Ask the Community
Groups
Configuring Barracuda Sentinel Email Monitoring - Connect IT Community | Kaseya
<main> <article class="userContent"> <h2 data-id="this-will-walk-you-through-the-steps-of-configuring-the-barracuda-sentinel-app">This will walk you through the steps of configuring the Barracuda Sentinel App</h2> <p><strong>First Enable the Sentinel Monitor App</strong></p> <p>Logon to the console and enable the Sentinel App</p> <p><img src="https://us.v-cdn.net/6032361/uploads/migrated/C5BTADL4FZ3C/screen-shot-2021-01-19-at-2-25-49-pm.png" alt="Screen_Shot_2021-01-19_at_2.25.49_PM.png" class="embedImage-img importedEmbed-img"></img></p> <ol><li>From the Left Hand Navigation, Click On <strong>App Store</strong> </li> <li>Switch <strong>On</strong> the Barracuda Sentinel Monitor App</li> </ol><p><strong>Map The Sentinel Customers</strong></p> <ol><li>From the Left Hand Navigation, Click <strong>Integrations</strong> </li> </ol><p><img src="https://us.v-cdn.net/6032361/uploads/migrated/DU48V9RJ23XQ/screen-shot-2021-01-19-at-2-29-00-pm.png" alt="Screen_Shot_2021-01-19_at_2.29.00_PM.png" class="embedImage-img importedEmbed-img"></img></p> <p>2. Click <strong>Email Security</strong>, then Click <strong>Barracuda Sentinel Monitor</strong></p> <p>This form will allow you to paste in the Account Access Token (ID) for Barracuda Sentinel for each customer that is managed.</p> <p><strong>To Find the Account Access Token (ID)</strong></p> <p>1. Logon to Barracuda Sentinel Dashboard and change context to the appropriate customer account.</p> <p><img src="https://us.v-cdn.net/6032361/uploads/migrated/1N4LRWUUXXQG/screen-shot-2021-01-19-at-2-32-33-pm.png" alt="Screen_Shot_2021-01-19_at_2.32.33_PM.png" class="embedImage-img importedEmbed-img"></img></p> <p> </p> <p>2. In the URL bar of the browser, click to display the full URL</p> <p><img src="https://us.v-cdn.net/6032361/uploads/migrated/H6HT15XQ8RX5/screen-shot-2021-01-19-at-2-34-21-pm.png" alt="Screen_Shot_2021-01-19_at_2.34.21_PM.png" class="embedImage-img importedEmbed-img"></img></p> <p>3. In the URL find the Account Access Token (ID), it should be formatted like :</p> <p>86d6d158-738e-4139-81b3-6944488e137c</p> <p>4. Copy the Account Access Token (ID) from the URL to the Integrations tab for the appropriate customer.</p> <p>5. Repeat steps 1-4 for all customer accounts, when finished click <strong>Save</strong> on the Integrations tab in the RocketCyber console.</p> <p> </p> <p><strong>Configure Sentinel Syslog Destination</strong></p> <p>1. Logon to the Sentinel Dashboard</p> <p><img src="https://us.v-cdn.net/6032361/uploads/migrated/L79S4OPMDJ0E/screen-shot-2021-01-19-at-2-41-21-pm.png" alt="Screen_Shot_2021-01-19_at_2.41.21_PM.png" class="embedImage-img importedEmbed-img"></img></p> <p>2. Click the <strong>Gear</strong> icon on the upper right-hand corner of the screen</p> <p><img src="https://us.v-cdn.net/6032361/uploads/migrated/FG1NTYBBIFIP/screen-shot-2021-01-19-at-2-42-34-pm.png" alt="Screen_Shot_2021-01-19_at_2.42.34_PM.png" class="embedImage-img importedEmbed-img"></img></p> <p>3. Click on <strong>Syslog Integration</strong></p> <p>4. In the IP Address/Hostname field type: <strong>syslog.rocketcyber.com</strong></p> <p>5. Leave Port set to 6514</p> <p>6. Click <strong>Save</strong></p> <p><img src="https://us.v-cdn.net/6032361/uploads/migrated/WG33293DUAE1/screen-shot-2021-01-19-at-2-44-49-pm.png" alt="Screen_Shot_2021-01-19_at_2.44.49_PM.png" class="embedImage-img importedEmbed-img"></img></p> <p>7. Click the <strong>Test</strong> button to test the connection.</p> <p> </p> <p>Congratulations. Sentinel Monitoring app should now start forwarding data to the RocketCyber Console.</p> </article> </main>