> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wirespeed.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Barracuda CloudGen Firewall

> Forward syslog events from Barracuda CloudGen Firewall

## Set up

1. Follow the shared [Log Forwarders](/integrations/log-forwarders) guide to add **Barracuda CloudGen Firewall** and open **Forwarder Details** (or ask Chat for the listener `ip:port`)
2. In Barracuda Firewall Admin, go to **Configuration** > **Configuration Tree** > **Box** > **Infrastructure Services** > **Syslog Streaming** and click **Lock**
3. Under **Basic Setup**, set **Enable Syslog Streaming** to **yes**
4. Under **Logstream Destinations**, add a destination with the IP and port from **Forwarder Details**. When the listener shows **UDP/TCP**, choose either TCP or UDP on the Barracuda destination. When it shows only one transport, use that one.
5. Under **Logdata Filters**, add a filter that includes the **Box** and **Service** log files plus the firewall **Activity**, **Audit**, and **Threat** logs
6. Under **Logdata Streams**, add a stream that sends the filter to the Wirespeed destination
7. Click **Send Changes** and **Activate**
8. Events will begin showing up shortly

Wirespeed parses firewall activity and audit sessions, IPS threat events, scan detections, and VPN and administrator logins into dedicated fields. All other box and service log lines are stored with their log file name and message.