How to Update Microsoft Exchange Online Existing Nightly Actions with EWS

This article refers to Barracuda Message Archiver firmware early release version 5.3.0.009 or higher, and Microsoft Exchange Online. For more information on how to update to the latest firmware, see Updating Your Firmware and Definitions.

Exchange Integration now supports the Exchange Web Services (EWS) protocol for connecting to Exchange Online. With recent changes from Microsoft, using EWS ensures that Exchange Integration will continue to work with Exchange Online. In addition, the switch to EWS simplifies the Exchange Integration configuration by eliminating the need to use a service account and the accompanying requirement to update the service account's permissions after creating new users with mailboxes.

Note that EWS sources do not support Email Stubbing actions.

Requirements

You must have a Microsoft 365 account with administrator privileges.
An Application Id and secret from Microsoft 365. See How to Create an Application ID and Application Secret for Barracuda Message Archiver in Microsoft 365.
Your Tenant Name and Primary domain name from Microsoft 365. See How to Find Your Tenant and Primary Domain.
Ensure outbound connections to port 443 are open and use the MAS hostname mas.barracudanetworks.com to allow the Barracuda Message Archiver outbound connection to the Barracuda Cloud Archiving Service (BCAS). This is required to authorize a new source and to run each action.

Note that you will no longer need a service account to set up an Exchange Online source.

Update an Existing Nightly Action

Use the following instructions to update an existing nightly action to use EWS.

Log into the Barracuda Message Archiver as the admin, and go to MAIL SOURCE > Exchange Integration.
For existing actions, click Upgrade Connector next to the nightly action you want to change.
Enter a Configuration Name, App Id, Secret Key, Tenant Name, and O365 Domain Name.
- For more information on how to create an App Id and Secret, see How to Create an Application ID and Application Secret for Barracuda Message Archiver in Microsoft 365.
- For more information on where to find your Tenant Name and O365 Domain Name, see How to Find Your Tenant and Primary Domain.
Click Authorize.
Alternatively, if you are unable to use the Upgrade Connector option, you can manually add a new EWS source:
1. At the top left of the Scheduled Actions section, click Start New Action. In the Select Action page, click Email Import.
2. In the Select Source page, click Add New Source.
3. Select Exchange Online to configure using EWS.
4. Enter a Configuration Name, App Id, Secret Key, Tenant Name, and O365 Domain Name.
  - For more information on how to create an App Id and Secret, see How to Create an Application ID and Application Secret for Barracuda Message Archiver in Microsoft 365.
  - For more information on where to find your Tenant Name and O365 Domain Name, see How to Find Your Tenant and Primary Domain.
5. Click Authorize.
If you are not already logged in, a new tab or pop-up window prompts you to enter your Microsoft 365 administrator account login information from which Exchange Integration will process mail.
Click Accept to authorize the Barracuda Message Archiver to access your details.
After the authorization tab or window closes, switch back to the Select Source page. You should now see the new source in the list. Select the new source and click Continue.

The selected source is now at the top of the nightly job list using the new connector. The Upgrade Connector option is no longer available, indicating that the EWS server configuration is being used.

How to Find your Tenant and Primary Domain

Log into the Microsoft 365 Admin center as a global admin https://admin.microsoft.com/.
On the left-hand menu, select Overview and copy down the Name and Primary domain.

The Name and Primary domain you copied down can now be used to authorize the Barracuda Message Archiver permissions to import data from Exchange Online.