This article assumes you are deploying Barracuda Services for the first time. If you previously deployed Barracuda Cloud-to-Cloud Backup, Barracuda Email Security Service, or the Barracuda Cloud Archiving Service and want to migrate to Barracuda Essentials for Office 365, contact your Barracuda Networks sales representative.Complete All StepsBe sure to complete all steps on this page that are required for the components in your plan.
Connecting to Office 365 PowerShell is a simple three-step process where you install the required software, run the required software, and then connect to your Office 365 organization. You can save time by creating new Office 365 user accounts with a single PowerShell command. The only thing you need a pre-set.CSV (Excel) file.
For example, if you have Barracuda Cloud Archiving Service, be sure to create the send connector, as described in Step 2 below.Ensure Connectivity and Redundancy. Open your firewall ports to allow the IP address ranges for LDAP connectivity based on your Barracuda Email Security Service instance; see.(Optional).ImportantThe Barracuda Email Security Service connects with your network from various IP addresses, including performing LDAP lookups. To ensure that the service can connect with your network, allow traffic originating from the range of network addresses based on your Barracuda Email Security Service instance; see. Select Your PlanDetermine the plan that best suits your organization's needs. To complete the setup you must have a Barracuda Cloud Control account. If you do not already have an account, go to and click Create a User. Enter your name, email address, and company name, and specify whether this is a partner account.
Click Create User; f or partners, be sure to read. Follow the instructions emailed to the entered email account to create your Barracuda Cloud Control account. See before setting up your password.See also:. Go to and log in with your Barracuda Cloud Control credentials.Open a new browser window, go to, click Buy Now. In the Plan Details page, the selected plan displays; click the drop-down menu if you want to select a different option.Enter the Number of u sers, and select the Subscription Type. Verify your order summary in the right pane, and click Continue. If you are not signed into Barracuda Cloud Control, click Sign in in the right pane. If you do not have a Barracuda Cloud Control account, use the left pane to create and sign in to your account.
The Barracuda Account page displays your Barracuda Cloud Control account information. If you want to sign in using a different account, click Sign out and use a different account.
Select from the following Client Account options:. Add this service to an existing Barracuda account – Select the desired Account from the drop-down menu, and select your location from the Location of Use drop-down menu. Create a new Barracuda account for this service – Enter the new account details. Click Continue.In the Billing Details (Optional) page, enter your billing information to purchase the service, or leave the Billing Information section blank to start a free 14-day evaluation. Click Continue.Once the setup process is complete, click Finish. The setup page displays in Barracuda Cloud Control and your 14-day trial begins immediately.Click Set up to get started.
In Barracuda Cloud Control, in the left panel, click Barracuda Email Security Service. Click Domains, then click Add Domain. In the dialog box, enter the primary Office 365 Domain Name you want to filter, for example: example.com. Enter the Mail Server hostname (FQDN) or IP address for the domain entered in the previous step, for example: example-com.mail.protection.outlook.com.Click Add Domain.Click Verify in the Mail Servers column; the Domains Domain settings page displays. Select the manner in which to verify the domain ownership:. MX Records – Replace your current MX records with the Barracuda Email Security Service MX records displayed on the verify page. CNAME Records – Validate your domain by adding a CNAME record.Email to the domain's technical contact – Send a verification email to the technical contact email address listed on your domain's WHOIS entry.
For a list of region-specific MAS hostnames, see Data Centers by Region. Out of Office automatic reply types – Select None. Automatic replies – Select Allow automatic forwarding. Message reporting – Clear all options. Use rich-text format – Select Never. Supported Character Set – Set both options to None. Click Save.
Click Mail flow connectors, and click the + symbol. The Select your mail flow scenario page displays. From the From menu, select Office 365, and from the To menu, select Partner organization. Click Next.Enter a Name and (optional) Description to identify the connector. Click Next.Specify the domain, then click OK.Select Only when email messages are sent to these domains, click the + symbol, and in the add domain field, type your region-specific MAS hostname, for example: mas.barracudanetworks.com. Click Next.
Select Use the MX record associated with the partner's domain. Click Next. Select Always use Transport Layer Security (TLS) to secure the connection (recommended), then select Any digital certificate, including self-signed certificates. Click Next.In the confirmation page, verify your settings, then click Next.Office 365 runs a test to verify your settings.In the Barracuda Cloud Archiving Service, go to the Mail Sources SMTP Journaling page and copy the email address from the SMTP Journaling Info section, for example: [email protected] Office 365, paste this email address into the provided field in the Verification page, and click Validate. Best PracticeCreate a shared mailbox and use that mailbox for the NDR recipient.Configure Office 365 to Send Journal Mail. Log into Office 365 Exchange admin center.
Select compliance management j ournal rules. Click the +symbol.
In the new journal rule dialog box and complete the following:. Send journal reports to – Enter the journaling address from the Mail Sources SMTP page in the Barracuda Cloud Archiving web interface. This is called the journaling mailbox. Name – By default, the name of the journal rule is automatically generated from the journal recipients. If there are existing journal rules that contain the same journal recipients, numbers are automatically appended to the journal rule name to avoid duplicates. If you choose to override the automatically-generated name by typing in a custom name, verify the name is unique and descriptive. If the message is sent to or received from – Select Apply to all messages to journal all recipients.Journal the following messages – Select All messages to journal all messages regardless of source or destination.
Because the journaling mailbox may contain sensitive information, it is recommended that you create organization-wide policies that govern who can access the journaling mailboxes in your organization. Click Save. The rule is added toe journal rules table.Once you complete the configuration, mail begins forwarding to the Barracuda Cloud Archiving Service. Log in to the web interface as the administrator, and go to the Basic Dashboard page.
Processed mail displays in the Message Statistics table. Statistics are cached and may take up to 30 minutes to appear.
Create a New Service Account. Log in to your Office 365 Management Panel using an account with administrative privileges, and click users and groups in the left pane. Click the + symbol to create a new account.
In the details page, enter the details for the new service account, and click next. In the settings page, select Yes to assign administrator permissions, and from the drop-down menu, select Global administrator. Optionally, you can add an alternate email address and location.
![Login Login](/uploads/1/2/5/3/125354225/842494855.png)
Click next. In the assign licenses page, make no changes. Click next. In the send results in email page, click Create.
The service account details are sent to the admin. To activate the account, log in to your Office 365 Management Panel using the new service account, and update the password.Step 2.
Configure Permissions. Use this step to configure permissions for current users.There are two options you can use to give the service account created in Step 1. Create a New Service Account access to user accounts:.
Option 1 – Run a SharePoint Online Management Shell script to automatically apply the proper permissions to each user account; this is the preferred and fastest. If you have multiple users, this is also the easiest method.or. Option 2 – Ma nually configure each user account from within the Microsoft SharePoint Admin Center. If you have only a few users, this is the easiest method.Option 1. You must complete the steps in Option 1 each time you add new users.Option 2.
Configure Permissions from the Microsoft SharePoint Admin Center. Log in to your Office 365 Management Panel using the service account created in Step 1.
Create a New Service Account. In the left pane click Admin centers SharePoint, and click user profiles. Click Manage User Profiles:. In the Find profiles field, type the name of a user who's OneDrive for Business data is to be backed up, and then click Find:.
Click the user's Account name, and then click Manage site collection owners:. The site collection owners dialog box displays. In the Site Collection Administrators field, add the service account with administrative privileges or another account with administrative privileges:. Type the account name, and then click the Verify User ( ) icon, or. Click the Directory ( ) icon, and navigate to and select the account from the directory:. Click OK.
The service account or administrative account added as the user's Site Collection Administrator can now view the user's entire OneDrive account. Repeat Steps 3 through 7 for each user who's OneDrive for Business data is to be backed up with Barracuda Cloud-to-Cloud Backup.Step 3. Set Up Impersonation Permissions. Use these steps when adding all future users.Complete the following steps to set up impersonation permission for the service account on all newly created OneDrive users:. Log in to your Office 365 Management Panel using the service account created in Step 1. Create a New Service Account. In the left pane click Admin centers SharePoint, and click user profiles.
In the My Site Settings section, Click Setup My Sites. In the My Site Secondary Admin section, click Enable My Site secondary admin. In the Secondary admin field, type the username of the newly created service account. Click OK.Configure Impersonation for Exchange Online. In order for Barracuda Cloud-to-Cloud Backup to access user mailboxes for backup, you must create a new service account with administrative privileges and apply the impersonation role to that account.To configure impersonation within Exchange Online: Step 1. Create a New Service Account. Log in to your Office 365 Management Panel using an account with administrative privileges, and click users and groups in the left pane.
Click the + symbol to create a new account. In the details page, enter the details for the new service account, and click next. In the settings page, select Yes to assign administrator permissions, and from the drop-down menu, select Global administrator. Optionally, you can add an alternate email address and location. Click next. In the assign licenses page, make no changes.
Click next. In the send results in email page, click Create. The service account details are sent to the admin. To activate the account, log in to your Office 365 Management Panel using the new service account, and update the password.Step 2. Create Impersonation RoleOption 1. Manually Set Up Impersonation. Log in to your Office 365 Management Panel using an account with administrative privileges, and go to permissions admin roles.
Click the + symbol. In the new role group dialog box, type BarracudaBackupImpersonation in both the Name and Description fields:. Scroll down to Roles, and click the + symbol. From the list, select ApplicationImpersonation, and click add:. Click OK.
Scroll down to Members, select the service account created in Step 1: Create a New Service Account, and click add. Click OK. Click Save to save your settings and close the Role Group window.
The Impersonation role is now listed in Admin Roles. Use the following steps to assign the ApplicationImpersonation role using PowerShell:.At the PowerShell command prompt, enter the following command:New-ManagementRoleAssignment –name:impersonationAssignmentName –Role:ApplicationImpersonation –User:serviceAccountWhere:name is the friendly name of the role assignment. Each time you assign a role, an entry is made in the role-based access control (RBAC) roles list.
You can verify role assignments by using the Get-ManagementRoleAssignment cmdlet found in the Microsoft Dev Center article.Role is the RBAC role to assign. When you set up impersonation, you assign the ApplicationImpersonation role.User is the service account. Press Enter.