# Barracuda email security > What Barracuda Email Protection covers, how it relates to DMARC, and what to verify when evaluating it for Microsoft 365 or Google Workspace. Barracuda email security refers to Barracuda Email Protection, a vendor suite for protecting mailboxes, accounts, domains, and related data. Barracuda says it supplements Microsoft 365 and Google Workspace, with phishing and malware defenses, post-delivery response, and Domain Fraud Protection for DMARC reporting and analysis. It does not replace the need to verify your own sending domains, deployment model, licenses, and tested response workflow. [Barracuda's product overview](https://www.barracuda.com/products/email-protection) is the current source for its stated scope. ## Quick takeaways - Barracuda positions Email Protection as a suite that supplements Microsoft 365 and Google Workspace. - Its published features include threat protection, account-takeover protection, encryption and data-loss prevention, and Domain Fraud Protection. - Domain Fraud Protection uses DMARC reporting and analysis. It is distinct from filtering inbound malicious mail. - Barracuda documents API-first deployment for Microsoft 365 or Google Workspace without MX changes, while plan materials also describe other deployment options. - Product documentation describes capabilities, not the detection quality, policy configuration, or response outcome in a specific tenant. ## What Barracuda Email Protection covers [Barracuda's feature list](https://www.barracuda.com/products/email-protection/features) describes spam, malware, and advanced-threat protection; account-takeover protection; encryption and data-loss prevention; Domain Fraud Protection; incident response; training; backup; and archiving. Treat that as the vendor's published scope. The exact package and controls available to an organization depend on its plan and configuration. The product is broader than a single secure email gateway. Barracuda says its current offering can supplement Microsoft 365 and Google Workspace, and its overview describes continuous post-delivery threat detection and response. For the gateway model itself, read [how secure email gateways protect an organization](/learning/how-secure-email-gateways-protect-organization). A gateway or cloud-email-security product can reduce inbound threats, but it does not by itself establish that every message using your From domain is authorized. ## How Barracuda relates to DMARC Barracuda lists Domain Fraud Protection as an Email Protection feature. Its feature page says the service provides DMARC reporting and analysis, visibility into sending systems, and information about passing and failing DMARC results. That makes it relevant to teams that need to identify legitimate and unauthorized use of a domain before changing DMARC enforcement. ![Barracuda Domain Fraud Protection dashboard listing protected domains and their DMARC status](/images/editorial/barracuda-email-security/barracuda-dmarc-domains-dashboard.png "1916x845") *Source: [Barracuda Campus: Configuring DMARC on Your Domain](https://campus.barracuda.com/product/domainfraudprotection/doc/170688553/step-1-configuring-dmarc-on-your-domain/). [Open the full-size documentation capture](/images/editorial/barracuda-email-security/barracuda-dmarc-domains-dashboard.png).* DMARC itself is a sender-domain authentication and policy protocol. [RFC 9989](https://www.rfc-editor.org/rfc/rfc9989) defines how a receiver evaluates aligned SPF or DKIM authentication and applies the domain owner's requested disposition. That protocol boundary matters: inbound threat filtering assesses messages received by users, while DMARC helps a domain owner express handling for mail that claims to use that domain. Learn the underlying protocol in [what is DMARC?](/learning/what-is-dmarc), then review the related [SPF](/learning/what-is-spf) and [DKIM](/learning/what-is-dkim) controls. ![A deterministic scope map separates inbox threat protection, sender-domain authentication, and tenant-specific evaluation.](/images/editorial/barracuda-email-security/barracuda-email-security-scope.svg) *Barracuda's published Email Protection scope includes inbox, account, and domain-related controls. DMARC is one sender-domain authentication layer, while tenant results require an evaluation. Original deterministic visual based on [Barracuda's feature description](https://www.barracuda.com/products/email-protection/features) and [RFC 9989](https://www.rfc-editor.org/rfc/rfc9989).* ## What to verify before you evaluate it Start with the question you are trying to answer. A team deciding whether a product fits its environment should validate its deployment, coverage, response, and sender-domain boundaries rather than treating a feature list as a result. ```text Evaluation record Environment: Microsoft 365, Google Workspace, or another supported path Deployment model: API-connected, inline, or MX-routed path confirmed for this tenant Threat workflow: test scenario, expected action, evidence retained, rollback owner Domain workflow: DMARC report source, approved sending sources, policy-change owner ``` Barracuda's current overview describes an API-first connection to Microsoft 365 or Google Workspace without MX changes. Its [plans page](https://www.barracuda.com/products/email-protection/plans) also describes flexible deployment options, including API, inline, and traditional MX-record changes for eligible plans. Confirm the available path against the plan you are considering instead of assuming an existing mail-flow design will apply. For a public sender-domain baseline, run the domain through the [Email Security Score](/tools/email-security-score). It checks published SPF, DKIM, DMARC, MX, and blocklist signals in one place. It cannot inspect a Barracuda tenant, see its policies, or predict a receiver's verdict for a particular message. ## A practical boundary for product comparisons Barracuda's published pages describe product capabilities, but a product-identification page cannot prove how a specific tenant will detect threats or handle legitimate mail. Request deployment documentation for the intended plan, define approved test scenarios, identify who can reverse a response action, and retain the evidence from each test. Keep domain-authentication work separate enough that a change to DMARC policy is supported by report evidence and an accountable owner. If the immediate question is whether a public domain has the authentication records it needs, the narrow next step is the [Email Security Score](/tools/email-security-score). It gives a public-record baseline, not a vendor evaluation, an inbox-placement guarantee, or a substitute for reviewing Barracuda configuration and message evidence. ## Sources and further reading - [Barracuda Email Protection overview](https://www.barracuda.com/products/email-protection) - [Barracuda Email Protection features](https://www.barracuda.com/products/email-protection/features) - [Barracuda Email Protection plans](https://www.barracuda.com/products/email-protection/plans) - [RFC 9989: DMARC](https://www.rfc-editor.org/rfc/rfc9989) ## Frequently asked questions ### Is Barracuda email security the same as DMARC? No. Barracuda Email Protection is a broader email-security suite. Barracuda describes Domain Fraud Protection as one feature that provides DMARC reporting and analysis, while DMARC itself is a sender-domain authentication and policy protocol defined in RFC 9989. ### Does Barracuda Email Protection replace Microsoft 365 or Google Workspace security? No. Barracuda's current product overview says Email Protection supplements Microsoft 365 and Google Workspace. Whether it complements a specific tenant's native controls depends on the licensed plan, deployment, policies, and tested workflows. ### Can Barracuda help with phishing after a message is delivered? Yes. Barracuda's published overview describes post-delivery threat detection and response, and its Integrated Email Protection feature page describes post-delivery clawback. Confirm the response scope and rollback process in the tenant you operate before relying on it. ### Does an Email Security Score evaluate Barracuda settings? No. The Email Security Score evaluates public DNS and related sender-domain signals. It cannot see a Barracuda tenant, its policies, message verdicts, licensing, or remediation actions. ### Should I change my DMARC policy when I enable Barracuda? Only when the domain's DMARC report evidence and change process support it. Enabling an email-security product does not by itself prove that every legitimate sender is authenticated and aligned for stricter DMARC enforcement.