Setting up ATR for SecureEdge

ATR determines whether an alert is malicious.

If the alert is identified as malicious, the IP Address is automatically added to the firewall or network security solution block list, depending on how malicious ATR determines it to be.

For more information about Automated Threat Response (ATR), see https://documentation.campus.barracuda.com/wiki/spaces/SKOUT/pages/6947848.

The documentation below outlines the requirements for the Barracuda XDR Automated Threat Response (ATR) for Barracuda SecureEdge.

You must have:

• Access to the Barracuda XDR Dashboard set up and functioning properly

• Access to Barracuda SecureEdge set up and functioning properly

Also, Barracuda SecureEdge must be integrated in Barracuda XDR. For more information, see https://documentation.campus.barracuda.com/wiki/spaces/SKOUT/pages/6947630.

1. In Barracuda SecureEdge, click Integration > Barracuda XDR > ATR Configuration.

2. Slide Automated Threat Response to Enabled.
   
   

   Open

   

3. Click Save.

4. Copy the Authentication Token.

1. In Barracuda XDR Dashboard, click ATR Settings > Firewalls.

2. In the Firewall table, click the Barracuda SecureEdge row.

3. Click Edit Config.

4. In the Edit Config dialog box, paste the Authentication Token you copied in the previous procedure into the Authentication Token.

   Open

   

5. Click Save.