> ## Documentation Index
> Fetch the complete documentation index at: https://docs.outkept.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Barracuda

> Email Security Gateway, Intent Analysis, Sender Authentication, ATP and Sentinel.

Barracuda whitelisting is spread across several features. Which ones you need depends on
what you have enabled. Work through the sections that apply to you.

The steps also differ between **Email Security Service** (cloud) and **Email Security
Gateway** (on-premises). Each section below has a tab for each.

<Note>
  These instructions are summarised from Barracuda's knowledge base. If you run into
  trouble, Barracuda support can give product-specific guidance.
</Note>

## IP whitelisting

Allows our mail through connection filtering.

<Tabs>
  <Tab title="Email Security Service (cloud)">
    <Steps>
      <Step title="Open IP address policies">
        Log in to Barracuda Cloud Control and go to **Email Security** then **Inbound
        Settings** then **IP Address Policies**.
      </Step>

      <Step title="Add each IP">
        In the **IP Blocking / Exemption** section, use the top line to enter one of our
        [sending IP addresses](/whitelisting-values#sending-ip-addresses). Set **Netmask**
        to `255.255.255.255` and **Policy** to **Exempt**. A comment such as
        `OutKept Simulated Phishing IP Address` is useful later.
      </Step>

      <Step title="Repeat">
        Click **Add**, then repeat for each of our IP addresses.
      </Step>
    </Steps>
  </Tab>

  <Tab title="Email Security Gateway (on-premises)">
    <Steps>
      <Step title="Open IP filters">
        Log in to the Barracuda Email Security Gateway web interface and go to
        **BLOCK/ACCEPT** then **IP Filters**.
      </Step>

      <Step title="Add each IP">
        In the **Allowed IP/Range** section, use the top line to enter one of our
        [sending IP addresses](/whitelisting-values#sending-ip-addresses). Set **Netmask**
        to `255.255.255.255` and **Policy** to **Exempt**.
      </Step>

      <Step title="Repeat">
        Click **Add**, then repeat for each of our IP addresses.
      </Step>
    </Steps>
  </Tab>
</Tabs>

## Intent Analysis

Intent Analysis alters the URLs in mail, which skews phishing test results. Exempt our
domains from it.

<Tabs>
  <Tab title="Email Security Service (cloud)">
    <Steps>
      <Step title="Open anti-phishing">
        Log in to Barracuda Cloud Control and go to **Email Security** then **Inbound
        Settings** then **Anti-Phishing**.
      </Step>

      <Step title="Add our domains">
        Under the **Intent** section, add our
        [phishing domains](/whitelisting-values#domains) with the **Policy**
        drop-down set to **Ignore**.
      </Step>
    </Steps>
  </Tab>

  <Tab title="Email Security Gateway (on-premises)">
    <Steps>
      <Step title="Open spam checking">
        Log in to the web interface and go to **Email Security Gateway** then **Basic** then
        **Spam Checking**.
      </Step>

      <Step title="Add our domains">
        Under **Intent Analysis**, add our
        [phishing domains](/whitelisting-values#domains) to the **URI
        Exemptions** field.
      </Step>
    </Steps>
  </Tab>
</Tabs>

## Sender Authentication

SPF checks will fail on simulation mail unless our IPs are exempted.

<Tabs>
  <Tab title="Email Security Service (cloud)">
    Log in to Barracuda Cloud Control, go to **Email Security** then **Inbound Settings**
    then **Sender Authentication**, and enter our
    [sending IP addresses](/whitelisting-values#sending-ip-addresses) in the SPF exemptions
    table under **Use Sender Policy Framework**.
  </Tab>

  <Tab title="Email Security Gateway (on-premises)">
    Log in to the web interface, go to **Email Security** then the **Block/Accept** tab and
    select **Sender Authentication**. Under **Sender Policy Framework (SPF)
    Configuration**, select **Yes** and add our
    [sending IP addresses](/whitelisting-values#sending-ip-addresses) to the exemption list.
  </Tab>
</Tabs>

## Advanced Threat Protection

If you use ATP and are seeing false clicks or false attachment opens, exempt our IPs from
PDF scanning.

<Steps>
  <Step title="Open ATP settings">
    Log in to the Barracuda Email Security Gateway web interface and select the **ATP
    Settings** tab.
  </Step>

  <Step title="Add the exemptions">
    Enter our [sending IP addresses](/whitelisting-values#sending-ip-addresses) with their
    subnet masks, and click **Add**.
  </Step>
</Steps>

## Sentinel allowed senders

Sentinel's allowed senders list lets our mail bypass your existing whitelisting rules.

<Steps>
  <Step title="Open allowed senders">
    Log in to the Barracuda admin console, click **Dashboard**, click the settings gear, and
    click **Allowed Senders**.
  </Step>

  <Step title="Add our domains">
    Enter our [phishing domains](/whitelisting-values#domains) in the **Sender
    Email or Domain** field. A comment is optional. Click **Save**.
  </Step>

  <Step title="Repeat">
    Sentinel accepts one address or domain at a time, so repeat for each domain.
  </Step>
</Steps>

## Then what

**Have other security products enabled? Whitelist them now.**

| Product | Where to go |
| - | - |
| Microsoft 365: domain & IP whitelisting, Safe Links, Safe Attachments, web protection | [Microsoft 365](/whitelisting-microsoft-365) |
| Google Workspace: Direct Message Injection | [Google Workspace](/whitelisting-google-workspace) |
| Other gateways and firewalls: FortiNet, Vade, WatchGuard | [Whitelisting](/whitelisting) |

Once everything that applies to your environment is whitelisted, send a test email from the
platform and confirm every interaction is recorded. See
[Testing your whitelisting](/whitelisting-testing).

If problems persist and you have a service provider, they are the next place to ask.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.