Integrating the Barracuda Email Security Gateway and the Barracuda Message Archiver

Email Encryption and Archiving for Optimized Storage, Quick Search and Retrieval, and Meeting Regulatory Compliance and Corporate Standards

Download PDF

Organizations looking to encrypt and store journaled email messages and attachments can integrate the Barracuda Email Security Gateway and the Barracuda Message Archiver to capture all inbound and outbound messages. By using these two solutions together, organizations ensure that only intended recipients are able to securely access email and associated attachments. This comprehensive email archiving system satisfies regulatory compliance and corporate standards, while optimizing email storage and providing quick access.

The Barracuda Message Archiver takes care of optimizing email storage, meeting regulatory compliance and eDiscovery requirements, and providing seamless end-user integration with Microsoft Outlook and mobile applications to search all existing email.

The Barracuda Email Security Gateway securely encrypts email and then sends it via Transport Layer Security (TLS) to the cloud-based Barracuda Message Center, ensuring email is encrypted and keys are securely stored using AES 256-bit encryption.

How it Works

Outbound mail: When an email is sent, it takes parallel paths. It goes to the Barracuda Message Archiver for archiving, and at the same time it is journaled on the email server and sent to the Barracuda Email Security Gateway. The email is sent securely to the Barracuda Message Center where it is encrypted, and a notification is sent to the intended recipient. The recipient must be authenticated on the Barracuda Message Center to access the email over HTTPS, as shown in Figure 1:

Inbound mail: When the recipient responds to the email, the response is sent back through the Barracuda Message Center where it is encrypted and a notification is delivered to the recipients. The Barracuda Email Security Gateway then periodically contacts the Barracuda Message Center for new mail sent or received for your domain, and securely forwards the email to the Barracuda Message Archiver, as shown in Figure 2:

Email Encryption

The Barracuda Email Security Gateway includes secure, cloud-based outbound and inbound email encryption. Administrators can use multiple policies to specify exactly which outbound email to encrypt, and email that matches policies is securely sent to the Barracuda Message Center via TLS. When a response to an encrypted email is sent, it goes to the Barracuda Message Center where it is again encrypted for secure delivery.

Encryption Policies

Encryption is configured at the domain level while an encryption policy is configured at the global level; for example, by sender domain or email address. Global encryption policies apply to all domains from which encrypted email messages are sent. Specify the outbound encryption rules for global system-managed filtering including:

  • Content Filtering - Filter message delivery based on expressions
  • Custom Content Filters - Filter based on subject line, message headers, message body, and attachment file type
  • Attachment Filtering - Block, quarantine, encrypt, or redirect outbound messages based on patterns or file extensions
  • Predefined DLP and HIPAA Compliance Filters - Filter based on predefined data leakage patterns as specified on the BLOCK/ACCEPT > Content Filters page

Email Archiving

The Barracuda Message Archiver integrates with all standards-based email servers and provides powerful search, retrieval, and export capabilities for administrators, auditors, and end-users. The Barracuda Message Archiver indexes and preserves all email to enforce message content and retention policies for regulatory compliance. All email sent is captured and stored by the Barracuda Message Archiver and can easily be retrieved and reproduced as electronic evidence as part of a legal discovery process.

The Barracuda Message Archiver also helps reduce the storage requirements email servers. Email can be offloaded to the Barracuda Message Archiver, which significantly reduces storage costs and improves email server performance. Furthermore, there is a client plugin that enables seamless access to archived email for end users.

Summary

By combining the Barracuda Email Security Gateway and the Barracuda Message Archiver, organizations can ensure email security and accurate email archiving for regulatory compliance. The Barracuda Email Security Gateway’s encryption via TLS to the Barracuda Message Center and the Barracuda Message Archiver’s email archiving, search capabilities, and email storage optimization provide organizations with a complete solution to meet regulatory compliance, eDiscovery requirements, and corporate standards in a complete, easy-toimplement solution.