR) is automated threat remediation for alerts reported by:

• Barracuda CloudGen Control Center Firewall

• Barracuda CloudGen Standalone Firewall

• Cisco Meraki Firewall

• FortiGate Firewall

• Microsoft 365 Cloud

• Palo Alto Firewall

• SonicWall Firewall

Automated threat remediation saves time and money and frees human efforts to focus on other tasks.

The following is the SOAR process:

1. An event occurs that triggers an alarm in Barracuda XDR.

2. The alert is sent to the Barracuda XDR SOAR platform.

3. The SOAR platform determines whether the alert is malicious.

4. If the alert is identified as malicious, the IP Address is automatically added to the Barracuda CloudGen Firewall Block list.

5. The alert is closed.

6. If the alert is not identified as malicious, the IP Address is not blocked and the alert is closed.

To set up SOAR, do one of the following:

• Setting up SOAR for Barracuda CloudGen Standalone Firewall

• Setting Up SOAR For Barracuda CloudGen Firewall

• Setting up SOAR for Cisco Meraki Firewall

• Setting up SOAR for FortiGate Firewall

• Setting up SOAR for Microsoft 365 Cloud

• Setting up SOAR For the Palo Alto Firewall

• Setting up SOAR for SonicWall Firewall

• Editing XDR SOAR Settings for a Firewall