Barracuda Web Filter

You can integrate Barracuda Web Filter appliance events with IBM QRadar.

The Barracuda Web Filter DSM for IBM QRadar accepts web traffic and web interface events in syslog format that are forwarded by Barracuda Web Filter appliances.

Web traffic events contain the events, and any actions that are taken when the appliance processes web traffic. Web interface events contain user login activity and configuration changes to the Web Filter appliance.

Before you begin

Syslog messages are forward to QRadar by using UDP port 514. You must verify that any firewalls between QRadar and your Barracuda Web Filter appliance allow UDP traffic on port 514.