Barracuda Email Gateway

[Rijn Raju]

Hi All

Any idea how to integrate Barracuda Email gateway with wazuh?

Thanks

[Gonzalo Acuña]

Hi.
Generally, the requests are focused on integrating Barracuda's WAF product with wazuh, for which there is a decoder that works correctly in these cases. I have not yet been able to find information about integrations with the email protection product.
Anyway, we could analyze several options:

- If the log structure is the same as the WAF logs, you could use the [barracuda-decoder](https://github.com/wazuh/wazuh/blob/master/ruleset/decoders/0045-barracuda_decoders.xml) to handle these events.

- In the documentation of Barracuda it seems to indicate that you [could generate them in Syslog format](https://campus.barracuda.com/product/webapplicationfirewall/doc/93193324/how-to-integrate-the-barracuda-web-application-firewall-with-amazon-cloudwatch/), so you could think about [importing them via syslog](https://documentation.wazuh.com/current/user-manual/capabilities/log-data-collection/how-it-works.html#receiving-syslog-logs-in-a-custom-port) in Wazuh.

- In case the previous options don't give the expected results, it would still be possible to [generate a new ruleset](https://documentation.wazuh.com/current/user-manual/ruleset/custom.html) to identify and manage this product ([blog](https://wazuh.com/blog/creating-decoders-and-rules-from-scratch/)).


I hope this information helps you solve your query.