Release Notes

Updated the latest Email Gateway Defense best practices guide. See Best Practices Guides.

Email Gateway Defense and Email Protection now support multiple display languages across the user interface. Users can select their preferred display language from the Profile menu in the bottom-right corner. The selected language persists across sessions. Non-UI elements such as notifications, exports, and reports currently display in English.

Email Gateway Defense now supports shared IP ranges for outbound relay. For more information, see Outbound Mail Scanning.

MSP administrators can now remove risky email policies across multiple managed accounts at once in Email Protection. Risky policies are overly broad allow rules that can bypass email security checks, such as broad external domain allows like vendor.com. When reviewing risky policies for a single account, the associated user is now displayed alongside user-level sender policies. For more information, see Multi-Account Risky Policy Remediation.

Certain features with exemptions are available at the account level only and are not supported at the domain level:

• Bulk email – Bulk Email Detection

• Barracuda Real-Time System (BRTS) – Intent Analysis - Inbound Mail

• Email warning banners and anti-fraud intelligence – Anti-Fraud and Anti-Phishing Protection

• Barracuda Reputation Block List (BRBL) – Barracuda Reputation and Email Categorization

• Language policies – Regional Policies

Email Gateway Defense has updated the list of file types scanned by the Advanced Threat Protection (ATP) service to expand coverage and improve detection of emerging threats. For more information, see Understanding Advanced Threat Protection.

Email Gateway Defense now supports sender exemptions for Email Warning Banners, Regional Policies, Barracuda Real-Time System (BRTS), Anti-Fraud Intelligence, and Barracuda Reputation Block List (BRBL), allowing administrators to exclude trusted senders from these security checks. For more information, see the following Campus articles:

• Email Warning Banner Messages

• Regional Policies

• Intent Analysis - Inbound Mail

• Anti-Fraud and Anti-Phishing Protection

• Barracuda Reputation and Email Categorization

Email Gateway Defense now detects and highlights risky policy configurations that can allow email to bypass security checks. This release focuses on overly broad allow rules, such as whole-domain allows for large external senders and wildcard patterns like *.vendor.com, which can increase exposure to spoofing and impersonation attacks. For more information, see Risky Policies Detection and Remediation in Email Gateway Defense.

Email Protection now offers Bailey, an AI assistant embedded in Email Protection that provides natural-language answers, summaries, and links based on your Barracuda data and Campus content. For more information, see Guide to Bailey the Barracuda Assistant in Email Protection.

Email Gateway Defense now streamlines domain-level administration for accounts that do not already use domain-level policy settings by removing the Domains Manage button and the domain-admin role from the UI. Accounts with existing domain-level policy settings are not impacted and will continue to manage those settings as before.

For more information, see Changes to Domain-Level Configuration in Email Gateway Defense.

Email Protection now includes a feature that highlights risky policy configurations so you can fix them safely, with this initial release focusing on overly broad allow rules that bypass security controls. For more information, see Risky Policies Detection and Remediation.

Email Protection now provides a unified Policies page that shows how messages are handled and filtered across your environment, bringing existing Email Gateway Defense policies into a single, centralized view. For more information, see Email Policies.

Email Gateway Defense now supports domain-based exemptions for Block on No SPF Records on the Inbound Settings > Sender Authentication page. If you currently exempt domains with no SPF record, add them under Missing SPF Exemptions by Domain to ensure they are allowed when Block on No SPF Records is set to Block or Quarantine. For more information, see Enhancements to SPF Exemptions for Sender Authentication Page.

Email Gateway Defense is completing the transition of the admin user interface to the new interface. After this change, all administrators will use the updated interface by default, and the option to switch back to the legacy interface will be removed. This update ensures a consistent, modern experience for all users and allows improvements and support to focus on a single interface.

Email Gateway Defense has completed the initial phase of remediation work on the Fastspam Ragel compiler.

Quarantine Notifications – This update streamlines common quarantine actions, including improved mobile experience. Users no longer need to enter their credentials to deliver or allow/block sender from the quarantine notification email. There are no changes to underlying security behavior or policies. Note: Users will still need to enter their credentials to use Email Gateway Defense.
This update is being rolled out in phases to ensure a smooth transition.

New converged Email Protection Bulk Remediation is now available for MSPs, providing the ability to remediate emails across hundreds of inboxes for dozens of customers in a single action, rather than manually repeating the task for each customer.

Email Protection Offboarding Guide – Instructions for offboarding inline deployment now available.

Email Gateway Defense now prioritizes DMARC results, even if no SPF record is present. Messages that fail DMARC and lack an SPF record will still be blocked or quarantined according to your Inbound > Sender Authentication > Block on No SPF Record settings.

Email Gateway Defense now uses the header From address for DMARC exemptions, aligning with RFC 7489 standards and improving compliance.

The new updated Email Gateway Defense admin user interface will be rolled out to all accounts soon, offering the same capabilities in a redesigned layout. For a limited time, administrators will have the option to switch back to the legacy UI if needed.

Added audit data to syslog exports.

Updated the syslog format to use the two service names, email and audit. For more information, see Syslog Integration.

Email Protection Email Log – The converged Email Protection Email log is now available! A feature designed to enhance your experience by integrating messages from Email Gateway Defense, Impersonation Protection, and Incident Response into a single, unified user interface.

New feature now available to exempt senders from bulk email.

• Customers can now exempt specific email senders or domains from the Bulk Email filter. This functionality is now available in the new admin user interface, located under Email Gateway Defense > Inbound > Anti-Spam/Antivirus. For more information, see Bulk Email Detection.

New converged Email Protection onboarding wizard now available!

• The rollout of our new, simplified onboarding wizard for Email Protection customers and trials is now available. This update introduces a streamlined, step-by-step experience for setting up key features, including Email Gateway Defense, Impersonation Protection, and Incident Response. This marks a significant milestone in our efforts to enhance and unify the email protection user experience. Stay tuned for upcoming enhancements, including the ability to easily configure mail flow through Inline Deployment.

New updated Email Gateway Defense admin user interface enabled by default for new customers and available for opt-in for all customers. See Email Gateway Defense Interface and Navigation.

Scheduled reporting is now available for Email Gateway Defense customers in the new admin user interface. This new capability allows you to automatically generate predefined reports and have them delivered straight to your inbox via email as a CSV attachment. Simply choose the report, timeframe, delivery frequency, and recipients. See Scheduled Reports.

The new Email Gateway Defense admin user interface is now available for opt-in to 80% of customers. See Email Gateway Defense Interface and Navigation.

Machine detection learning models updated with extortion classifier, improving false positive and false negative rates for extortion emails. See Machine Learning.

The layout of the Email Gateway Defense Message Log has been improved to enhance usability on smaller screens.

Email warning banners available in open beta to all customers. See Email Warning Banner Messages.

New quarantine end user UI now available to all customers.

Recalling encrypted messages is now available on Email Gateway Defense. See How to Use DLP and Outbound Mail Encryption.

The Reported Email Tracker, which utilizes the Enhanced Feedback feature to report emails to Barracuda Networks, is now available in open beta for all customers. See Reported Email Tracker. Closed-loop feedback for reported emails now available in open beta to all customers.

Email warning banners available in open beta to a select group of customers. See Email Warning Banner Messages.

New quarantine end user UI now available to 50% of our customers.

An updated Microsoft 365 deployment guide now available, aligned with Microsoft Enhanced Filtering capabilities. See Step 2 - Configure Microsoft 365 for Inbound and Outbound Mail.

Simplified and streamlined login experience for administrators and end users.

Microsoft 365 inline deployment for Email Gateway Defense currently available in beta phase. See Microsoft 365 Inline DeploymentUNDEFINED.

Email Gateway Defense is now available in the India AWS region. See Email Gateway Defense IP Ranges Used for Configuration and Email Gateway Defense Outbound IP Ranges.

Machine learning detection models focused on spam, phishing, and extortion now available globally for all customers. See Machine Learning.

Machine learning detection models focused on spam, phishing, and extortion now available for US customers. See Machine Learning.

End users on the latest new end user interface will now see an updated sidebar menu for navigation. See Email Gateway Defense New User Interface User Guide.

Machine learning detection models focused on spam, phishing, and extortion now available for UK customers. See Machine Learning.

Get a deep dive into Email Gateway Defense best practices and understand how to better utilize the capabilities the solution has to offer. See .

Install and configure the new Email Gateway Defense app in Azure AD. For more information, see How to Configure the New Email Gateway Defense App in Microsoft Entra ID.