Microsoft Azure
Virtual machines (VMs) deployed through Azure Gallery prior to mid February, 2015 do not support Disk Expansion. For modern deployments using Azure Resource Manager (ARM), disk resizing and managed disk expansion are supported Add storage
Redeploy the VM using the latest Barracuda Email Security Gateway image available in the Azure Marketplace.
Microsoft Azure is a public cloud platform that supports multiple virtual network interfaces, static or dynamic IP configurations, managed disks, and scalable virtual machine resources. The Barracuda Email Security Gateway can be deployed as a virtual appliance in the Microsoft Azure cloud to protect your email server from spam, virus, spoofing, phishing and spyware attacks. Outbound filtering and encryption options also prevent confidential or sensitive information from being purposely or inadvertently leaked outside the organization.
Licensing Options
The Barracuda Email Security Gateway is available on Microsoft Azure with the Bring Your Own License (BYOL) and Hourly / Metered options.
Bring Your Own License (BYOL)
With the Bring Your Own License (BYOL) option, you are required to get the Barracuda Email Security Gateway license token, either by:
Purchasing online at https://www.barracuda.com/purchase.
With this license option, there will be no Barracuda Email Security Gateway Software charges, but Microsoft Azure usage charges on Microsoft will be applicable.You can either begin with the free evaluation OR purchase the Barracuda Email Security Gateway license directly after deploying the VM or when accessing the VM web interface for the first time.
BYOL Models and Instance Types
For BYOL, the Barracuda Email Security Gateway virtual appliance is available in 10 sizes on Microsoft Azure. The following table lists each size level with their corresponding instance type, cores, and memory allocated to each instance type. You'll select the Instance Type in the next step in How to Deploy the Barracuda Email Security Gateway on Microsoft Azure. If you want to increase the performance of a license that you have already purchased, you can buy additional cores from Barracuda and reconfigure for a larger instance type.
Barracuda Email Security Gateway Model | Supported Instance Type | CPU’s | Active Email Users |
|---|---|---|---|
Cloud Edition Level 3 | d4s_v5 | 4 | 3,000 - 10,000 |
Cloud Edition Level 4 | d8s_v5 | 8 | 8,000 - 22,000 |
Cloud Edition Level 6 | d16s_v5 | 16 | 15,000 - 30,000 |
Cloud Edition Level 8 | d32s_v5 | 32 | 25,000 - 40,000 |
You are limited to 1.7 GB of memory when deploying a Level 3 (A1) instance in Microsoft Azure. This limitation should not affect the operation of the Barracuda Email Security Gateway when deployed in this environment. Also note that if you need to add additional storage:
For Barracuda virtual machines purchased through the Microsoft Azure Marketplace as of February 2015, you must create a new attached drive. See How to add Additional Storage to your Azure Deployment.
For earlier deployments, you cannot attach new storage.
Memory allocation depends on the selected virtual machine size in Microsoft Azure.
Legacy A-series instances (such as A1 with 1.7 GB RAM) are no longer recommended for production deployments of the Barracuda Email Security Gateway.
When deploying ESG in Azure:
Select an appropriately sized VM based on active users, mail volume, and enabled security features.
Modern Azure VM families (for example, Dsv5 or equivalent) provide significantly improved CPU and memory resources compared to legacy A-series instances.
For Barracuda virtual machines purchased through the Microsoft Azure Marketplace as of February 2015, you must create a new attached drive. See How to add Additional Storage to your Azure Deployment.
For earlier deployments, you cannot attach new storage.
Hourly / Metered
With the Hourly/Metered licensing option, you complete the purchase or evaluation of the Barracuda Email Security Gateway entirely within the Microsoft Azure gallery. After the instance is launched, it is provisioned automatically. You are charged hourly for both the Barracuda Spam Software and Microsoft Azure usage on Microsoft.
Hourly / Metered Model and Instance Types
For more information on supported instance types, Default CPU, Default Memory and Hourly pricing, refer to Barracuda Email Security Gateway Pricing Details.
If you want to increase the performance of an existing VM, configure it with a larger instance type on Microsoft Azure and you will be charged accordingly by Microsoft. The VM will automatically be reconfigured by Microsoft with the resources and capabilities of the larger instance type.
Before You Begin
If your organization does not have an Azure account, go to the Microsoft Azure purchase options page, and follow the onscreen instructions.
Create an Azure Virtual Network
Log into your Microsoft Azure Management Portal.
In the top search bar, type Virtual networks and select Virtual networks from the results.
Click +Create
On the Basics tab:
Select your Subscription
Select or create a Resource Group
Enter a Virtual Network Name
Choose the appropriate Region
On the Virtual Network Address Spaces page, configure the ADDRESS SPACE:
STARTING IP – Enter the first IP address of the address space you want to use.
CIDR – Select the subnet mask for the virtual network. The maximum number of instances for a virtual network are listed in parentheses.
Add a SUBNET:
STARTING IP – Enter the first IP address of the subnet.
CIDR – Select the subnet mask for the subnet.
Configure DNS settings if required.
Click Review + Create, then click Create.
The created virtual network gets displayed in the VIRTUAL NETWORKS lists.
Next Step
Continue with How to Deploy the Barracuda Email Security Gateway in the Microsoft Azure Management Portal for instructions on installation and configuration.