Security Compliance

Integrate Barracuda Web Filter with SolarWinds SEM

This article outlines procedures for configuring the Barracuda Web Filter to the SEM appliance and SEM Manager.

First published date

10/9/2018 8:48 PM

Last published date

10/9/2018 8:48 PM

Overview

This article outlines procedures for configuring the Barracuda Web Filter to the Security Event Manager (formerly Log & Event Manager) appliance and SEM Manager.

Product section

Security Event Manager

Cause

 

    Resolution

    To configure Barracuda Web Filter to log to your SEM appliance:

    1. Open your Barracuda Web Filter admin interface.
    2. Click Advanced > Syslog.
    3. Enter the IP address of your SEM appliance, and then click OK.
      Note: Barracuda does not allow you to specify the local facility {file} to receive data. Also, verify that W3C Log Format is set to No. 

    To configure the Barracuda Web Filter connector on your SEM Manager:

    1. Open your SEM console and log in to your SEM Manager as an administrator.
    2. Click the gear icon next to your SEM Manager, and then select Connectors.
    3. In the Connector Configuration window, enter Barracuda Web Filter in the search box at the top of the Refine Results pane.
    4. Click the gear icon next to the Barracuda Web Filter connector, and then select New.
    5. Enter a custom Alias or accept the default.
    6. If you are finished configuring the connector, click Save.
    7. Click the gear icon next to the new connector, denoted by an icon in the Status column, and then click Start.
    8. To close the Connector Configuration window, click Close.
    9. View the Barracuda data in the All Alerts view, or create a filter AnyAlert.ToolAlias=*barracuda* to specifically look at that data.
    Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment.  You elect to use third party content at your own risk, and you will be solely responsible for the incorporation of the same, if any.