Barracuda Web Filter

You can integrate Barracuda Web Filter appliance events with JSA.

The Barracuda Web Filter DSM for JSA accepts web traffic and web interface events in syslog format that are forwarded by Barracuda Web Filter appliances.

Web traffic events contain the events, and any actions that are taken when the appliance processes web traffic. Web interface events contain user login activity and configuration changes to the Web Filter appliance.

Before You Begin

Syslog messages are forward to JSA by using UDP port 514. You must verify that any firewalls between JSA and your Barracuda Web Filter appliance allow UDP traffic on port 514.

Configuring Syslog Event Forwarding

Configure syslog forwarding for Barracuda Web Filter.

1. Log in to the Barracuda Web Filter web interface.
2. Click the Advanced tab.
3. From the Advanced menu, select Syslog.
4. From the Web Traffic Syslog field, type the IP address of your JSA console or Event Collector.
5. Click Add.
6. From the Web Interface Syslog field, type the IP address of your JSA console or Event Collector.
7. Click Add.

   The syslog configuration is complete.

Configuring a Log Source

JSA automatically discovers and creates a log source for syslog events from Barracuda Web Filter appliances.

The following configuration steps are optional.

1. Log in to JSA.
2. Click the Admin tab.
3. On the navigation menu, click Data Sources.
4. Click the Log Sources icon.
5. Click Add.
6. In the Log Source Name field, type a name for your log source.
7. In the Log Source Description field, type a description for the log source.
8. From the Log Source Type list, select Barracuda Web Filter.
9. Using the Protocol Configuration list, select Syslog.
10. Configure one of the following parameters:

    Table 1: Syslog Parameters

    Parameter	Description
    Log Source Identifier	Type the IP address or host name for the log source as an identifier for events from your Barracuda Web Filter appliance.

11. Click Save.
12. On the Admin tab, click Deploy Changes.

    The log source is added to JSA. Events that are forwarded by Barracuda Web Filter are displayed on the Log Activity tab of JSA.