How to Update Microsoft Exchange Online Existing Nightly Actions with EWS

Exchange Integration connects to Exchange Online by using EWS (Exchange Web Services) with Microsoft-authorized application permissions. This streamlines the configuration process, eliminates the need for a dedicated service account, and removes the extra step of updating permissions when adding new mailboxes.

• You must have a Microsoft 365 account with administrator privileges. 

• An Application Id and secret from Microsoft 365. See How to Create an Application ID and Application Secret for Barracuda Message Archiver in Microsoft 365.

• Your Tenant Name and Primary domain name from Microsoft 365. See How to Find Your Tenant and Primary Domain.

• Ensure outbound connections to port 443 are open and use the MAS hostname mas.barracudanetworks.com to allow the Barracuda Message Archiver outbound connection  to  the Barracuda Cloud Archiving Service (BCAS).  This is required to authorize a new source and to run each action.

  Your Microsoft administrator account credentials will only be used to authorize the Barracuda Message Archiver to keep track of authorization details that allow the appliance access to EWS. Using Exchange Integration with EWS does not require a BCAS subscription or connecting the Barracuda Message Archiver to Cloud Storage. BCAS does not handle any data in the mailboxes.

Note that you will no longer need a service account to set up an Exchange Online source.

Use the following instructions to update an existing nightly action.

1. Log into the Barracuda Message Archiver as the admin, and go to MAIL SOURCE > Exchange Integration.

2. For existing actions, click Upgrade Connector next to the nightly action you want to change.

   Note that you can only update existing nightly actions to new EWS sources.

   Open

   

3. Enter a Configuration Name, App Id, Secret Key, Tenant Name, and O365 Domain Name.

   • For more information on how to create an App Id and Secret, see How to Create an Application ID and Application Secret for Barracuda Message Archiver in Microsoft 365.
     Note: For firmware version 5.5.4 or higher, use Microsoft Graph API instead of EWS. See How to Configure Microsoft Graph API Permissions for Barracuda Message Archiver 5.5.4.

   • For more information on where to find your Tenant Name and O365 Domain Name, see How to Find Your Tenant and Primary Domain.

4. Click Authorize.
   

   An inaccurate computer system clock can cause authorization problems. Check that your computer's system clock is set to the current date and time before you click Authorize

5. Alternatively, if you are unable to use the Upgrade Connector option, you can manually add a new source:

   1. At the top left of the Scheduled Actions section, click Start New Action. In the Select Action page, click Email Import.

   2. In the Select Source page, click Add New Source.

   3. Select Exchange Online.

      Open

      

   4. Enter a Configuration Name, App Id, Secret Key, Tenant Name, and O365 Domain Name. 

      • For more information on how to create an App Id and Secret, see How to Create an Application ID and Application Secret for Barracuda Message Archiver in Microsoft 365.
        Note: For firmware version 5.5.4 or higher, use Microsoft Graph API instead of EWS. See How to Configure Microsoft Graph API Permissions for Barracuda Message Archiver 5.5.4.

      • For more information on where to find your Tenant Name and O365 Domain Name, see How to Find Your Tenant and Primary Domain.

   5. Click Authorize.

6. If you are not already logged in, a new tab or pop-up window prompts you to enter your Microsoft 365 administrator account login information from which Exchange Integration will process mail. 

   If you are not logged in and do not see the tab or window, ensure that pop-ups from the Barracuda Message Archiver are not blocked.

   Open

   

7. Click Accept to authorize the Barracuda Message Archiver to access your details.

8. After the authorization tab or window closes, switch back to the Select Source page. You should now see the new source in the list. Select the new source and click Continue.

   Open

   

   
   The selected source is now at the top of the nightly job list using the new connector. The Upgrade Connector option is no longer available, indicating that the EWS server configuration is being used.

   Open

   

1. Log into the Microsoft 365 Admin center as a global admin https://admin.microsoft.com/.

2. On the left-hand menu, select Overview and copy down the Name and Primary domain.

   Open

   

The Name and Primary domain you copied down can now be used to authorize the Barracuda Message Archiver permissions to import data from Exchange Online.