Barracuda
Barracuda normalizes Barracuda events and enables you to analyze Barracuda data. Logpoint aggregates and normalizes the Barracuda logs so you can analyze the information through Barracuda dashboards. The dashboards provide visualization of attacks, URL details, content type, banned attachments and spam fingerprints detected in your network. You can customize it to perform in-depth analysis by changing the data used in a search.
Key Information
The modularized compiled normalizer BarracudaCompiledNormalizer that includes all barracuda-related compiled normalizers is now available. The non-modularized Barracuda compiled normalizers are available for this release only. To learn more, go to Compiled Normalizer.
Package Details
Enhancements
| Description | Issue ID | Reference ID |
|---|---|---|
|
Added Syslog Collector based Barracuda log source template, simplifying the log source configuration process. To learn more, go to Creating Log Source via a Template. |
KB-22691 |
- |
Barracuda v6.0.0
Release Date: May 24, 2023
Supported On: Logpoint v6.7.4 and later
Download: Barracuda_6.0.0.pak
SHA256: 5b3f64207154d4b2d426eb184cc1eb0c284a2b896514b6c30cfa42cf0654c7b9
Enhancements
| Description | Issue ID | Reference ID |
|---|---|---|
|
Added a new compiled normalizer BarracudaCompiledNormalizer to support Web Security Gateway, Email Security Service, Next Generation Firewall, Cloud Email Filter, Email Security Gateway and Web Application Firewall logs. |
KB-16819 |
- |
| Updated BarracudaEmailSGCompiledNormalizer to normalize Email SG logs when datetime and host fields are not in the Syslog header. |
KB-17705 |
68184 |
| Updated the signatures in BarracudaNGFirewallCompiledNormalizer based on the LP_Barracuda NG Firewall label package. |
KB-18135 |
68786 |
Bug Fixes
The following issues are fixed:
|
Description |
Issue ID |
Reference ID |
|---|---|---|
| Some Barracuda Web Security Gateway logs were not normalized by BarracudaWSGCompiledNormalizer. |
KB-20201 |
72997 |
| Some Next Gen Firewall logs were not properly normalized by the modular BarracudaNGFirewallCompiledNormalizer as compared to the non-modular BarracudaNGFirewallCompiledNormalizer. |
KB-19095 |
- |
Barracuda v5.3.0
Release Date: May 20, 2022
Supported On: Logpoint v6.7.0 and later
Download: Barracuda_5.3.0.pak
SHA256: 3ea64425da3a73859ec262b4c500d746eae3cdc730f555f32a01b9b8165b2586
Enhancement
|
Description
|
Issue ID
|
Reference ID
|
|---|---|---|
|
Added a new compiled normalizer BarracudaWSGCompiledNormalizer to support Web Security Gateway logs.
|
KB-16835 | - |
Barracuda v5.1.0
Enhancement
| Description | Issue ID | Reference ID |
|---|---|---|
|
Added a new dashboard LP_Barracuda Web Application Firewall and a search template LP_BarracudaWAF for Barracuda WAF events.
|
KB-12221 | 52295 |
| Added a new normalization package LP_Barracuda Cloud Email Filter to normalize the Barracuda Cloud Email Filter logs. | KB-14373 | 60737 |
| Added a new signature in LP_Barracuda NG Firewall to normalize the Barracuda Intrusion Prevention System (IPS) logs. | KB-11253 | 48244 |
| Added a new label IPS for the Barracuda Intrusion Prevention System (IPS) logs. | ||
| Changed the norm_id field to BarracudaEmailSG, which was previously BarracudaSVFirewall in LP_Barracuda Email Security Gateway. | KB-13109 | - |
|
Updated the labels in BarracudaNGFirewallCompiledNormalizer and BarracudaWAFCompiledNormalizer based on the label packages LP_Barracuda NG Firewall and LP_Barracuda Web Filter. |
KB-14055 | |
| Renamed the severity field to log_level in BarracudaNGFirewallCompiledNormalizer. | KB-16579 |
Bug Fixes
The following issues are fixed:
|
Description
|
Issue ID
|
Reference ID
|
|---|---|---|
| Some Barracuda Network Gateway Firewall logs were not normalized by BarracudaNGFirewallCompiledNormalizer and LP_Barracuda NG Firewall. | KB-16548, KB-16402 | 65121 |
| Some Barracuda Email Security Gateway logs were not normalized by BarracudaEmailSGCompiledNormalizer. | KB-16583 | - |
Barracuda v3.4.0
Release Date: May 14, 2020
Supported On: Logpoint v6.0.0 to v6.6.6
Download: Barracuda_3.4.0.pak
SHA256: 88019225babc795ac922492e8e15e2e496de6fcd08fcbfc0777d4892de75e78f
Enhancements
| Description | Issue ID | Reference ID |
|---|---|---|
|
Added a new dashboard LP_Barracuda Web Application Firewall and a search template LP_BarracudaWAF for Barracuda WAF events.
|
KB-12221 | 52295 |
| Added a new normalization package LP_Barracuda Cloud Email Filter to normalize the Barracuda Cloud Email Filter logs. | KB-14373 | 60737 |
| Added a new signature in LP_Barracuda NG Firewall to normalize the Barracuda Intrusion Prevention System (IPS) logs. | KB-11253 | 48244 |
| Added a new label IPS for the Barracuda Intrusion Prevention System (IPS) logs. | ||
| Changed the norm_id field to BarracudaEmailSG, which was previously BarracudaSVFirewall in LP_Barracuda Email Security Gateway. | KB-13109 | - |
|
Updated the labels in BarracudaNGFirewallCompiledNormalizer and BarracudaWAFCompiledNormalizer based on the label packages LP_Barracuda NG Firewall and LP_Barracuda Web Filter. |
KB-14055 | |
| Renamed the severity field to log_level in BarracudaNGFirewallCompiledNormalizer. | KB-16579 |
Bug Fixes
The following issues are fixed:
|
Description
|
Issue ID
|
Reference ID
|
|---|---|---|
| Some Barracuda Network Gateway Firewall logs were not normalized by BarracudaNGFirewallCompiledNormalizer and LP_Barracuda NG Firewall. | KB-16548, KB-16402 | 65121 |
| Some Barracuda Email Security Gateway logs were not normalized by BarracudaEmailSGCompiledNormalizer. | KB-16583 | - |
Support
If you have any questions or require assistance, create a support ticket.
Best regards,
Comments
Article is closed for comments.