CONTENTSAbout Barracuda Networks Inc. 1Awards and Customers 2SECURIT YBarracuda Spam & Virus Firewall 4Barracuda Web Filter 6Barracuda Web Application Firewall 8Barracuda NG Firewall 10Barracuda SSL VPN 12SERVICESBarracuda Web Security Service 14Barracuda Email Security Service 16Barracuda Control Center 17D ATA P R O T E C T I O NBarracuda Backup Service 18Barracuda Message Archiver 20NETWORKINGBarracuda Load Balancer 22Barracuda Link Balancer 24TECHNOLOGYBarracuda Networks Technology 26Barracuda Networks Virtual Appliances 27Barracuda Central 28SUPPORTService and Support 30Offices and Locations 31
1Barracuda Networks Inc.About the CompanyBarracuda Networks Inc. combines premises-based gateways and software, virtual appliances, cloud services, andsophisticated remote support to deliver comprehensive content security, data protection and application delivery solutions.The company’s expansive product portfolio includes offerings for protection against email, web and IM threats as well asproducts that improve application delivery and network access, message archiving, backup and data protection.Coca-Cola, FedEx, Harvard University, IBM, L’Oreal, and Europcar are among the more than 150,000 organizations protectingtheir IT infrastructures with Barracuda Networks’ range of affordable, easy-to-deploy and manage solutions. BarracudaNetworks is privately held with its International Headquarters in Campbell, California.The Barracuda Networks DifferenceSince its inception, Barracuda Networks continues to gain wide acclaim from customers, media and analysts by offeringexceptional customer service and top-notch products. Companies and organizations of all sizes rely on Barracuda Networkssolutions for five key reasons: • Up-and-running in 15 minutes. With no software to install or network modifications About Barracuda Networks Inc. required, all Barracuda Networks products are easy to deploy and use. • No IT expertise required. All Barracuda Networks products feature an intuitive web interface that ensures smooth product management and does not require an IT staff to be experts in a particular solution. • No support phone trees. Specially trained Barracuda Networks support technicians are available 24x7 to answer customer calls and provide live support. • Automatic product updates. Every Barracuda Networks solution comes backed by Barracuda Energize Updates, which ensure continuous protection against the latest threats automatically. • Low total cost of ownership. Barracuda Networks solutions can be easily scaled for performance and increased capacity as organizations grow while maintaining low total cost of ownership. Barracuda Central and Barracuda Networks Technical Support Every Barracuda Networks product is backed by world-class services and technical support. To keep systems maintenance-free, Barracuda Energize Updates ensure that Barracuda Networks products are kept up-to-date to mitigate the latest security threats and enforce content filtering policies required by an organization. Barracuda Energize Updates are backed by Barracuda Central, a 24x7 operations center where engineers monitor the Internet and the industry for the latest threats, applications, websites and trends. Barracuda Networks Technical Support is staffed with IT experts ready to solve technical issues. With technical support centers across the globe, Barracuda Networks is staffed 24x7 to provide immediate help without phone trees. Barracuda Networks Technical Support is available in three levels, with the highest Premium Support level providing a dedicated account manager and technical support personnel familiar with an organization’s IT environment. All Barracuda Networks appliances are built on hardened, industrial-strength equipment. Beyond the standard warranty, Barracuda Networks Technical Support offers the Instant Replacement program, where Barracuda Networks will ship replacement units within one business day to keep organizations up and running.
2 Awards Barracuda Networks has been recognized for its contributions and leadership in email and web security. Combining its own award-winning technology with powerful open source software, Barracuda Networks delivers easy-to-use, comprehensive security, networking and data protection solutions. As the winner of numerous industry honors, leading organizations around the world continue to trust Barracuda Networks. Cool Vendor in Security SaaS Top Emerging Vendor - Storage Top 10 IT Security Companies to Watch Top 10 Security Stories Top 10 “Most Innovative” Customers Barracuda Networks has thousands of customers ranging from small and medium businesses to Fortune 1000 companies that span all industry verticals. Barracuda Networks’ success is due in part to the diversity of data contributions from the more than 150,000 customers worldwide that count on Barracuda Networks products. Below is a sample of Barracuda Networks’ expansive customer portfolio. ACT Government BT Compass Communications Acumen Group Buma/Stermra Con Edison Burmax Company, Inc. Country Road LimitedAwards & Customers Admiral IT & Systemdesign Burson Auto Parts Creative Labs AGIP California State University Bakersfield Aldium Insurance Caldwell Consultants Cyberlink Allrecipes Callaway Gardens Delta Dental Plans Association Alliance Laundry Systems Caltrans DEK Systems Alpha Romeo CanWest MediaWorks Desai/Nasr Consulting Engineers, Inc. Alpine Electronics of America, Inc. Caulfield Grammar School Dierenbescherming Applied Telecomm Corporation Canon Inc. Digital Networks Arby’s Display Products, Inc. A.T. Kearney Carolina Panthers Atmel CBS Corporation Drexel Heritage Furniture Industries, Inc. Australian Psychological Society Cencosud S.A. Dudley College Banco Itaú Cellular South E! Entertainment Television Banco Rio Century 21Real Estate LLC Edith Cowan University Australia City of Coquitlam El Torito Restaurants, Inc. Benchmark Group City of Miami Equinox Information Systems Bereskin & Parr, LLP. City of New Westminster Berkeley College City of Oklahoma City Erwin Müller Versandhaus GmbH Big Bear Grizzly City of Vernon Europcar Coca-Cola Company Everex Communications, Inc. Boston Celtics Fashion Island Brandon Sun Federal Bureau of Investigation Brocade Comcast
3Customers (cont.)Fone Zone Siemens CorporationFood4Less Knott’s Berry Farm Sky ChannelForbes.com Kyocera Mita Corporation Sonic HealthcareFortinet La Caja de Ahorro y Seguro South Carolina Heart CenterFox Racing Inc. La Salsa Fresh Mexican Grill Spokane Public SchoolsFox Sports Net, Inc. Landratsamt Günzburg Long Island Children’s MuseumGaz de France Lockheed Martin CorporationGirl Scouts of the USA Loews Hotels SuzukiGeneseo Telephone Company Terra Resource GroupGeorgia Institute of Technology Louis Vuitton Texas A&M UniversityGMAC Financial Services Majlis Amanah Rakyat (MARA) Time Warner Inc.Goodwill Industries International, Inc. Marvel Enterprises, Inc. Tommy Hilfiger Group Mazda Technologies Toyota Motor Sales, U.S.A., Inc.Hardee’s Food Systems, Inc. Microsoft Tumi, Inc.Harvard University MIT Union Bank of CaliforniaHeald College Mirvac Group United Colors of BenettonHerbalife Ltd. Mitsubishi Motors United NationsHickory Farms MythBusters United States Air ForceHilton Hotels & Resorts NASA United States Army United States Coast GuardHoliday Inn Express Nashville Predators United States Marine CorpHonda National Hire Group Limited United States NavyHope Island Resort National Hockey League Awards & Customers National Rifle Association University of California, Los AngelesHostMySite.com Nordstrom, Inc. University of GeorgiaHewlett-Packard Company North Central Kansas Technical College University of Notre DameHuffy Corporation Northrop Grumman Corporation University of Southern CaliforniaIBM Oregon State University U.S. Department of CommerceIdeagen Software Limited Pennsylvania State University U.S. Department of DefenseIkano Communications, Inc. Perth College U.S. Department of Homeland SecurityIndian Institute of Technology, Kanpur U.S. Department of JusticeIndiana Rail Road Company Pioneer Title Company U.S. Department of the TreasuryIn-N-Out Burger Pizza Hut, Inc. US Fuel Cell CouncilIntelliNet Technologies, Inc. PR NewswireIntermountain Healthcare (IHC) Publix Super Markets, Inc. Varian Medical SystemsInternational Olympic Committee Verizon BusinessIKEA Radisson Hotels & Resorts ViaWest Rolling Stone Volkswagon Ronald McDonald House Charities VolvoJamba Juice Royal College of Physicians WebPex.com, Inc.Jet Propulsion Laboratory Salvation ArmyKawasaki Motors SanDisk Corporation YMCAKeyTrust San Jose Sharks Zinc SolutionsKlenk Holz AG
4 fu ll ou t a L No ou s P Da t b os w n d r ev in fil en clu t e t de ri n i o n s g an d Barracuda Spam & Virus Firewall Blocks email-borne spam and virus intrusions while preventing data loss AVAILABLE AS Virtual Appliances see page 27 The Barracuda Spam & Virus Firewall provides industry-leading, comprehensive protection against the latest spam, viruses, spoofing, ‘‘ Of that volume (1.2 and 1.4 million messages per day), approximately 98KEY BENEFITS phishing, spyware, and other email threats. With percent is rejected as spam.• Best-of-breed spam and virus integrated outbound filtering, the Barracuda With the Barracuda Spam & protection leveraging the most diverse Spam & Virus Firewall enforces policies and Virus Firewall 600 we have collection of email on the Internet• Prevents spam and stops virus proliferation protects an organization’s online reputation by successfully turned what• Deploys in minutes and works with preventing spam and viruses from leaving the was a resource strain for our the existing email infrastructure network. Designed for today’s enterprises and IT staff and our customers,• Offloads spam and virus scanning mission-critical environments, the Barracuda into a distant memory. We from the email server• Keeps email on-premises for control and Spam & Virus Firewall provides a powerful, easy- can now turn our attention to other matters, and our ’’ security of confidential information to-use and affordable solution for businesses of• No per user fees – offers savings all sizes. customers can as well. over incumbent solutionsKEY FEATURES Comprehensive, Enterprise-Class Solution Vice President of Hosting and Group Operations,Comprehensive Protection The Barracuda Spam & Virus Firewall is available ViaWest• Spam and virus filtering in eight models to handle a wide range of needs• Prevents spoofing, phishing and malware for small and medium businesses, educational institutions, government agencies, enterprises and• Invalid bounce suppression• Global or per user quarantine service providers.• Outbound email filtering for data loss prevention For inbound email filtering, the Barracuda Spam & Virus Firewall’s layered approach minimizes the• SMTP/TLS site-to-site encryption processing of each email which yields the performance required to process millions of messages per• Policy enforcement for compliance and corporate policies day. Unlike software solutions, the Barracuda Spam & Virus Firewall reduces the load placed on the email server by offloading both spam and virus filtering. Its architecture leverages 12 comprehensive12 Defense Layers defense layers to provide industry-leading defense capabilities.• Denial of Service protection• Rate control Barracuda Networks’ multi-layered approach to email security provides the most• IP Reputation (includes comprehensive protection available and optimizes the processing of each email to Barracuda Reputation) maximize performance. Inside the Technology• Sender authentication• Recipient verification• Triple-layer virus protection Predictive Sender Profiling goes beyond traditional email reputation analysis, probing• Custom policy deeper into sent email to identify bad sender behavior and block identity obfuscation• Spam fingerprint analysis techniques, despite a sender’s lack of spamming history. As the next generation of anti-• Intent analysis spam technology, Predictive Sender Profiling reinforces the industry-leading spam protection• Image analysis capabilities of the Barracuda Spam & Virus Firewall.• Bayesian analysis• Spam rules scoring Barracuda Real-Time Protection is a set of advanced technologies that enables the Barracuda Spam & Virus Firewall to immediately block the latest virus, spyware, and otherSupports Email Security Standards malware attacks as they emerge. These capabilities provide the fastest response times to• SPF, DomainKeys• Emailreg.org email-borne threats by adding a third layer of anti-virus protection to the Barracuda Spam &• External DNSBL support Virus Firewall. Virus Filter Behind the industry-leading initiatives of Predictive Sender Profiling and Barracuda Real-Time• Triple-layer virus blocking Protection are 12 explicit defense layers.• Barracuda Real-Time Protection• Decompression of archives• File type and extension blocking
5Barracuda Spam & Virus Firewall • Blocks email-borne spam and virus intrusions while preventing data loss SecurityAll models also incorporate essential outbound filteringtechniques including attachment scanning, virus filtering,advanced rate controls for zombie attacks, and variousblocking techniques to prevent crippling virus outbreaksfrom leaving the network. In addition, any confidentialdata in outgoing emails can be reviewed to conform to anyinternal policies or regulatory guidelines.Simplified and Centralized AdministrationThe Barracuda Spam & Virus Firewall features an easy-to-use web interface. The management and administration ofthe appliance is simple and cost effective with no softwareto install. The web interface allows administrators to define,manage, and control corporate email policies from onecentral place.The Barracuda Spam & Virus Firewall provides flexible,comprehensive protection through automatic downloads The Barracuda Spam & Virus Firewall filters all emailfrom Barracuda Central with the latest anti-spam and anti- messages and displays the number of emails receivedvirus updates. The appliance works with all SMTP email with statistics on how they were processed.servers by scanning both inbound and outbound email to Barracuda Spam & Virus Firewallensure that it is legitimate and virus-free. MODEL COMPARISON 100 200 300 400 600 800 900 1000 CAPACITY Active Email Users 1-50* 51-500 300-1,000 1,000-5,000 3,000-10,000 8,000-22,000 15,000-30,000 25,000-100,000 Domains 10 50 250 500 5,000 5,000 5,000 5,000 Message Log Storage 8 GB 10 GB 12 GB 24 GB 72 GB 120 GB 240 GB 512 GB Quarantine Storage 20 GB 60 GB 180 GB 360 GB 1 TB 2 TB FEATURES Compatible with all Email Servers P P P P P P P P Hardened and Secure OS P P P P P P P P Outbound Email Filtering P P P P P P P P Email Encryption P P P P P P P P Cloud Protection Layer P P P P P P P P MS Exchange/LDAP Accelerator P P P P P P Per User Settings and Quarantine P P P P P P Delegated Help Desk Role P P P P P P Syslog Support P P P P P P Clustering and Remote Clustering P P P P P Per Domain Settings P P P P P Single Sign-On P P P P P SNMP/API P P P P P Customizable Branding P P P P Per User Score Settings P P P P Delegated Domain Administration P P P P*The Barracuda Spam & Virus Firewall 100 is limited to providing anti-spam and anti-virus protection for up to 50 email addresses.Sizing ConsiderationsCapacity is dependent on the number of email users, system options and email mix. Selection should be based on the lower model of the userranges when relaying both inbound and outbound mail through the Barracuda Spam & Virus Firewall. Internet Service Providers and customerswith high email volumes should consult with a Barracuda Networks systems engineer to select the optimal configuration.
6 Barracuda Web Filter Protects web users from malicious and inappropriate content AVAILABLE AS Virtual Appliances see page 27 Organizations worldwide have recognized the need to create policies around its Internet usage in the workplace. Studies show that ‘‘ We are in love with the Barracuda Web Filter 610. Our students are completelyKEY BENEFITS 70 percent of browsing to pornography sites confused as to why sites• Keeps network safe from spyware, happens during normal business hours and like BTunnel and PageWash viruses and other malware about 30 to 40 percent of overall Internet usage (https sites) are no longer• Enforces Internet usage policies to prevent workplace liability issues in the workplace is not related to business. working. We couldn’t be• Increases productivity by While many websites targeted at business usage happier. Bandwidth usage is managing Internet usage provide secure content, an increasing number down almost 35 percent just• Improves network performance by from blocked popup ads, ’’ of websites and Internet applications targeting managing ads, streaming media, and other bandwidth-intensive applications personal usage are hosts to spyware, viruses and and spyware blocking. other Internet threats. Workplace personal webKEY FEATURES browsing poses a threat to productivity and to Technology Coordinator / Email Administrator,Gateway Level Network Threat Protection Lower Cape May Regional School District the security of the network as a whole. Cape May, NJ• Inbound spyware/virus blocking• Outbound spyware phone-home detection and blocking for data loss prevention The Barracuda Web Filter is an integrated anti-malware, content filtering, and application• Integrated spyware removal blocking solution designed to block spyware and viruses, and to enforce acceptable Internet• Social media monitoring usage policies by blocking access to websites and Internet applications that are not related to business.Web Content and Application Filtering• HTTP/HTTPS support• Proxy blocking Powerful Malware Protection• Application blocking With powerful, award-winning malware protection, the Barracuda Web Filter easily eliminates spyware, viruses, and other forms of malware from attempting to penetrate an organization’sFlexible Policy Management• LDAP/AD, NTLM, Kerberos integration network. The Barracuda Web Filter also facilitates automatic removal of spyware from infected for Single Sign-On authentication Windows computers with the included Barracuda Spyware Removal Tool that detects spyware• Time-of-day/day-of-week policies protocol activity (i.e., “phoning home”). By adaptively targeting machines that are infected, the• Time and bandwidth quotas• Custom categories Barracuda Web Filter provides widespread protection and removal without requiring pre-loaded• Remote filtering agent client software on every machine on the network.Comprehensive Reporting Inside the Technology• Integrated reports The Barracuda Web Filter provides precise and deterministic control over web traffic through• Scheduled reports a proxy-based architecture. Application protocols, including public IM services, peer-to-peer (P2P), and other Internet applications are filtered using a combination of Layer 7 deep-packet inspection and Layer 3 (destination port, IP address) rules. Policy Engine. A sophisticated policy engine enables granular control by providing integration with popular authentication schemes including LDAP, Active Directory, Novell eDirectory, Kerberos and NTLM. Reporting. An embedded database provides powerful built-in reporting capabilities without the need for external database software or client applications. For customers who want to use external reporting software, logs are exportable through syslog.
7Barracuda Web Filter • Protects web users from malicious and inappropriate content SecurityFlexible, Comprehensive FilteringThe Barracuda Web Filter combines preventative, reactive, andproactive measures to form a complete web filtering solution.Designed for the enterprise, the Barracuda Web Filter enablesorganizations to set up custom policies for particular users andgroups across multiple time zones. The Barracuda Web Filterintegrates with popular LDAP directory servers such as MicrosoftActive Directory, for both authentication and group membershipinformation. It also has remote filtering agents for Windows PCsand Macs to protect remote users’ computers.Remote FilteringThe Barracuda Web Filter also provides the Barracuda WebSecurity Agent (WSA), a downloadable client installed on off-network computers. Using the WSA, web traffic from remoteclient computers is transparently filtered through a BarracudaWeb Filter appliance. This ensures the same web browsingpolicies are applied to network users and remote users withoutthe need to invest in or manage aded solutions.Social Media MonitoringBarracuda Web Filter models 610 and higher can monitor socialmedia messaging. They can alert administrators if users sendsensitive information using a social media site’s email. They canalso forward social media emails to the Barracuda Message The Barracuda Web Filter monitors attempted policy violations, Barracuda Web FilterArchiver to store for litigation and compliance discovery. blocked spyware, virus downloads and infected clients. MODEL COMPARISON 210 310 410 610 810 910 1010 CAPACITY Throughput (Mbps) 5-10 10-50 30-80 70-150 100-200 200-300 600-1,000 Web Cache Size 10 GB 50 GB 100 GB 200 GB 300 GB 1 TB Concurrent Users 25-100 100-400 300-800 800-2,000 1,500-3,000 2,500-4,500 4,000-15,000 Active TCP Connections 50-400 400-1,600 1,600-3,200 3,200-8,000 8,000-10,000 10,000-15,000 15,000-45,000 FEATURES Hardened and Secure OS P P P P P P P Content Filtering P P P P P P P Application Control P P P P P P P Advanced Policy Creation P P P P P P P Network Threat Protection P P P P P P P Spyware Removal P P P P P P P Role-Based Administration P P P P P P P Web 2.0 Application Control P P P P P P P Syslog P P P P P P Ethernet Bypass Hardware P P P P P P Remote Filtering Agent P P P P P SNMP/API P P P P P Linked Management P P P P P WCCP P P P P P Social Media Monitoring P P P PSizing ConsiderationsCapacity is typically dependent on the volume of Internet traffic which in turn depends on the number of concurrent users, available throughput andthe type of traffic. For example, customers expecting heavy web browsing or streaming media content should consider an appliance at the higherend of the supported ranges. For help sizing the appropriate Barracuda Web Filter, customers should contact a Barracuda Networks system engineer.
8 Barracuda Web Application Firewall Defends websites and web applications from attacks AVAILABLE AS Virtual Appliances see page 27 Online web-based applications are increasingly at risk from professional hackers who target such applications in order to commit data theft or ‘‘ The Barracuda Web Application Firewall enables us to have nearlyKEY BENEFITS fraud. Being compromised can damage an 100 percent uptime while• Protects web application vulnerabilities from enterprise’s reputation, result in loss of customers, p r ov i d i n g t h e q u i c k being exploited and facilitates compliance and impact an organization’s bottom line. The response times that users with industry regulations, such as PCI DSS• Prevents data theft and fraud associated Barracuda Web Application Firewall offers every expect. With its superior with online credit card transactions capability needed to deliver, secure, and manage security features, it• Prevents service disruptions that can enterprise web applications from a single protects our network from result in loss of customers and impact appliance through an intuitive, real-time web malicious application layer an organization’s bottom line interface. By leveraging protocol or application attacks and allows us toKEY FEATURES vulnerabilities to instigate data theft, denial of deploy widely availableSecurity service, or defacement of a company’s website, cost-effective s e r v i ce s• HTTP/HTTPS/FTP protocol validation the Barracuda Web Application Firewall provides within our budget. Since• Protection against common attacks - SQL Injection award-winning protection against hackers. deployment we have seen - Cross Site Scripting (XSS) an increased usage of our web app lic at ions and ’’ - OS command injection Comprehensive Web Site Protection - Cookie tampering and hijacking• Form validation Unlike traditional network firewalls or intrusion services.• Adaptive security detection systems that simply pass HTTP, HTTPS• Brute force protection or FTP traffic for web applications, the Barracuda Security-Messaging Engineer,• Session tracking Information Security Web Application Firewall proxies this traffic and Healthcare Industry• Rate control inspects it for attacks to insulate web servers from direct access by hackers. Many applications are vulnerable• Anti -virus for file uploads• Outbound data theft protection to such attacks when application developers do not consistently employ secure coding practices. - Credit card numbers - Social Security numbers The Barracuda Web Application Firewall is designed to combat all attack types that have been• Complete response control• XML Firewall categorized as significant threats. As a full proxy, the Barracuda Web Application Firewall blocks• Trusted hosts The Barracuda Web Application Firewall provides comprehensive bi-directional security forAuthentication and Authorization web and application servers. On the ingress the Barracuda Web Application Firewall checks Inside the Technology• LDAP/RADIUS/local user database all components of web traffic including URLs, parameters, headers and cookies for attacks.• Client certificates It also provides protection against application-layer denial of service, brute force and cross-• Single Sign-On site request forgery attacks. An integrated anti-virus engine prevents infected files from• RSA SecurID being uploaded to the servers. On the egress, it scans the outbound data to secure sensitive• CA SiteMinder information and cloaks server information including errors and server headers.Traffic Management • Compression The Barracuda Web Application Firewall is XML-aware and secures against multiple XML• Load balancing • SSL offloading security issues including XML denial-of-service techniques, while enforcing compliance to• Content routing • High availability WSDL and XML schemas.• CachingVisibility The Barracuda Web Application Firewall integrates with LDAP and RADIUS servers to provide• Attack, access and audit logs access control for web resources while accelerating content delivery with traffic management• Extensive reporting capabilities like caching, compression, load balancing and content routing. In addition, the• Integration with SIEM solutions Barracuda Web Application Firewalls can be deployed inline as a bridge or a reverse proxy, or out of line as a one-armed proxy.
9Barracuda Web Application Firewall • Defends websites and web applications from attacks Securityattacks while preventing leakage of sensitive outbounddata such as credit card or Social Security numbers. TheBarracuda Web Application Firewall’s adaptive securitymodule provides comprehensive security to webapplications by learning the Web application structure orproviding an easy way of configuring exceptions toconfigured security policies.Advanced Traffic Management and AccelerationTo minimize ongoing administration associated withprotecting websites against application vulnerabilities,the Barracuda Web Application Firewall automaticallyreceives Energize Updates containing the latest policy,security and attack definitions. In addition to thecomprehensive security benefits, there are alsoapplication delivery capabilities such as SSL offloading,SSL acceleration and load balancing. These capabilitiesare designed to improve the performance, scalability,and manageability of today’s most demanding datacenter infrastructures. Barracuda Web Application Firewall The Barracuda Web Application Firewall monitors and tracks common application attacks, performance statistics and bandwidth usage. MODEL COMPARISON 360 460 660 860 960 CAPACITY Backend Servers Supported 1-5 5-10 10-25 25-150 150-300 Throughput 25 Mbps 50 Mbps 100 Mbps 600 Mbps 1 Gbps FEATURES HTTP/HTTPS/FTP Protocol Validation P P P P P Protection Against Common Attacks P P P P P Form Field Metadata Validation P P P P P Web Site Cloaking P P P P P Response Control P P P P P Outbound Data Theft Protection P P P P P Granular Policies to HTML Elements P P P P P File Upload Control P P P P P Logging, Monitoring and Reporting P P P P P High Availability P P P P P SSL Offloading P P P P P Authentication and Authorization P P P P P Vulnerability Scanner Integration P P P P P Centralized management P P P P P Caching and Compression P P P P LDAP/RADIUS Integration P P P P Load Balancing P P P P Content Routing P P P P Adaptive Profiling P P P AV for File Uploads P P P XML Firewall P P PSizing ConsiderationsCapacity is dependent on the total network throughput and number of backend servers behind the Barracuda Web ApplicationFirewall, as well as actual traffic patterns, backend applications and features enabled. It is recommended to deploy the BarracudaWeb Application Firewalls in high availability (HA) pairs. For help sizing the appropriate Barracuda Web Application Firewall,customers should contact a Barracuda Networks system engineer.
10 Barracuda NG Firewall Provides application and identity-aware protection for distributed networks AVAILABLE AS Virtual Appliances see page 27 The Barracuda NG Firewall is a family of hardware and virtual appliances designed to protect network infrastructure, improve ‘‘ Within the first two months of deployment we had already realizedKEY BENEFITS site-to-site connectivity and simplify dramatic cost savings• Protects network infrastructure in the presence administration of network operations. per location as well as of social media and other Web 2.0 applications Beyond its powerful network firewall and increased network traffic• Reduces cost of managing large dispersed networks VPN technologies, the Barracuda NG Firewall bandwidth. In addition we• Enables consistent central management integrates a comprehensive set of next have secured a solution of thousands of remote security devices generation firewall technologies, including that allows for traffic Layer 7 application control, intrusion prioritization and routingKEY FEATURESFirewall/VPN Features prevention, web filtering, anti-virus, anti-spam in case of a connectivity• Layer 7 Application Control for Web 2.0 and network access control. loss. Barracuda Networks is• Stateful packet forwarding a highly reputable company• Intrusion Prevention (IPS) The Barracuda NG Firewall features intelligent throughout the world, known• Transparent proxying (TCP)• NAT (src, dst, nets), NAPT, PAT site-to-site traffic management capabilities for its security expertise. We• Dynamic rules / timer triggers that optimize both availability and performance are convinced that with• Virtual rule test environment of the Wide Area Network. Administrators Barracuda Networks as the• Application-aware traffic intelligence in VPN tunnels can control application-level routing and new company behind our prioritization of traffic across multiple links, firewall infrastructure, weTraffic Optimization tunnels and traffic conditions. Supported link will be well-served and supported for many years to ’’• Link monitoring and aggregation types include dedicated lines, xDSL, 3G wireless• Policy routing• Traffic shaping mobile networks, and any other link types come.• WAN compression presented as a copper or optical Ethernet link.• On-the-fly traffic flow reprioritization CIO, RHI On top of these leading next generationHigh Availability firewall capabilities, highly resilient VPN technology combined with intelligent traffic management• Active-active or active-passive (with external load balancer only) capabilities allow customers to save line costs and increase overall network availability. Scalable• Network notification of failover• Transparent failover without session loss The Barracuda NG Firewall is available as a small, fanless mini-desktop model or large, 2U Inside the Technology• Encrypted HA communication rackmount form factor appliance that delivers up to 20 Gbps throughput and up to 24x Gbps copper ports, as well as SFP and SFP+ fiber options.Central Management OptionsBarracuda NG Control Center Layer 7 Application Control. Next to traditional firewalls and deep packet inspection, every• Standard Edition Barracuda NG Firewall appliance detects and controls more than 800 evasive applications such - Single tenant - 1 configuration grouping as Skype, Kazaa, web conferencing, flash and others to effectively allow users to take back - Unlimited firewalls control of the network.• Enterprise Edition - Single tenant Clients. Every Barracuda NG Firewall appliance includes unlimited VPN client usage. Optional - Unlimited configuration groupings SSL VPN and Barracuda NG Network Access Clients enforce client security posture before - Unlimited firewalls allowing access to the network or facilitating guest networking enforcement.• Global Edition - Support for 5 tenants included Management. Scalable, audit-proof management is centralized to reduce administrative - Unlimited configuration groupings overhead and ensure policy compliance for local and remote locations. - Unlimited firewalls - Additional tenant licenses available
11Barracuda NG Firewall • Provides application and identity-aware protection for distributed networks Securitycentralized management of all aspects of the solution reducesadministrative overhead and ensures policy compliance forlocal and remote locations.Central Management Across the EnterpriseTo centralize management across many different firewalls andremote access users, the Barracuda NG Control Center enablesadministrators to configure security and network access policies,control firmware update revisions, and manage user settings.Template-based configuration and globally available securityobjects enable efficient configuration across thousands oflocations. Highly customizable administrative roles can bedefined to delegate administrative capabilities for specificdepartments or locations. The Barracuda NG Firewall Control Center provides centralized, real-time monitoring of all the firewalls across the enterprise.The Barracuda NG Firewall is designed for deployment acrossthe entire enterprise. Through the Barracuda NG Control Center, administrators can manage security, content and traffic managementpolicies from a single interface. Centralized management of security and content policy provides a number of benefits, including: • Consistent security posture and policy enforcement across the enterprise. • Real-time accounting and reporting across multiple gateways • Comprehensive history and rollback of configuration and policy changes across the network • Centralized version control of anti-spam, anti-virus, content filtering and Network Access Control updatesStops Threats and Reduces Administrative OverheadThe Barracuda NG Firewall is an application-aware firewall designed to mitigate threats, enforce policies and optimize traffic flow, Barracuda NG Firewallresulting in ultra-reliable WAN links. Centralized management provides visibility of the entire network, reducing administrative overhead. MODEL COMPARISON F10 F100 F200 F300 F400 F600 F800 F900 CAPACITY Firewall Throughput 300 Mbps2 300 Mbps2 350 Mbps2 350 Mbps2 1.8 Gbps2 4.7 Gbps2 10 Gbps3 21.0 Gbps3 VPN Throughput 4 85 Mbps 85 Mbps 160 Mbps 160 Mbps 430 Mbps 950 Mbps 2.2 Gbps 3.78 Gbps IPS Throughput 60 Mbps 60 Mbps2 84 Mbps2 84 Mbps2 486 Mbps2 1316 Mbps2 3.1 Gbps2 4650 Mbps2 Concurrent Sessions 8,000 8,000 70,000 70,000 300,000 300,000 500,000 1,000,000 New Sessions/s 1,300 1,500 2,500 2,500 7,000 16,000 35,000 100,000 FEATURES Firewall P P P P P P P P IPsec VPN P P P P P P P P Intelligent Traffic Flow Control P P P P P P P P Layer 7 Application Control P P P P P P P P Barracuda Web Filter P P P P P P P P WAN Compression P P P P P P P P IPS P P P P P P P P WAN Optimization P P P P P P Spam Filter P P P P P P Barracuda Web Security Service Optional Optional Optional Optional Optional Optional Optional Barracuda NG Web Filter Optional Optional Optional Optional Optional Optional Optional Barracuda NG Malware Protection Optional Optional Optional Optional Optional Optional Optional Barracuda NG SSL VPN and NAC Optional Optional Optional Optional Optional Optional Barracuda NG Secure Web Proxy Optional Optional Optional2 Measured with large packets (MTU1500) 3 Measured with large packets (MTU9000) 4 VPN throughput using AES128 NOHASHSizing ConsiderationsChoosing the correct model depends on the actual traffic patterns, web usage behavior and available uplink bandwidth. For help sizing theappropriate Barracuda NG Firewall appliance, customers should contact a Barracuda Networks system engineer.
12 Barracuda SSL VPN Enables secure, clientless remote access AVAILABLE AS Virtual Appliances see page 27 The Barracuda SSL VPN enables secure, clientless remote access to internal network resources from any web browser. Designed for remote ‘‘ Before the Barracuda SSL VPN we had no way of providing affordableKEY BENEFITS employees and road warriors, the Barracuda remote access for the many• Secure remote access for end users SSL VPN provides comprehensive control schools we look after in the• Avoids networking issues of IPsec over file systems and web-based applications county. Other solutions on• End-user portal displaying available resources• Granular security policies and auditing requiring external access. The Barracuda SSL the market were just too• Supports Multi-Factor Authentication VPN integrates with third-party authentication expensive and we needed to mechanisms to control user access levels and to find an alternative solution.KEY FEATURES provide Single Sign-On capabilities. I’m happy to say we foundSecurity Features• Supports Active Directory, LDAP the Barracuda SSL VPN to and built-in user databases Comprehensive and be the most affordable and feature rich product on the ’’• Policy-based rights management Customizable Security• Multi-Factor Authentication By its very nature, remote access can be rather market. - PKI – client certification or USB key risky since it exposes internal network resources - RADIUS – authentication or hardware token across the Internet. However, the Barracuda SSL Systems Support Manager, Cambridgeshire County Council - PIN authentication VPN mitigates these risks by tightly controlling Waterbeach, UK - One-time password via email or SMS user access through a full suite of authentication• Single Sign-On• Restrict logins by OS or browser versions mechanisms, client access controls, and support for third-party authentication such as Active• Virtual keyboard and cache cleaning Directory or LDAP. Administrators have the option of layering security by enforcing the use of PIN for public workstation access numbers, hardware tokens, client certificates, and other forms of secure authentication on top of• Anti-virus scanning of file uploads Active Directory or LDAP to securely manage external access to network resources.• Supports mobile devices through L2TP/IPsec and PPTPVPN Features• Intranet website forwarding Three fundamental technologies make the Barracuda SSL VPN easier to deploy than traditional• Network file system browsing VPN systems.• Remote Desktop Single Sign-On Inside the Technology• Single Sign-On End User Portal. Unlike traditional VPNs that simply give users an IP address on the network,• Barracuda SSL VPN Agent: Java the Barracuda SSL VPN enables administrators to lay out “favorites” for end users as well as agent for clientless deployment defines granular access control policies to grant or restrict access to internal websites, file• Barracuda Network Connector: Installable shares and applications. VPN client for IP connectivity• Citrix XenApp (ICA), VNC, NX, Telenet, SSH and RDP applications Reverse Proxy. Because SSL support is built into all modern web browsers, no additional• Local Windows Explorer drive mapping software is required to access websites through the Barracuda SSL VPN. A file browser web• Configurable SSL tunnels application built into the Barracuda SSL VPN enables user access to network file shares using• Multiple user logon realms the reverse proxy.Auditing and Reporting Capabilities SSL Tunneling. Traditional VPN tunnels work at a network level. SSL tunnels work at a session• Track file, web and network access level and do not require remote clients to have their own IP address on the network. By setting• Reports in PDF, CSV and text formats up SSL tunnels through a lightweight Java client downloaded on demand, the Barracuda• Granular controls for access and policy SSL VPN can provide remote access using software such as Remote Desktop Services, Citrix• Health monitoring XenApp, or VNC without worrying about traditional VPN networking issues such as IP address• Network utilization and appliance load statistics conflicts, VPN pass through or GRE ports.
13Barracuda SSL VPN • Enables secure, clientless remote access SecurityWith robust security and auditing facilities, administrators can definecustom policies to govern resource access to particular users orgroups while tracking user activity. For added security, files uploadedduring a VPN session to network file shares or internal websites arescanned for viruses and other malware to prevent infections ofcritical network resources.For complete network layer access, the Barracuda SSL VPN includesthe Barracuda Network Connector, an installable VPN client forTCP or UDP connectivity. With the Barracuda Network Connector,users gain SSL access to legacy client/server applications duringa VPN session. To minimize ongoing administration associatedwith security, the Barracuda SSL VPN automatically receiveshourly Energize Updates containing the latest virus, security andapplication definitions.ConnectivityThe Barracuda SSL uses PPTP and L2TP to allow connections The Barracuda SSL VPN provides policy-from mobile devices. PPTP and L2TP clients are standard on most based access to network resources.smartphones and tablets including: Apple iPhones and iPads,smartphones running Android 1.6 or higher and tablets runningAndroid 3.0 or higher. For secure mobile connections, L2TP isdeployed over IPSec. MODEL COMPARISON 180 280 380 480 680 880 Barracuda SSL VPN CAPACITY Maximum Concurrent Users 15 25 50 100 500 1000 FEATURES SSL Tunneling P P P P P P Barracuda Network Connector P P P P P P Intranet Web Forwarding P P P P P P Network File Access P P P P P P Windows Explorer Mapped Drives P P P P P P Citrix XenApp/VNC/NX/Telnet/SSH/RDP P P P P P P Remote Desktop Single Sign-On P P P P P P Anti-Virus P P P P P P L2TP/IPsec, PPTP Mobile Device Support P P P P P P Client Access Controls P P P P P P Active Directory/LDAP Integration P P P P P P Layered Authentication Schemes P P P P P P Remote Assistance P P P P Multiple User Realms P P P P Barracuda SSL VPN Server Agent P P P P Hardware Token Support P P P P RADIUS Authentication P P P P Syslog Logging P P P P SNMP/API P P P Clustering/High Availability P P PSizing ConsiderationsCapacity is dependent on the number of concurrent users. Organizations with larger numbers of remote users may see higher ratios of concurrentusers to employees in network environments. For help sizing the appropriate Barracuda SSL VPN, customers should contact a Barracuda Networkssystem engineer.
15Barracuda Web Security Service • Pure cloud web filtering and malware protection with flexible deployment options Ser vicesUnified Management and ReportingThe cloud-based management portal lets multipleadministrators configure web usage rules, monitorInternet access and generate detailed reports across allthree deployment options. The dashboard givesadministrators a quick snapshot of aggregated traffic.Administrators can also drill down through levels ofincreasingly granular data.Driving Out Deployment RiskWith Barracuda Web Security Service, the economicscenter around the size of the user population protected,rather than the specifics of the deployment. Even whenadditional gateway hardware is required for deployment,costs involve a simple one-time setup fee. There are noadditional recurring charges associated with themaintenance of that hardware. There are no additionalsoftware license fees for agents. When needs change, youcan easily add or remove deployed components.Barracuda Web Security Service pricing effectively endsacquisition risks. The cloud-based management portal provides a snapshot of web activity across all the users in the organization independent of location. Barracuda Web Security ServiceSpecifically, the Barracuda Web Security Service: • Provides protection from web malware and enforces web policy for all users. • Offers user-centric pricing to change deployment options with little or no cost impact. • Lowers total cost of ownership for web security and policy enforcement. • Enables easy central management, administration and reporting across cloud, agent and appliance deployment options. Barracuda Web Security Service Architecture Barracuda Web Security Service Common Management and Reporting Interface On-Premises security Administration and policy enforcement Headquarters/ Branch Office Users Web Security Gateway Appliance OR or virtual appliance Cloud Proxy Cloud Redirection Internet Satellite Office Users Web Security Agent Software Remote/Mobile Users The Barracuda Web Security Service is designed to fit any deployment scenario for any organization of any size. The deployment options range from simply pointing browsers to the cloud-based service, or to the onsite appliances that are deeply integrated into the directory services and software agents to filter laptops.
16 Barracuda Email Security Service Cloud-based email security and Data Loss Prevention The Barracuda Email Security Service is a comprehensive and affordable cloud-based email security service, protecting against the latest spam, viruses, worms, phishing and denial of service attacks. All inbound emails are filtered in the cloud for spam and viruses before delivery to the customers’ network. Comprehensive Protection The Barracuda Email Security Service leverages advanced security technologies from the industry- leading Barracuda Spam & Virus Firewall and features rich multiple cloud-based protection: • Rate control and Denial of Service (DoS) protection • Reputation-based blocking from known spam and malware sources • Anti-virus, featuring the Barracuda Anti-Virus Supercomputing Grid • Protection against spam, phishing, fraud and emails with other malicious intent • Custom sender/recipient policy Spam and viruses are blocked in the cloud prior to delivery to the customer, saving network bandwidth and providing additional Denial of Service protection. In addition toBarracuda Email Security Service network bandwidth savings, cloud-based filtering also offloads any processing required for spam and virus filtering from the email server. Integration with Barracuda Spam & Virus Firewall The Barracuda Email Security Service can be combined with the Barracuda Spam & Virus Firewall to deliver a powerful, hybrid solution combining the advantages of cloud-based filtering with the security and control of a premises-based The Barracuda Email Security Service filters all email messages solution. The advantages of integrating the Barracuda and displays statistics on how they were processed. Email Security Service with the Barracuda Spam & Virus Firewall include: • Integration with directory server (LDAP) to protect against dictionary attacks • Filtering of outbound emails for internal policy enforcement and regulatory compliance • Email encryption provided through the Barracuda Email Encryption Service • User-based control and integration with the Barracuda Spam & Virus Firewall Outlook Add-In • Fine-grained policies including content filtering Ease of Deployment and Use Since emails are processed in the cloud, there is no need to install any hardware or maintain additional infrastructure. Deployment is quick – typically in a matter of minutes. The message log is fully indexed providing a fast and accurate search of emails. The Barracuda Email Security Service also provides a per-user message log and quarantine, allowing users to manage their own emails.
17Barracuda Control Center Ser vicesCloud-based centralized management of Barracuda Networks SolutionsThe Barracuda Control Center is a hosted web service offered by Barracuda Networks that enables administrators to centrallymanage one or more Barracuda Networks appliances, even those in different geographic regions. With the Barracuda Control Centeradministrators can: • Monitor the status and operation of all supported solutions from a single interface • Maintain common configurations and policies across multiple appliances and set exceptions where necessary • Consolidate reporting across disparate appliances • Assign roles to multiple users, enabling different levels of administration privileges • Audit all logins and configuration changes through detailed logsThe Barracuda Control Center is ideal for use by both end customers and Managed Service Providers. This solution does not requireadditional installation and is available 24x7 as an online service. Barracuda Control Center The Barracuda Control Center enables administrators to manage all Barracuda Networks products through a single, centralized interface. The Barracuda Control Center automatically With separate roles for Administrator, Help Desk Manager, aggregates reports across all managed appliances and read-only Users, as well as the ability to define privileges for a consolidated view of the network. by appliance or appliance groups, the Barracuda Control Center provides the flexibility to map to the security models of distributed IT organizations and Managed Service Providers.