Home

Barracuda Networks NG Firewall F100

1. d Barracuda i About Barracuda Networks Inc NYSE CUDA 3 The Barracuda Networks Difference 3 References 4 Barracuda NG Firewall Application amp Identity Aware Protection for Distributed Network Environments 5 SOLUTION ADVANTAGE 1 Our Solution for Your Network Security Needs 6 SOLUTION ADVANTAGE 2 WAN Protection and Optimization D SOLUTION ADVANTAGE 3 Secure Web Access 8 SOLUTION ADVANTAGE 4 Central Management of the Entire Security Infrastructure 9 TECHNOLOGY ADVANTAGE 1 Application Control Regain Control of the Network 10 TECHNOLOGY ADVANTAGE 2 Intrusion Detection amp Prevention System Complete and Comprehensive Real Time Network Protection ES TECHNOLOGY ADVANTAGE 3 Management Concept of Barracuda NG Firewall 14 Model Comparison for the Barracuda NG Firewall iS Subscriptions for the Barracuda NG Firewall 7 Availability Matrix Es Energize Updates 17 Instant Replacement 17 Premium Support 18 On site cold spare unit 18 Content Security for the Barracuda NG Firewall 19 Barracuda Web Filter 19 Barracuda NG Web Filter 19 Barracuda NG Malware Protection 20 Barracuda NG Web Security 20 Barracuda Web Security Service 21 Network Access Clients for the Barracuda NG Firewall 22 Barracuda NG Control Center Central Management across the Enterprise 24 CONTENTS Barracuda NG Report Creator Creating C level reports with ease scheduled and fully automated 26 Barracuda Vir
2. Reboot restart the services e Rebuild the management tunnel connection e Shutdown and bring up again the entire network stack In addition administrators can trigger the Barracuda 3G UMTS USB Modem M10 to send a status message to the cell phone of the administrator which includes vital information AL SO 10 20 32 such as firewall gateway state and link details in case the firewall gateway is no longer wm 1 E pe remotely accessible or the administrator quickly wants to check the status while being on POMERNE the road i 22 02 2011 03 09 An intelligent combination of security checks such as support of a phone number ACL 1 2 status a12345 password protection on a per command basis as well as a maximum successive number command confirmation of commands counter assure that there is virtually no abuse potential and remote DOS Model F10 1210002 attacks are ruled out LoadAvg 0 24 0 72 0 52 Note Barracuda Networks cannot guarantee signal reception In case your server rooms are located in a basement or in a place with insufficient signal reception make sure that the signal quality is 1 umts link first is up 1 umts lin 2 2 k state OK sufficient especially prior to purchasing large quantities The firmware version needs to be 5 0 2 or higher The SIM card is not included and has to be obtained independently through a mobile phone provider 1 The rack mount kit will require 2 TU slots in a rack in height as t
3. Redundant Disk Array RAID SIZE WEIGHT DIMENSIONS Weight appliance kg Weight carton with appliance kg Appliance size width x depth x height mm Carton size width x depth x height mm Form factor ENVIRONMENTAL Noise emission db A Operating temperature C Storage temperature C Operating humidity non condensing Ziel GO 1 DB9 HDD 4x 500 or better RAID 5 18 Des 648 x 442 x 89 870 x 680 x 286 2U Full Size N A 0 to 40 20 to 70 5 to 95 CERTIFICATIONS amp COMPLIANCE CE emissions CE electrical safety FCC EMISSIONE ROHS compliant POWER amp EFFICIENCY Power supply type Power type AC DC Input rating Volts Input frequency Hz Auto sense Max power draw Amps PACKAGING CONTENT Appliance Direct power to wall outlet USB flash drive for recovery amp installation Quick start guide 2 x Barracuda L shape rack mount bracket Barracuda Rail kit Yes Yes Yes Yes Dual internal AC 100 240 47 63 ES 41 Yes Ves Yes des Yes Yes BARRACUDA 19 RACKMOUNT SHELF KIT The Barracuda Rackmount Shelf Kit is a field upgrade to deploy Barracuda NG Firewall models F100 F101 F200 and F201 into a 19 inch rack environment BARRACUDA L SHAPE RACKMOUNT BRACKET The L shape rackmount bracket enables Barracuda Firewall F280 to be mounted in a 1U Standard 19 Rack slot BARRACUDA 3G UMTS USB MODEM M10 The Barracuda 3G UMTS Modem M10 provides supp
4. ca Ul vd BARRACUDA NETWORK ACCESS CLIENTS BARRACUDA NG NAC SUBSCRIPTION o A BARRACUDA BARRACUDA SSL D BARRACUDA NETWORK ACCESS VPN TRANSPARENT L i SOFTWARE FEATURES VPN CLIENT CLIENT CLIENT Qo ARCHITECTURE A Integrated VPN client e Ko Imtegted heath ee e S Managed personal firewall e e p TT ee S Customizable user interface e o n Low power consumption network stack e SUPPORTED OS VARIANTS Microsoft Windows XP 32 bit only o e e Microsoft Windows Vista 32 bit 64 bit e 0 0 e Microsoft Windows 7 32 bit 64 bit e e Microsoft Windows 8 32 bit 64 bit e Linux kernel 2 4 kernel 26 e sono MacOSX I06x107x MOB e S MANAGEMENT Central management of VPN configuration O e VPNdiagnosticlog 000 e 0 0 amp e VPN system diagnostics report e e 2 VPN status monitoring e e Attack access Cae e e Packet log capture 000000 e O e maer a 0 009 00 D Silent client setup o e o Password protection ofsettings e oi AUTHENTICATION SUPPORT C Microsoft Certificate Management Crypto API e 9 e a MO Ate DO a eo e LDAP e e o RADIUS e e Metz yy e G LT a External X509 certificates o e e SMSPASSCODE H e 0 0 0 0 e D A e e Smart cards lt gt e e Microsoft domain logon support prelogon O 0 0 0 PERSONAL FIREWALL CAPABILITIES Dynamic adapter object handling o o o Dynamic user object handling e Oo MEM del M MEM e e M M
5. C O c C SI D UJ a BARRACUDA NG FIREWALL F600 Picture shows Barracuda NG Firewall F600 standard model C10 un dud UJ 49 LL VU Sn ge 3 Ko Sn o E Power supply Single internal Dual hot swap internal optional NG FIREWALL F600 UNE Sie Ses RUN INTERFACE ENVIRONMENTAL Standard model 12x1 GbE Copper Noise emission db A N A SFP model 8x1 pg Operating temperature C 0 to 40 4x1 Storage temperature C 2040 00 SO aech 8x1 A Operating humidity non condensing 5 to 95 3 2X1 ESE se MTBF SYSTEM ES 2 US 0 MTBF yrs 25 EE Usus CERTIFICATIONS amp COMPLIANCE PERFORMANCE AS OF FIRMWARE RELEASE 5 4 X un s CE emissions MES Lai throughput Gbps 207 CE electa te vec Firewall throughput Jumbo Frames Gbps N A E edd SE VPN throughput AES 128 NOHASH Gbps 156 TORS complfani vec VPN throughput AES 128 MD5 Gbps 14 POWER amp EFFICIENCY VPN throughput AES 128 SHA Gbps 14 Power supply type Internal VPN th h AES 256 M 14 E n oat Es es Power type AC DC AC IP DI QU Honor ops E Input rating Volts 100 240 Concurrent sessions 400 000 put ects IHA 50 60 4 LL New sessions s 35 000 ne Yes d MENSI Wattage max power draw W 300 c SUSAN P Max power draw Amps 5 10 RSS STOR ASE Max heat dissipation W 300 Lo Wee d Max heat dissipation BTU 1024 Size GB 80 or better U s i Energy efficiency average gt 80
6. External power brick amp cables USB flash drive for recovery amp installation Quick start guide 1 Measured with large packets MTU1500 2 Measured with TCP gt 5 Yes Yes Yes Yes External brick AC 100 240 50 60 es 40 1 6 36 123 gt 80 Yes ES Yes ee Ves Ves Yes BARRACUDA NG FIREWALL F100 F101 NG FIREWALL F100 INTERFACE Copper Ethernet NICs 4x1 GbE USB 2 0 2 Serial console 1 RJ45 Integrated WiFi access point 802 11 b g Model F101 only PERFORMANCE AS OF FIRMWARE RELEASE 5 4 X Firewall throughput Mbps 300 Firewall throughput Jumbo Frames Mbps N A VPN throughput AES 128 NOHASH Mbps 85 VPN throughput AES 128 MD5 Mbps 80 VPN throughput AES 128 SHA Mbps 78 VPN throughput AES 256 MD5 Mbps 70 IPS throughput Mbps 60 Concurrent sessions 8 000 New sessions s 1 500 MEMORY RAM GB p MASS STORAGE Type Flash Size GB 4 or better SIZE WEIGHT DIMENSIONS Weight appliance kg 35 Weight carton with appliance kg 5 5 374 x 190 x 50 470 x 355 x 180 Appliance size width x depth x height mm Carton size width x depth x height mm Form factor Compact HARDWARE Hardware crypto accelerator Yes built in Cooling Fanless Power supply Single external Note While it is technically feasible and fully supported to run the Barracuda NG Malware Protection and the Barracuda Web Filter on this unit Barracuda Networks recommends offloading Malware Prot
7. NG Web Filter NG Malware Protection NG Web Security SSL VPN and NAC BASE LICENSES FOR BARRACUDA NG FIREWALL UNITS This license contains unlimited users protected IPs VPN tunnel and VPN clients without a limit on concurrent connections The license is associated with a hardware ID and model of the machine it was issued for Typically a MAC address of a network card is used as the key for the license The generated license file is transferred to the unit during the activation procedure Note The Barracuda NG Firewall hardware detection function will carry out a compatibility check upon installation If the base license does not match the actual hardware model the system will enter a 15 day grace period After 15 days the Barracuda NG Firewall will stop forwarding any traffic BASE LICENSES FOR BARRACUDA NG FIREWALL VX UNITS The base licenses for virtual appliances allow the installation of a Barracuda NG Firewall on supported virtualization solutions and support a specific number of CPU cores The base licenses are limited by the defined capacity numbers contained in their names e g for the Barracuda NG Firewall VF25 the capacity limit is 25 The only exemptions are editions VF1000 VF 2000 VF4000 and VF8000 which include unlimited user licenses Capacity is tracked by the firewall based on concurrent usage and entails firewall traffic protected IPs application traffic e g through the proxy or FTP gateway and any
8. Se ee A Leen m polices based on applications users Prioritize Salesforce Any Salesforce Any Any Always Business B 1D3 EN Pass groups and time regardless of source ALL APPS Any Any Any Any Always VolP A ID2 S Pass destination port or protocol Risk Properties Info WU d T O Z 5 5 Y Sn Sn ca Intuitive configuration of applications objects allows easy control and enforcement of more than 1 200 Web 2 0 and business applications 45 Ezpeer F Secure AV Update 4 Ej Facebook gt Ej Facebook Apps KE Facebook Base KE Facebook Chat E Facebook Events E Facebook Fietransfer E Facebook Groups Ki Facebook Mail E Facebook Photos E Facebook Post KE Facebook SocialPlugins KE Facebook Video Call Ki Facebook Videos Face Time Fast share Bandwidth Consuming Supports File Transfer Bro Ezpeer is a popular Taiwanese music platform that a F Secure Corporation formerly Data Fellows is an a Facebook is a social networking service and webs t Encrypted Browser Based Client Application o o e 2 e e e o EN O Business Encrypted Supports File Transfer Browser Based Games Bandwidth Consuming Time Productivity Consuming Vulne Media Streaming Bandwidth Consuming Time Productivity Consum File Storage and Backup Bandwidth Consuming Encrypted Suppo File Storage and Backup Band
9. Ul D IPPON uosiedwo SS CU CU n C O C c G SA D mud a Model Comparison U q LL Q 5 5 Y y Sn Se CO MODEL F100 F200 F300 INTELLIGENT TRAFFIC FLOW CONTROL CONTINUED Automatic Activation of Alternate QoS Policy upon Main WAN e e o o e e o e o Failure and Backup Uplink Activation Firewall Compression e e o o e o VPN Compression e o o O Data Deduplication e 6 e o o o Link Aggregation e o e o INFRASTRUCTURE Diners ever e e o o DHCP Relay e e o PINS Sewer o e o o WiFi Access Point Ehe F201 o F301 3G UMTS Data e S s S S x Modem option USB SNMP e e OSIRIA RE EG o o o o o o o o BGP e o o o o o Realtime Accounting 9 o 6 O e o e 1 Virtual appliance models are available in 25 50 100 250 500 and 5 Depends on hardware unlimited user levels 6 While it is technically feasible and fully supported to run Barracuda NG Note that the virtual appliance models VF25 VF 1000 are limited to two CPU Malware Protection and Barracuda Web Filter on this unit Barracuda cores Model VF2000 supports 4 CPU cores model VF4000 supports 8 CPU Networks recommends offloading Malware Protection and Web Filtering cores and model VF8000 supports 16 CPU cores functions to the Barracuda Web Security Service cloud service 2 Measured with large packets MTU1500 7 Recommended
10. D L Barracuda Version 1 9 Barracuda Networks Inc Barracuda com O Barracuda Networks Inc Specifications subject to change without notice All other brands and names are the property of their respective owners All logos brand names campaign statements and product images contained herein are copyright and may not be used and or reproduced in whole or in part without express written permission by Barracuda Networks Marketino
11. E Facebook Photos 17MB e P Barracuda BOS o 13MB e HI Adobe Update moer 9 Flickr O zare 4 y Google Lively O sr 131 DD ZN Google Base O sun aC DD Google Update sor 30 M Google Analytics O mese 37 23 Google Maps O wsske 6 Twitter Base O sue ai T Amazon Webservices O 101 9 KB 4 Wi Facebook Chat 2 603KB T BB Microsoft Update O ssa 10 e Page 2 of 6 Tuesday September 03 2013 Barracuda Example of a report pdf page KEY BENEFITS e Consolidate physical server infrastructure in the data center Reduce costs and energy usage to support green IT e Realize the management benefits of virtualization including backup disaster recovery and dynamic resource allocation for scalability AVAILABLE MODELS Barracuda NG Firewall VF25 e Barracuda NG Firewall VF50 e Barracuda NG Firewall VF100 Barracuda NG Firewall VF250 Barracuda NG Firewall VF500 Barracuda NG Firewall VF 1000 2 e Barracuda NG Firewall VF2000 2 e Barracuda NG Firewall VF4000 2 e Barracuda NG Firewall VF8000 e Barracuda NG Control Center VC400 Barracuda NG Control Center VC610 Barracuda NG Control Center VC820 1 Virtual Appliance models VF25 to VF1000 are limited to two CPU cores Model VF2000 supports 4 CPU cores model VF4000 supports 8 CPU cores and model VF8000 supports 16 CPU cores 2 Virtual Appliance models VF 1000 VF2000 VF4000 and VF8000 h
12. Extendable Barracuda NG Firewalls offer companies sustainable investment protection Central Stops access to inappropriate or Barracuda NG Web Filter l offensive websites Malware and content scanning in the cloud enables secure wire speed Internet access for remote locations and low end units Integrated with Barracuda Web SUO Se vids Protection from unwanted emails in your Spam Filter management covers centralised update company network management and comprehensive High availability and use of Uninterrupted Internet access even during hardware replacement options different providers device or line failure Deployment Costs As a result of the Retrieve data on individual or collective Barracuda NG Firewall s fully integrated Real time accounting RN gateway activities functions rollouts only take a couple of Troubleshooting amp diagnostics Easy troubleshooting and disaster recovery hours instead of weeks Operating Costs Industry leading Centralized antvirus pattern updates n Control over a global anti malware centralized management lets you save and version monitoring for branch n i E infrastructure significant time and effort compared to other solutions Full content securit y Transformation of secure web access into an License and Hardware Costs Unique enhancements at all branch offices NE inherent part of the network infrastructure subscription model ensures that centrally managed b M companies
13. With technical Support centers across the globe Barracuda Networks is staffed 24x7 to provide immediate help without phone trees Barracuda Networks Technical Support is available in three levels with the highest Premium Support level providing a dedicated account manager and technical support personnel familiar with an organization s IT environment All Barracuda Networks appliances are built on hardened industrial strength equipment Beyond the standard warranty Barracuda Networks Technical Support offers the Instant Replacement program where Barracuda Networks will ship replacement units within one business day to keep organizations up and running UJ SAN 24 SHIOMION Epndeweg jnogy van 2M9114 DN 2pn gt e11e9 ja x REFERENCES Barracuda Networks has thousands of customers ranging from small and medium business to Fortune 1000 companies U that span all industry verticals Below is a sample of Barracuda Networks expansive Barracuda NG Firewall customer LLI portfolio UN U Within the first two months of deployment we had already realized dramatic cost savings per location as well as increased network a traffic bandwidth In addition we have secured a solution that O allows for traffic prioritization and routing in case of a connectivity 3 loss Barracuda Networks is a highly reputable company throughout ER the world known for its security expertise We are convinced that Z with Barracuda
14. the defective unit to Barracuda Networks or certify destruction If the customer fails to do so Barracuda reserves the right to charge the customer for a full Barracuda NG Firewall unit U T T o 5 5 Y Sn Sn ca for the Barracuda NG Firewall The Barracuda Web Filter enables highly granular real time visibility into online activity broken down by individual users and applications letting Customizable blacklists and whitelists administrators create and enforce effective Internet content and access 95 content categories for a detailed list policies The Barracuda Web Filter is included in the Energize Updates see page 56 subscription KEY FEATURES e Multiple category selection e Temporal constraints User specific group specific restrictions Included with Energize Updates subscriptions for Barracuda NG Firewall models F100 Online categorization lookup and higher as well as all Barracuda NG Firewall virtual appliances Unlimited user E de license with a Barracuda NG Firewall hardware unit For virtual appliances the number Customizable block pages of protected IPs capacity applies In High Availability HA environments each unit needs to be licensed separately The Barracuda Web Filter and the Barracuda NG Web Filter cannot be run at the same time and have to be activated separately one ata time on the Barracuda NG Firewall units The Barracuda NG Web Filter enables highly granular rea
15. 110 65 55 157 145 lo 53293 13 28 TCP 80 4 Hotmail Base monitor App ALL APPS FWD 10 17 1 110 65 55 72 199 lo 60996 13 s TCP 80 2 Hotmail Base monitor lt App gt ALL APPS FWD 10 17 1 110 9424511615 lo 60127 16 TCP 80 S Hotmail Base monitor lt App gt ALL APPS FWD 10 17 1 110 65 55 72 199 lo 10254 37 TCP 80 S Hotmail Base monitor lt App gt ALL APPS FWD 10 17 1 110 1575546242 lo 39102 13 EY TCP 80 S Hotmail Base monitor lt App gt ALL APPS FWD 10 17 1 110 65 55 237 73 lo 60167 13 A Te 80 S Hotmail Base monitor lt App gt ALL APPS FWD 10 17 1 110 65 55 237 73 lo 60134 13 s TCP 80 S Hotmail Filetransfer monitor lt App gt ALL APPS FWD 10 17 1 110 65 55 72 199 lo 61070 88 28 TCP 80 fjlinkedin Base monitor lt App gt ALL APPS FWD 10 17 1 110 91 225 248 80 lo 50021 99 TCP 80 BE Microsoft Update monitor lt App gt ALL APPS FWD 172 22 0 86 23 0 174 56 lo 49245 98 TCP 80 E Microsoft Update monitor lt App gt ALL APPS FWD 172220 88 157 55 240 221 lo 49885 a 17 EB TP 80 EE Microsoft Update monitor lt App gt ALL APPS FWD 17222062 192 221 106 253 lo 49219 1 EH TCP 80 BB Microsoft Update monitor lt App gt ALL APPS FWD 17222067 65 55 25 44 lo 51738 13 SB TCP 80 BB Microsoft Update monitor lt App gt ALL APPS FWD 17222074 23 0 174 48 lo 61562 12 TC 80 BE Microsoft Update monitor lt App gt ALL APPS FWD 172 220 74 23017448 D 49462 13 TCP 80 BE Microsoft Update m
16. 44 Carton size width x depth x height mm 620 x 590 x 200 Form factor 1U Rackmount HARDWARE Display Yes Hardware crypto accelerator Cooling Fan Power supply Single internal 1 Measured with large packets MTU1500 2 Measured with large packets MTU9000 3 Measured with TCP a See Ses US a Ses See CONSOLE USB PORT PORT2 PORT3 PORT4 PORTS PORT6 PORT7 PORT8 ENVIRONMENTAL Noise emission db A Operating temperature C Storage temperature C Operating humidity non condensing MTBF SYSTEM MTBF yrs CERTIFICATIONS amp COMPLIANCE CE emissions CE electrical safety FCC emissions ROHS compliant POWER amp EFFICIENCY Power supply type Power type AC DC Input rating Volts Input frequency Hz Auto sense Wattage max power draw W Max power draw Amps Max heat dissipation W Max heat dissipation BTU Energy efficiency average PACKAGING CONTENT Appliance Serial cable Straight network cable Cross network cable External power brick amp cables Direct power to wall outlet USB recovery amp installation stick Quick start guide 2x Barracuda L shape rackmount bracket Barracuda rail kit m NETWORKS NG FIREWALL F400 N A 0 to 40 20 to 60 O 95 25 Yes Yes Yes Yes Internal AC 100 240 50 60 es 250 0 6 250 1024 gt 80 ves des Ves ves N A des Ves des Yes Optional UJ UJ SUR oJempJeH UJ O O C
17. Control Center levels Comprehensive history and rollback of enable administration of an unlimited number of Barracuda NG Firewall platforms configuration and policy changes across The Standard Edition allows for a single configuration group The Enterprise Edition the network Integrated Revision Control allows for an unlimited number of configuration groups for a single enterprise System for all changes to comply with tenant or range The Global Edition is designed for service providers who service D noo cme Golan zeny po multiple tenants and allows for separate and secluded configuration trees for each requirements tenant Real time 3D visualization of VPN tunnel status and easy drag amp drop VPN tunnel creation Extended multi tenancy capabilities catering to the needs of MSSP environments Barracuda NG Earth 24 File View Help Appliance Information Langley General Information Model Serial BAR NG 111618 Configuration Firmware 5 2 1 Management IP 10 15 0 2 License State Enabled WAN Optimization Enabled Application Control Disabled Tunnel Status A Langley Vienna Twin Tower Y Langley Tlalnepantia angley Gaudalajara Barracuda NG Earth is a graphical real time 3D network monitoring utility that provides a status overview of all VPN site to site tunnels Y L Y Langley Ramos Arizpe vL angley Mondova N Ul MODEL COMPARISON STANDARD EDITION ENTERPRISE EDITION GLOBAL
18. D nn e e AS real time protection actives 00 q e e lastASscantime gt 00 a e e Z Enforce overdue AS scan 0000 S e 00 e D LAS engine versions SV AS pattern version o o Ke ASpattemmaxage 00000000 AN e e d Enforce overdue AS engine pattern update Fa e e c POLICY ASSIGNMENTS O Personal firewall rule set o o O Registry entries 00000 Vo e ZZ S I LI Welcome message welcome picture 0000 n e e G OOO UPPER lD based exemption from enforced client updates amp A L na Gateway network access roles o o aa VPN PROPERTIES Raw ESP o o o UDP encapsulation e e 2 TCP encapsulation 11 ll ri e e Hybrid encapsulation o 00000 e e 2 DHCP based parameter assignment e e Cryptography e A e HEEL a e e E e 0000 e CASTandBLOWEISH e e Authentication only null encryption e e e SHA 1 and MD5 hashing e e uu e E 5 Ifsupported by AV AS product 6 Involves routes WINS amp DNS adresses IP address amp network mask domain amp firewall rule set Ul UJ BARRACUDA NG NAC SUBSCRIPTION rj D BARRACUDA BARRACUDA SSL 2 BARRACUDA NETWORK ACCESS VPN TRANSPARENT c SOFTWARE FEATURES VPN CLIENT CLIENT CLIENT D un VPN CONNECTION INTELLIGENCE Co Redundant gateway support e e e A E E E Se E a ON ENEE ln nn CU NAT traversal e O HTTPS proxy compatible e e e SSL handshake simulation e o SOCKS4 5 proxy compatible o e e D Pat
19. Deep Packet Inspection DPI and behavioral traffic analysis even if the protocols are using advanced obfuscation port hopping techniques or encryption TECHNOLOGY ADVANTAGE 1 GRANULAR APPLICATION CONTROL The Barracuda NG Firewall allows the creation of dynamic application policies and allows establishing acceptable use policies for users and groups by application application category location and time of day In a nutshell it enables administrators to e block unwanted applications for certain users or groups e control and throttle acceptable traffic preserve bandwidth and speed up business critical applications to ensure business continuity e enable or disable specific application sub functions e g Facebook Chat YouTube postings or MSN file transfers e intercept SSL encrypted application traffic Name Protocol Application Content User Schedule QoS Action Block Skype Any B Skype Any Any Always NA Deny Block P2P Traffic Any Applejuice D BitTorrent g DirectConnect E eDonkey f Filetopia Any Any Always NA a Deny Unwanted Facebook Any E Facebook Apps Ej Facebook Chat Ej Facebook Mail E Facebook Post Any Any Always NA a Block SocialNetworks Any Za Foursquare 73 FriendsReunited SE Google 77 Linkedin Any Any Always NA a Deny Limit VideoStreaming Any E Grooveshark r Hulu Dep Any Amy BusinessHous VolP A ID2 gt Pass Liniti0S Updates Ay ere Update toy hu eem vm Create granular application usage
20. Mbps 1 450 IPS throughput Gbps ow Concurrent sessions 500 000 New sessions s 35 000 MEMORY RAM GB 12 MASS STORAGE Type Solid State Size GB 160 or better SSD MTBF hours 1 200 000 SIZE WEIGHT DIMENSIONS Weight appliance kg 6 Weight carton with appliance kg 155 Appliance size width x depth x height mm 442 x 520 x 44 Carton size width x depth x height mm 665 x 585 x 225 Form factor HARDWARE 1U Rackmount Number of CPU cores 4 or better Display Yes Hardware crypto accelerator Yes Cooling Fan aero Dual hot swap internal ENVIRONMENTAL Noise emission db A Operating temperature C Storage temperature C Operating humidity non condensing MTBF SYSTEM MTBF yrs CERTIFICATIONS amp COMPLIANCE CE emissions CE electrical safety FCC emissions ROHS compliant POWER amp EFFICIENCY Power supply type Power type AC DC Input rating Volts Input frequency Hz Auto sense Wattage max power draw W Max power draw Amps Max heat dissipation W Max heat dissipation BTU Energy efficiency average PACKAGING CONTENT Appliance Serial cable Straight network cable Cross network cable Direct power to wall outlet USB flash drive for recovery amp installation Quick start guide 2x Barracuda L shape rackmount bracket Barracuda rail kit N A 0 to 40 20 to 60 O 95 gt dl Yes Yes Yes Yes Internal AC 100 240 50 60 des 2x 400 5 400
21. Networks as the company behind our firewall R f I 5 infrastructure we will be well served and supported for many years S to come CIO RHI AG E CD jud O le Hy As acompany with internationally distributed facilities the OLO centralized management concept particularly impressed us Manager of IT Service and Barracuda Networks therefore quickly became our partner of choice Infrastructure Technology ODLO Sports Group AG SAMPLE CUSTOMERS Aim r group CIDACOS x GRIMALDI LINES CITY OF n CHEN palo atto reni gt CUMULUS MS lum dm CALZEDONIA Kans European Aeronautic Defence and Space Company U q LL Q 5 5 Y Sn Sn ca CBCX BETTING TECHNOLOGIES J Central G S tilak Unternehmen Gesundheit k Erwin Muller The Barracuda NG Firewall is a family of hardware and virtual appliances designed to protect network infrastructure improve site to site connectivity and simplify administration of network operations Beyond its powerful network firewall and VPN technologies the Barracuda NG Firewall integrates a comprehensive set of next generation firewall technologies including identity aware Application Control intrusion prevention web filtering antivirus anti soam and Network Access Control The Barracuda NG Firewall features intelligent site to site trafic management capabilities that optimize both availability and performance of the Wid
22. O c G SI D UJ N Hardware Facts gt U T o 5 5 y y Sh Se CO BARRACUDA NG FIREWALL F300 F301 INTERFACE Copper Ethernet NICs Sg USB 2 0 2 Serial console 1 RJ45 Integrated WiFi access point 802 11 b g Model F301 only PERFORMANCE AS OF FIRMWARE RELEASE 5 4 X Firewall throughput Mbps 550 Firewall throughput Jumbo Frames Mbps N A VPN throughput AES 128 NOHASH Mbps 160 VPN throughput AES 128 MD5 Mbps 130 VPN throughput AES 128 SHA Mbps 128 VPN throughput AES 256 MD5 Mbps 125 IPS throughput Mbps 90 Concurrent sessions 70 000 New sessions s 2 500 MEMORY RAM GB p MASS STORAGE Type Solid State Size GB 80 SSD MTBF hours 1 200 000 SIZE WEIGHT DIMENSIONS Weight appliance kg 4 5 Weight carton with appliance kg 8 0 Appliance size width x depth x height mm 430 x 330 x 44 Carton size width x depth x height mm 540 x 540 x 210 Form factor 1U Rackmount HARDWARE Hardware crypto accelerator Yes built in Display MES Cooling Fan Power supply Single internal 1 4x10 100 copper ports are covered by the faceplate on the right hand side 2 Measured with large packets MTU 1500 3 Measured with TCP ENVIRONMENTAL Noise emission db A Operating temperature C Storage temperature C Operating humidity non condensing MTBF SYSTEM MTBF yrs CERTIFICATIONS amp COMPLIANCE CE emissions CE electrical safety F
23. Rendering Engine Thumbnail Image Stack buffer overflow CVE 2010 3970 FWD EXPLOIT RealNetworks RealPlayer FLV Parsing Two integer overflow vulnerabilities CVE 2010 3000 FWD VULN Microsoft Windows LNK File code execution CVE 2010 2568 VUNL Microsoft Windows Help And Support Center Trusted Document Whitelist bypass CVE 2010 1885 FWD EXPLOIT MS Intemet IIS FTPd NLST Remote Buffer Overflow CVE 2009 3023 EXPLOIT Apple Quick Time FlashPix File buffer overflow 1 CVE 2009 2798 DOS Firebird SAL op_connect_request denial of service 1 2 CVE 2009 2620 DOS RealNetworks Helix Server RTSP SET_PARAMETERS Request denial of service 1 2 CVE 2009 2533 EXPLOIT Microsoft Windows Telnet Credential Reflection vulnerability 1 CVE 2009 1930 EXPLOIT Adobe Acrobat and Adobe Reader FlateDecode integer overflow 1 CVE 2009 1856 DOS CA ARCserve Backup Message Engine RPC Opcode 59 denial of service 1 CVE 2009 1761 EXPLOIT Novell GroupWise Intemet Agent Email address processing buffer overflow 2 CVE 2009 1636 EXPLOIT Apple iTunes Protocol Handler Stack buffer overflow 1 CVE 2009 0950 EXPLOIT Adobe Multiple Products Embedded JBIG2 Stream buffer overflow 2 CVE 2009 0658 EXPLOIT GStreamer Quick Time file parsing multiple heap overflow 3 CVE 2009 0398 EXPLOIT MW6 Technologies Barcode dil ActiveX control buffer overflow 1 CVE 2009 0298 EXPLOIT Server Service Remote Code attack CVE 2008 4250 DOS Digium Asterisk IAX2 POKE Request denial of service 1 2 CVE 2008 3263 EXPLOIT IBM Lotus D
24. SES SE PACKAGING CONTENT i SIZE WEIGHT DIMENSIONS 5 E l Appliance MES Wei 00 Be su sa i 7 e ic Serial cable Yes Vel E SS WW SEH 9 ie Straight network cable Yes plaice ee width x depth height mm 427 x 450 x 44 QM EE ve Carton size width x depth x height mm 650 x 590 x 200 Zeme xe celles N A Form factor 1U Rackmount E Direct power to wall outlet Yes ARDE USB recovery amp installation stick Yes Number of CPU cores 2 or better Quick start guide Yes PSP i 2x Barracuda L shape rackmount bracket Yes Hardware crypto accelerator SR Ves Cooling Fan 1 Please consult section Supported Barracuda Network Module Combinations Model F600 on page 41 2 Measured with large packets MTU 1500 3 Measured with large packets MTU9000 4 Measured with TCP BARRACUDA NG FIREWALL F800 NG FIREWALL F800 USB USB T CONSOLE Picture shows Barracuda NG Firewall F800 equipped with an optional M802 module INTERFACE Standard 1 GbE copper NICs Max SE Standard 1 GbE fiber SFP NICs Max 0 4 Standard 10 GbE fiber SFP NICs Max VIDI Free module ports for additional Barracuda network modules USB 2 0 2 Serial console 1 RJ45 PERFORMANCE AS OF FIRMWARE RELEASE 5 4 X Firewall throughput Gbps 10 0 Firewall throughput Jumbo Frames Gbps 14 0 VPN throughput AES 128 NOHASH Mbps 2 200 VPN throughput AES 128 MD5 Mbps 1 800 VPN throughput AES 128 SHA Mbps 1 500 VPN throughput AES 256 MD5
25. SSL VPN or client VPN traffic EDITION CAPACITY NO OF SUPPORTED CPU CORES a 00 c O O O 3 imp ON BARRACUDA NG FIREWALL SUBSCRIPTIONS AND RESPECTIVE LICENSE CAPACITIES HARDWARE APPLIANCES SUBSCRIPTION IF APPLICABLE VIRTUAL APPLIANCES Barracuda NG Web Filter No limit limited by capacity or CPU cores Barracuda NG Malware Protection Noi limited by capacity or CPU cores Barracuda NG Web Security emp o limited by capacity or CPU cores BaracudaNGSSLVPNandNAC Wein limited by capacity or CPU cores Note It is not possible to mix models with subscriptions from other models For example a VF250 base license cannot be mixed with the Barracuda NG Web Security subscription of VF500 Ul Ke DUISUSDIT UJ LU CD C C OL O c e a D GA e Licensing U t T Q 5 5 Y y pa Sn ca FORMAT OF LICENSES All Barracuda NG Firewall licenses are x 509 certificates issued and signed by the Barracuda Networks Certificate Authority Because all Barracuda NG Firewall products have the Barracuda Networks public key built into the product they can easily validate the certificates and extract the license information SYSTEM BEHAVIOR WITH INVALID OR MISSING LICENSES Evaluation mode Even without a valid license the Barracuda NG Firewall system will provide almost all relevant features Nevertheless the system is not intended to serve any other purpose
26. United Kingdom 10 0 9 142 am Austria 54 10 0 9 129 5 4 2 108 EE United States 10 0 9 128 5 4 2108 ES United States 10 0810 5 4 2108 10 0 9130 5 4 2 108 5 4 2108 10 0 9 20 5 4 2108 ES United States 100921 5 4 2 108 10 0 8131 5 4 2108 10 0 9132 5 4 2 108 10 10 10 18 10 0 000 EEEE SSG eee i S ERR MAA H KS i The Barracuda NG Control Center Status Map displays a drill down status overview of all centrally managed Barracuda NG Firewall units Creating C level reports with ease scheduled and KEY BENEFITS fully automated Collect data from all of Barracuda NG Firewalls deployed in the network Reporting is one of the major tasks to be managed in an enterprise This Create easy to read reports in pdf format applies for any department and does not stop when it comes to the IT Save reports and or distribute Security department Making bandwidth usage and all other security related automatically to pre defined recipients information visible reportable and not least have it in an easy to read Fully customizable scheduling format is crucial And having a dispersed network with loads of security Fully customizable time span gateways does not make it easier to achieve comprehensive reporting Report layout customizable with company logo The Barracuda NG Report Creator makes creating such IT security reports Blackout IP addresses for auditing easy Simply select the appliances and the required type of reports de
27. crypto accelerator Cooling Power supply jae ZAG 3 80 3 600 3 450 22950 4 65 1 000 000 100 000 12 Solid State 80 system 300 logs cache 1 200 000 18 22 442 x 660 x 88 SOY 04200 2U Rackmount 8 ies des X Fans Dual hot swap internal Picture shows Barracuda NG Firewall F900 equipped with modules M801 M802 and M803 ENVIRONMENTAL Noise emission db A Operating temperature C Storage temperature C Operating humidity non condensing MTBF SYSTEM MTBF yrs CERTIFICATIONS amp COMPLIANCE CE emissions CE electrical safety FCC emissions ROHS compliant POWER amp EFFICIENCY Power supply type Power type AC DC Input rating Volts Input frequency Hz Auto sense Wattage max power draw W Max power draw Amps Max heat dissipation W Max heat dissipation BTU Energy efficiency average PACKAGING CONTENT Appliance Serial cable Straight network cable Cross network cable Direct power to wall outlet USB flash drive for recovery amp installation Quick start guide 2x Barracuda L shape rack mount bracket Barracuda rail kit N A 0 to 40 20 to 60 5 to 95 gt dl Yes Yes Yes Yes Internal dual hot swap AC 100 240 50 60 des 500 5 300 1024 gt 80 Yes Yes ee des des Yes Yes des Yes 1 Please consult section Supported Barracuda Network Module Combinations Model F900 on page 43 2 Measu
28. don t incur any surprise Flexible administration that suits your expenses Lifecycle management company strategy Auditable traceability of configuration changes Central Management of the Entire Security Infrastructure Security conscious companies and managed security providers are confronted with a rapidly increasing number of gateways in their networks These gateways have to be rolled out configured and continuously monitored It is irrelevant how convenient the installation and ongoing maintenance are for a single gateway Managing hundreds or thousands of systems is definitely a cost intensive process that requires an enormous effort by qualified staff At the same time a corporate security policy must be maintained constantly at all gateways As a result the individual system configurations are increasingly interwoven Even just a straight forward site to site VPN tunnel presumes that at least two gateways are coordinated with each other In larger environments with hundreds of such installations this may lead to massive configuration and operational overhead The Barracuda NG Control Center combines the advantages of a device and policy based management architecture Administrators are kept informed at all times on the status of remote gateways and can consistently implement centrally defined security rules at every location Furthermore the integrated revision control system increases auditing ease for the infrastructure and cuts
29. hidden embedded or repeatedly compressed and with Release 5 4 3 scheduled for O1 2014 it will even detect malware that has been hidden in SSL encrypted HTTPS The Barracuda NG Firewall uses the world s most comprehensive and permanently updated URL database to block connections to undesirable or potentially dangerous web sites Data communication is thus protected at every level a significant prerequisite for smooth and unobstructed business processes and stable productivity BUSINESS ALIGNMENT Using Barracuda NG Firewalls companies can also use distributed secure web Increased efficiency based on channelled access at every branch office without loss of security and manageability for Internet usage and faster web access as all remote located content security infrastructure The powerful Barracuda NG well as comprehensive protection for Control Center and comprehensive content security functionality not only Internet users around the globe Employee assure high security they also boost overall efficiency and bring significant SSL ON slo moroso cost cuts Barracuda NG Firewalls also prevent companies from unintentional involvement in cyber crime Second security layer at the perimeter to Barracuda NG Malware Protection protect against spyware viruses and other COST EFFICIENCY malicious code Line Costs Use less expensive decentralised bandwidth that offers increased availability and cost savings of up to 90 Lifecycle Costs
30. only for small remote locations and not in conjunction with 3 Measured with large packets MTU9000 anti malware or web filtering at the same time 4 VPN throughput using AES 128 NOHASH Choosing the correct model depends on the actual traffic patterns web usage behavior and available uplink bandwidth For help sizing the appropriate Barracuda NG Firewall appliance customers should contact a Barracuda Networks sales engineer Customizable 20 Gbps TT TE c Sizing Considerations 10 Gbps oD T dd 5 DELETED F400 F280 WiFi 1 Gbps F300 F301 WiFi S sii E 200 F201 WiFi LLL i Z F100 F101 WiFi nes Small remote Remote office Small medium Large Large HO and SOHO office HQ HQ data centers Subscriptions for the Barracuda NG Firewall AVAILABILITY MATRIX F100 F200 F300 BARRACUDA NG FIREWALL Eu F101 F201 F280 F301 F400 EH F800 CE Energize Updates Optional Instant Replacement Optional Premium Support Optional Barracuda NG Malware Protection amp Optional Barracuda NG Web Her Optional s Barracuda NG SSL VPN and NAC Optional 1 Energize Updates are also available for Barracuda NG Control Center hardware and virtual appliances Purchase of one year of Energize Updates subscription is required for every new unit 2 Instant Replacement subscription is also available for Barracuda NG Control Center models C400 and C610 3 Premium Support is also
31. ship via standard shipping a hard disk replacement Customer must return the failed hard disk to Barracuda Networks After four years of continuous IR coverage customer is entitled to a free hardware refresh Note Available for all Barracuda NG Firewall hardware models Instant Replacement must be purchased within 60 days of hardware purchase and is a continuous subscription from date of activation Available as 1 3 and 5 year subscriptions N suol di12sqns UJ LU CD C C OL O c e a D mud 00 PREMIUM SUPPORT Barracuda Premium Support ensures that an organization s network is running at its peak performance by providing the highest level of 24x7 technical support for mission critical environments Customers will benefit from a dedicated account manager and a team of technical engineers who will provide fast resolution of high priority support issues ensuring that equipment maintains continuous uptime KEY BENEFITS Subscriptions e 24x7 global support Note Available for all Barracuda NG Firewall hardware and virtual models Premium Support for Barracuda NG Firewall hardware appliances can only be purchased in combination with Instant Replacement Premium Support may be purchased on e Priority response time to resolve mission critical issues e Service Level Agreements SLAs to l ran hat i re resol ickl Barracuda NG Firewall virtual appliances without Instant Replacement Ava
32. 0 09 130 5 4 2 108 VF50 sDTW O 4 HA for sH 5 4 2 108 VF1000 sHQ O ES H00 HO Campbell 10 0320 54 2108 EEE United States VF1000 sHQ 490 SEQ HO Campbell 100921 5 4 2 108 VF1000 Sec sHQ Xt a o9 Eu Washington 10 0 9131 5 4 2108 VF50 slAD At os mu Los Angeles 10 0 9132 54 2108 VF50 sLAX e Connected SSL Secured AES128 SHA Certificate NOT LOADED gt po jo jo jo jo je je je je jo je je je je jo je je je je jo jo ALES c1 1 O 9 The Status Map displays an overview of all centrally managed Barracuda NG Firewall gateways PERE R DESDE 2121232427 212424212270 7 ha Timezone UTC Model Comparison for the Barracuda NG Firewall With hardware models available for small branch offices as well as large headquarters and data centers and a corresponding offering of virtual appliances the Barracuda NG Firewall is designed for deployment across the entire enterprise MODEL F100 F200 F300 CAPACITY 300 300 D Firewall Throughput Mbps Mbps 85 85 4 VPN Throughput Mbps Mbps 60 60 DI IPS Throughput Mbps Mbps Concurrent Sessions 2 000 8 000 New Sessions s 1 000 1500 Firewall Users No limit No limit Zeche MAN No limit No limit Tunnels Barracuda VPN Clients No limit No limit recommended 5 5 BARRACUDA NG FIREWALL NETWORK SECURITY FEATURES Stateful Firewall e e Application Control e IPS IPsec VPN e Web Proxy Barracuda Web Filter Mail Gateway Spam Filter
33. 00 F200 F300 firmware release 5 4 x and newer The F600 standard model C10 is always shipped with a total of 12 RJ45 network ports and single power supply Other F600 model types provide different port and power supply combinations Please see list below Network ports are built in and not replaceable in the field Spare parts for redundant power supply can be ordered separately Front Rear Front Rear Front Rear Front Rear Front Rear Barracuda NG Firewall F600 model C10 12 RJ45 network ports and single power supply Parra NG FIREWALL F600 Barracuda NG Firewall F600 model C20 12 RJ45 network ports and dual power supply E TIT NG FIREWALL F600 Barracuda NG Firewall F600 model F10 8 RJ45 4 SFP 1 GbE network ports and single power supply E TIT NG FIREWALL F600 Barracuda NG Firewall F600 model F20 8 RJ45 4 SFP 1 GbE network ports and dual power supply tf eem NG FIREWALL F600 Barracuda NG Firewall F600 model E20 8 RJ45 2 SFP 10 GbE network ports and dual power supply E TIT NG FIREWALL F600 BNGIF600a C10 BNGIF600a C20 BNGIF600a F 10 BNGIF600a F20 BNGIF600a E20 BNGF600a C10 BNGF600a C20 BNGF600a F 10 BNGF600a F 20 BNGF600a E20 I N Hardware Facts U T O 5 5 Y y Sn Sn CO MODEL F800 The standard version of the F800 appliance has the first port bracket bay equipped with eight 1 GbE R
34. 1366 gt 80 ves des Ves ves des des Ves ves Yes 1 Please consult section Supported Barracuda Network Module Combinations Model F800 on page 42 2 Measured with large packets MTU1500 3 Measured with large packets MTU9000 4 Measured with TCP LA Ul SUR oJempJeH SS CU o O C O o c al SA D UJ a Hardware Facts gt U T o 5 5 y y Sh Sn CO BARRACUDA NG FIREWALL F900 p NG FIREWALL F900 de 8 E H BEBE a E D C o o INTERFACE Standard copper Ethernet NICs Standard 1GbE copper NICs max Standard 1GbE fiber SFP NICs max Standard 10 GbE fiber SFP NICs max Free module ports for additional Barracuda network modules DI Serial console x1 GbE MGMT Port 1 RJ45 PERFORMANCE AS OF FIRMWARE RELEASE 5 4 X Firewall throughput Gbps Firewall throughput Jumbo Frames Gbps VPN throughput AES 128 NOHASH Mbps VPN throughput AES 128 MD5 Mbps VPN throughput AES 128 SHA Mbps VPN throughput AES 256 MD5 Mbps IPS throughput Gbps Concurrent sessions New sessions s MEMORY RAM GB MASS STORAGE Type Size GB SSD MTBF hours SIZE WEIGHT DIMENSIONS Weight appliance kg Weight carton with appliance kg Appliance size width x depth x height mm Carton size width x depth x height mm Form factor HARDWARE Number of CPU cores Display Hardware
35. 2 6HY United Kingdom Phone 44 0 1256 300 100 Fax 44 0 1256 361 751 Email emeainfo barracuda com Barracuda Networks Germany Radlkoferstr 2 81373 Munich Germany Phone 49 0 69 899 14 729 Fax 49 0 89 74 11 85 282 Email office barracuda com Barracuda Networks Italy Via Borgogna 2 20122 Milano Italy Phone 39 02 600 630 69 Fax 43 0 508 100 7200 Email office barracuda com Barracuda Networks France 16 Place Vendome 75001 Paris France Phone 33 0 1 53 45 28 18 Fax 33 0 1 53 45 28 29 Email office barracuda com Barracuda Networks Switzerland Postfach 8060 Zurich Switzerland Phone 41 0 31 52804 87 Fax 43 0 508 100 7200 Email office barracuda com Barracuda Networks UAE RAK Investment Authority Freezone POB 31 484 Ras Al Khaimah United Arab Emirates Phone 44 0 1256 300 100 Fax 44 0 1256 361 751 Email emeainfo barracuda com India Barracuda Networks India 93 A 2nd Floor 4th B Cross Road 5th Block Industrial Area Koramangala Bangalore 560095 India Phone 91 80 3323 4500 Fax 491 804121 6053 Email indiainfo barracuda com Japan Barracuda Networks Japan Spacia Gotanda 202 7 7 2 Nishi gotanda Shinagawa ku Tokyo Japan 141 0031 Phone 81 3 5436 6235 Fax 81 3 5436 5128 Email jpinfo barracuda com For more information please visit www barracuda com A N suol 8507 pue SOILYO DI CU o O C O C c a SA
36. 2 x BNGM801a plus 1 x BNGIM802a plus 1 x BNGM802a M80 M80 M803 Appliance BNGIF900a Appliance BNGF900a 4 plus 2 x BNGIM801a plus 2 x BNGM801a plus 1 x BNGIM803a plus 1 x BNGM803a 5 Appliance BNGIF900a Appliance BNGF900a plus 2 x BNGIM801a plus 2 x BNGM801a M80 M802 M802 Appliance BNGIF900a Appliance BNGF900a 6 plus 1 x BNGIM801a plus 1 x BNGM801a plus 2 x BNGIM802a plus 2 x BNGM802a M802 M803 Appliance BNGIF900a Appliance BNGF900a j plus 1 x BNGIM801a plus 1 x BNGM801a Ecc E plus 1 x BNGIM802a plus 1 x BNGM802a plux 1 x BNGIM803a plux 1 x BNGM803a Appliance BNGIF900a Appliance BNGF900a 8 plus 1 x BNGIM801a plus 1 x BNGM801a plus 1 x BNGIM802a plus 1 x BNGM802a M803 M803 Appliance BNGIF900a Appliance BNGF900a ES fessi 9 plus 1 x BNGIM801a plus 1 x BNGM801a plus 2 x BNGIM803a plus 2 x BNGM803a M803 Appliance BNGIF900a Appliance BNGF900a 10 plus 1 x BNGIM801a plus 1 x BNGM801a plus 1 x BNGIM803a plus 1 x BNGM803a IA da Hardware Facts U T o 5 5 Y y KN Am CO M802 M802 M802 mE ES M802 M802 M803 M802 M802 M802 M803 M803 are ee ERES M802 M803 cui M802 Reeg M803 M803 M803 Pin ne Jan M803 M803 o M803 Appliance BNGIF900a plus 1 x BNGIM801a Appliance BNGIF900a plus 3 x BNGIM802a Appliance BNGIF900a plus 2 x BNGIM802a plus 1 x BNGIM803a Appliance BNGIF900a plus 2 x BNGIM802a Appliance BNGIF900a plus 1 x BNGIM802a
37. 3Y 5Y BNCIC610a h1 3 5 BNCC610a h1 3 5 Premium Support 1 3 5 BNCIC6IOapI35 BNCC610ap135 es Barracuda NG Control Center Cold Spare C610 BNCIC400a c BNCC400a c o aa QN Ul BARRACUDA NG CONTROL CENTER VIRTUAL APPLIANCES ORDER NO ORDER NO PRODUCT EMEA INTERNATIONAL NORTH AMERICA Barracuda NG Control Center VC400 O G D 2 jo o CI le MET BNCIVC400a BNCVC400a M kee ee IN Premium Support IM 3 5Y BNCIVC400a p1 35 BNCVCA00a p1 3 5 Barracuda NG Control Center VC610 BNCIVC610a BNCVC610a Enterprise Edition Energize Updates 14 3Y SY BNCIVCOIOa el 35 BNCVC610a e1 3 5 PMLA ee ee bem eee ECS pes Barracuda NG Control Center VC820 BCCIVC820a BCCVC8202 Global Edition GEN Ee ee o pos A 25 be RSS SYN ee cos Jem S po CCEE ES Additional Tenant Range for Barracuda NG Control Center BNCI b1 BNC b1 VC820 monthly BARRACUDA NG FIREWALL VIRTUAL APPLIANCES ORDER NO ORDER NO PRODUCT EMEA INTERNATIONAL NORTH AMERICA Barracuda NG Firewall VF25 VF50 VF 100 VF250 VF500 VF1000 VF2000 VF4000 VF8000 BNGIVF25a BNGIVF8000a BNGVF25a BNGVF8000a pro o A UN O ia E uo Cera ies JJ i BNGIVF lt user gt e lt subscription BNGVF lt user gt e lt subscription E ee duration gt e g BNGIVF25a e1 duration gt e g BNGVF25a e1 APA See wr TM bg sl O I BNGIVF user p subscription BNGVF user p subscription K CIE eo duration e g BNG
38. 900 T ORDER NO ORDER NO PRODUCT EMEA INTERNATIONAL NORTH AMERICA 2 Barracuda Network Module M801 8x1 GbE Copper BNGIMBOla 0 0 BNGM8OTa Barracuda Network Module M802 4x1GDESFP BNGIM802a BNGM802a Barracuda Network Module M803 2x10 GbE SFP BNGIM803a BNGM803a U ES Been Note Transceivers have to be bought separately and are not included in the Network Modules M802 and M803 BARRACUDA NG FIREWALL HARDWARE OPTIONS ORDER NO ORDER NO PRODUCT EMEA INTERNATIONAL NORTH AMERICA Barracuda 3G UMTS USB modem M10 for models F10 F900 MN EE mma Barracuda 19 rackmount shelf kit for FTOx F20x BPNGIRACOT d BPNGRACOT Barracuda rail kit for F400 F600 BPNGIRAC 02 BPNGRAC 02 Barracuda L shape rackmount bracket 2x for F280 BPIRAC O2 BPRACGO2 BARRACUDA NG CONTROL CENTER APPLIANCES ORDER NO ORDER NO PRODUCT EMEA INTERNATIONAL NORTH AMERICA Barracuda NG Control Center C400 r EE BNCIC400a BNCC400a Energize Updates 1Y 3Y 5Y 0000 BNCIC400a 1 35 0 BNCC400a e1 3 5 y Instant Replacement 1Y 3Y 5Y 00000 BNCIC400a h1 3 5 00 00 BNCC400a h13 5 Ta PrmiumSuppot X3450 BNOC4Qapi35 BNCCAOOapI3S L LL Code 2 E Meme 2 Barracuda NG Control Center C610 BNCIC6102 BNCC6102 Enterprise Edition Energize Updates 1Y 3Y 5Y BNCIC6IO e35s BNCC NOa el35 Es Instant Replacement 1Y
39. AM FILTER CONTINUED sa pde 9 91n e94 Supports a scripting language for configuration o o Subject modification on spam 2 e e e o e White lists blacklists ee e e e e Onlinetests 5 00m S DCCRBL Dn DCGRBL DCCRBL Dn Auto learning training ee e e e oe e Customizable rules for spam rating 2 2 e e e oe ee WEB PROXY Supports cache hierarchies parenting neighboring 6 e o e o Cache hierarchies supporting protocols ICP HTCP CARP Cache Digest WCCP e s ix x e Proxying and caching HTTP FTP and others e e e e e oe ee Proxying for SSL no inspection e e e e e ee Transparent caching 000000000000 e e I e e e oe o HTTPserveracceleration 2 0 e o e e e e ee Caching of DNS lookups 0 000000 e o e e e e ee Central user authentication Native NTLM RADIUS e e e e e RSA ACE LDAP MS Active Directory TACACS Support for external virus scanning ICAP e e e e e ee N Access control mechanisms Extensive AC e e e e e ee vemwameeneeten 0 e 2 5 5 c5 5 5 Eon uU Lo NM e a LS S O EE SE Upload blocking POST 6 e e e e O BARRACUDA WEB FILTER 2 Black lists White lists per rule e e e e OR Filter Categories e m 95 a 95 9 e 0 Temporal constraints e e e e o o Pa User specific group specific restrictions ee o o e Gi Online category database e e e e e o o Tl Local update interval MA MA MA NA O NA MA Online update int
40. CC emissions ROHS compliant POWER amp EFFICIENCY Power supply type Power type AC DC Input rating Volts Input frequency Hz Auto Sense Wattage max power draw W Max power draw Amps Max heat dissipation W Max heat dissipation BTU Energy efficiency average PACKAGING CONTENT Appliance Serial cable Straight network cable Cross network cable Direct power to wall outlet USB flash drive for recovery amp installation Quick start guide 2x Barracuda L shape rackmount bracket Wireless antenna N A 0 to 40 20 to 70 5 to 95 gt 5 Yes Yes Yes Yes Internal AC 100 240 50 60 es 60 1 6 60 205 gt 83 nes Wes ies nes i MES Yes ies Yes for F301 only BARRACUDA NG FIREWALL F400 A C OU E INTERFACE Copper Ethernet NICs 8x T GDE USB 2 0 2 Serial console 1 RJ45 PERFORMANCE AS OF FIRMWARE RELEASE 5 4 X Firewall throughput Gbps 3 9 Firewall throughput Jumbo Frames Gbps N A VPN throughput AES 128 NOHASH Mbps 700 VPN throughput AES 128 MD5 Mbps 650 VPN throughput AES 128 SHA Mbps 550 VPN throughput AES 256 MD5 Mbps 530 IPS throughput Mbps 900 Concurrent sessions 300 000 New sessions s 16 000 MEMORY RAM GB 4 MASS STORAGE Type Solid State Size GB 80 SSD MTBF hours 1 200 000 SIZE WEIGHT DIMENSIONS Weight appliance kg 7 Weight carton with appliance kg 102 Appliance size width x depth x height mm 427 x 450 x
41. EASE 5 4 X Firewall throughput Mbps Firewall throughput Jumbo Frames Mbps VPN throughput AES 128 NOHASH Mbps VPN throughput AES 128 MD5 Mbps VPN throughput AES 128 SHA Mbps VPN throughput AES 256 MD5 Mbps IPS throughput Mbps Concurrent sessions New sessions s MEMORY RAM MB MASS STORAGE Type Size GB SIZE WEIGHT DIMENSIONS Weight appliance kg Weight carton with appliance kg Appliance size width x depth x height mm Carton size width x depth x height mm Form factor HARDWARE Hardware crypto accelerator Cooling Power supply ENVIRONMENTAL Noise emission db A Operating temperature C Storage temperature C Operating humidity non condensing 300 N A 85 75 OS 65 60 2 000 1 000 81 Flash 4 or better 2 3 240 x 165 x 30 260 x 320 x 140 Mini Yes built in Fanless Single external 52 0 to 40 220103270 5 to 95 e O O LINK O ACTIVE PORT 3 PORT 4 MTBF SYSTEM MTBF yrs CERTIFICATIONS amp COMPLIANCE CE emissions CE electrical safety FCC emissions ROHS compliant POWER amp EFFICIENCY Power supply type Power type AC DC Input rating Volts Input frequency Hz AUTO Sense Wattage max power draw W Max power draw Amps Max heat dissipation W Max heat dissipation BTU Energy efficiency average PACKAGING CONTENT Appliance Serial cable Straight network cable Cross network cable
42. EDITION i a E aqua DE C400 VC400 Virtual C610 VC610 Virtual VC820 Virtual CU Appliance Appliance Appliance 2 Maximum managed gateways No limit No limit No limit No limit No limit Q Ireeommended RA LA o 200 Idependingon HW depending on HWI Sm GE Se de nee ch S _ A Multi tenancy SE Ee E EE O SE SE available 3 GC M CA Manageable configuration groupings 1 1 No limit No limit No limit o FEATURES A Multi administrator support e e e e e D ETC rns Se Pee eee EE ince ues RC EUR DE ctm lee RARE LEE Een BEE EE Role based administration e e e o e Revision Control System e e e e e Central statistics e e e e o Central syslog host relay e e e e Firewall audit information collector e e E e viewer 68 V SEM 3 BU online demo 10 0 9 11 Control rs Wo Scope All State TRIES ame AS a a n S bi a l NOME Bio Blo Bjo Bjo Blo Bjo Blo Bo Bjo Bl Bio Bo Bio Bjo Bl to Bio lo Bio Bie I ATAN E li WE E m jest d a Ak ER A Ei le Ea Ss Asia Pacific Bangkok 10 0 9 137 Thailand Hongkong 10 0 9 135 EM Hong Kong Kuala Lumpur 10 0 9 136 E Malaysia Shanghai 10 0 9 138 al China SS CU CU n C O o a SA D jo je je je jo Je je jo jo jo je je je jo je je je je jo jo jo E B Europe Middle East and Africa 10 0 9 140 Egypt 10 0 9139 amm Austria 10 0 9141 SIS
43. F101 Wifi Bundle Si Barracuda NG Firewall Model F101 Wifi Bundle BNGIF101a BNGF101a CG Energize Updates 1Y 3Y 5Y BNGIF101a e1 3 5 BNGF101a e1 3 5 e Instant Replacement 1Y 3Y 5Y BNGIF101a h1 3 5 BNGF101a h1 3 5 Tl Premium Support 1Y 3Y 5Y BNGIF101a p1 3 5 BNGF101a p1 3 5 Barracuda NG Web Security 1Y 3Y 5Y BNGIF101a w1 3 5 BNGF101a w1 3 5 D Barracuda NG Web Filter 1Y 3Y 5Y BNGIF101a u1 3 5 BNGF101a u1 3 5 Barracuda NG Malware Protection 1Y 3Y 5Y BNGIF101a m1 3 5 BNGF101a m1 3 5 Barracuda NG Firewall Cold Spare F101 BNGIF101a c BNGF101a c Barracuda NG Firewall F200 Barracuda NG Firewall Model F200 BNGIF200a BNGF200a Energize Updates 1Y 3Y 5Y Instant Replacement 1Y 3Y 5Y Premium Support 1Y 3Y 5Y Barracuda NG Web Security 1Y 3Y 5Y Barracuda NG Web Filter 1Y 3Y 5Y Barracuda NG Malware Protection 1Y 3Y 5Y Barracuda NG SSL VPN and NAC 1Y 3Y 5Y Barracuda NG Firewall Cold Spare F200 1 Includes Barracuda NG Web Filter and Barracuda NG Malware Protection BNGIF100a e1 3 5 BNGIF100a h1 3 5 BNGIF100a p1 3 5 BNGIF200a e1 3 5 BNGIF200a h1 3 5 BNGIF200a p1 3 5 BNGIF200a w1 3 5 BNGIF200a u1 3 5 BNGIF200a m1 3 5 BNGIF200a v1 3 5 BNGIF200a c BNGF100a e1 3 5 BNGF100a h1 3 5 BNGF100a p1 3 5 BNG H BNGF200a h1 3 5 BNGF200a p1 3 5 BNGF200a w1 3 5 BNGF200a u1 3 5 BNGF200a m1 3 5 BNGF200a v1 3 5 BNGF200a c QN N Ordering Information U i T o 5 5 Y
44. FTP Gateway SSH Gateway Barracuda NG Web Security Service Barracuda NG Web Filter Barracuda NG Malware Protection Barracuda SSLVPN amp NAC INTELLIGENT TRAFFIC FLOW CONTROL Traffic Shaping incl inside VPN e e tunnels Quality of Service QoS Automatic Backup Uplink Activation 400 Mbps 120 Mbps 80 Mbps 35 000 2 000 No limit No limit No limit 25 Optional Optional Optional Optional Optional ik Gbps 310 Mbps 450 Mbps 100 000 8 200 No limit No limit No limit 50 Optional Optional Optional 550 3 9 Mbps Gbps 160 700 Mbps Mbps 90 900 Mbps Mbps 70 000 300 000 2 500 16 000 No limit No limit No limit No limit No limit No limit 25 50 o o o o o o o o e e o o o o o Optional Optional Optional Optional Optional Optional Optional o o o e o 5 Gbps 1 6 Gbps 2 6 Gbps 400 000 35 000 No limit No limit No limit 100 Optional Optional Optional 10 0 Gbps 2 2 Gbps 3A Gbps 500 000 45 000 No limit No limit No limit 500 Optional Optional Optional 21 0 5355 N A 3 8 aes N A 47 EE N A 1 000 000 N A 100 000 N A Limited by No limit ey and core support No limit No limit Limited by No limit capacity 1 000 and core support o o o o o o o o o o o o o e e o o o e o Optional Optional Optional Optional Optional Optional e o o o o o
45. ION AND OBFUSCATION TECHNIQUES The Barracuda NG Firewall is able to identify and to block the advanced evasion attempts and obfuscation techniques that are widely used by attackers to circumvent and trick traditional signature based intrusion prevention systems such as e Packet Anomalies e URL Decoding e IP Fragmentation HTML Decoding and Decompression TCP Stream Reassembly TCP Split Handshake Protection e RPC Defragmentation e FTP Evasion Protection mad LA ADDITIONAL NETWORK PROTECTION TECHNIQUES In addition to the comprehensive intrusion pattern database and the advanced anti evasion countermeasures the Barracuda NG Firewall offers a wide range of transport layer protection mechanisms such as IP Sooofing Protection e Portscan and Sniffing Protection CP SYN Flood Protection e ICMP Flood Protection e Duplicate Local IP Detection e Resource Exhaustion Protection e ARP Spoofing and Trashing Protection C ADVLNVAGV ADO TONH DAL uU OO E i i LO vc x AID E IPS Severity Critical 3 FWD EXPLOIT Ipswitch Imail IMAP server LOGIN stack overflow CAN 2005 1255 FWD RPC Windows RPC DCOM Interface exploit 135 CAN 2003 0352 FWD EXPLOIT eSignal v7 6 remote buffer overflow E IPS Severity High 530 FWD EXPLOIT IBM Lotus Domino LDAP Bind Request integer overflow CVE 2011 0917 FWD EXPLOIT RealFlex RealWin SCADA SCPC_INITIALIZE and SCPC_INITIALIZE_RF buffer overflow CVE 2010 4142 FWD EXPLOIT Microsoft Graphics
46. IVF25a p1 duration e g BNGVF25a p1 2 BNGIVF lt user gt w lt subscription BNGVF lt user gt w lt subscription CH E duration gt e g BNGIVF25a w1 duration e g BNGVF25a w1 CU BNGIVF lt user gt u lt subscription BNGVF lt user gt u lt subscription 2 E duration gt e g BNGIVF25a u3 duration gt e g BNGVF25a u3 e BNGIVF lt user gt m lt subscription BNGVF lt user gt m lt subscription Ni NE EU CCE IQ RIS duration e g BNGIVF25a m1 duration gt e g BNGVF25a m1 eg BNGIVF lt user gt s lt subscription BNGVF lt user gt s lt subscription D NS CALE NC ee duration e g BNGIVF25a v1 duration gt e g BNGVF25a v1 O L p Notes PM34I4 ON epndeueg uoneunoju buuspJo Offices and Locations Americas Barracuda Networks Inc 3175 S Winchester Blvd Campbell CA 95008 United States Toll Free 1 888 ANTI SPAM 1 888 268 4772 Phone 1 408 342 5400 Fax 1 408 342 1061 Sales Hours Mon Fri 6 a m 6 p m PT Support Hours 24 hours a day 7 days a week Email sales barracuda com Barracuda Networks Ann Arbor 317 Maynard St Ann Arbor Michigan 48104 United States Phone 1 408 342 5400 Fax 1 408 342 1061 Email sales barracuda com Barracuda Networks Atlanta 12725 Morris Rd Suite 350 Alpharetta GA 30004 United States Phone 1 408 342 5400 Fax 1 408 342 1061 Email sales barracuda com Asia Pacific Ba
47. J45 copper ports Barracuda Network Module M801 while the second port bracket is covered with a faceplate NG FIREWALL F800 USB USB T CONSOLE Built In Bay Legend M801 Barracuda Network Module with 8x1 GbE RJ45 copper ports e M802 Barracuda Network Module with 4x1 GbE SFP e M803 Barracuda Network Module with 2x10 GbE SFP ORDER NO ORDER NO EMEA INTERNATIONAL NORTH AMERICA 1 Default Appliance BNGIF800a Appliance BNGF800a 5 Appliance BNGIF800a Appliance BNGF800a plus 1 x BNGIM801a plus 1 x BNGM801a 3 Appliance BNGIF800a Appliance BNGF800a plus 1 x BNGIM802a plus 1 x BNGM802a M803 4 Appliance BNGIF800a Appliance BNGF800a plus 1 x BNGIM803a plus 1 x BNGM803a The F900 provides three port bracket bays for Barracuda Network modules M801 M802 and M803 The standard version of the F900 appliance has only the management port while the three port bracket bays are unlike in the figure below empty and covered with faceplates Bay A Bay B Bay C M801 Barracuda Network Module with 8x1 GbE RJA5 copper ports e M802 Barracuda Network Module with 4x1GbE SFP e M803 Barracuda Network Module with 2x10 GbE SFP 10 Gbps 1 Default Appliance BNGIF900a Appliance BNGF900a 5 Appliance BNGIF900a Appliance BNGF900a plus 3 x BNGIM801a plus 3 x BNGM801a M80 M80 M802 Appliance BNGIF900a Appliance BNGF900a 3 plus 2 x BNGIM801a plus
48. M e TE Multiple rule sets support e e PA DN Client side policy enforcement e e roc e Application control e e DOM Adapter control e e e TOM User context enforcement e DUUM e nn NetBIOS protection e e 0 e e Dos attack protection e EE EE e MM Executable scripts e mE pg e SEN 1 Only for Microsoft operating systems 3 For manufacturer with Microsoft Crypto Service Provider 2 Queried by Barracuda NG Firewall VPN server on behalf of client 4 Also prevents changes to client settings by users with administrator rights Ul N BARRACUDA NG NAC SUBSCRIPTION d BARRACUDA BARRACUDA SSL e BARRACUDA NETWORK ACCESS VPN TRANSPARENT SOFTWARE FEATURES VPN CLIENT CLIENT CLIENT a POLICY MATCHING CAPABILITIES z ID based policies A H i e Support for ID based exemptions health A y condition software update Date andtime conditions DIN o ee A Ken LL Separate machine policies M e Separatequarantinepolides E e e Machine properties e e User properties 0000 e Personal firewall active 0000 AI ZZZ e e Antivirus AV product installed by vendo 0 no e e A MM CZ e e AV real time protection actives 00 O as e e A A ae e ZZ e Enforce overdue AV scan5 T LE e e Avengineversions aos e e AV pattern version 00000 os e e Avpattemmaxages 0000000000 cc e e Enforce overdue AVengine patternupdate gt 0 ee e e Anti Spyware AS product installed byvendo S re Kee e e Sas
49. N and NAC 1Y 3Y 5Y Barracuda NG Firewall Cold Spare F301 1 Includes Barracuda NG Web Filter and Barracuda NG Malware Protection 2 Available F600 models C10 C20 F10 F20 E20 please see page 41 for details ORDER NO EMEA INTERNATIONAL BNGIF201a BNGIF201a e1 3 5 BNGIF201a h1 3 5 BNGIF201a p1 3 5 BNGIF201a w1 3 5 BNGIF201a u1 3 5 BNGIF201a m1 3 5 BNGIF201a v1 3 5 BNGIF201a c BNGIF280a BNGIF280a e1 3 5 BNGIF280a h1 3 5 BNGIF280a p1 3 5 BNGIF280a w1 3 5 BNGIF280a u1 3 5 BNGIF280a m1 3 5 BNGIF280a v1 3 5 BNGIF280a c BNGIF300a BNG 0d es BNGIF300a h1 3 5 BNGIF300a p1 3 5 BNGIF300a w1 3 5 BNGIF300a u1 3 5 BNGIF300a m1 3 5 BNGIF300a v1 3 5 BNGIF300a c BNGIF301a BINGO lapels BNGIF301a h1 3 5 SIE Leer BNGIF301a w1 3 5 BNGIF301a u1 3 5 BNGIF301a m1 3 5 BNGIF301a v1 3 5 BNGIF301a c ORDER NO NORTH AMERICA BNGF201a BNGF201a e1 3 5 BNGF201a h1 3 5 BNGF201a p1 3 5 BNGF201a w1 3 5 BNGF201a u1 3 5 BNGF201a m1 3 5 BNGF201a v1 3 5 BNGF201a c BNGF280a BNGF280a e1 3 5 BNGF280a h1 3 5 BNGF280a p1 3 5 BNGF280a w1 3 5 BNGF280a u1 3 5 BNGEZSOasin S BNGF280a v1 3 5 BNGF280a c BNGF300a ENG 0022135 BNGF300a h1 3 5 BNGF300a p1 3 5 BNGF300a w1 3 5 BNGF300a u1 3 5 BNGF300a m1 3 5 BNGF300a v1 3 5 BNGF300a c BNGF301a BNGF301a e1 3 5 BNGF301a h1 3 5 BNGF301a p1 3 5 BNGF301a w1 3 5 BNGF301a u1 3 5 BNGF301a m1 3 5 BNGF301a v1 3 5 BNGF301a c PRODUCT Barracuda NG Firewall F400 Barracuda
50. NG Firewall Model F400 Energize Updates 1Y 3Y 5Y Instant Replacement 1Y 3Y 5Y PETIT Suppom IY 50 Barracuda NG Web Security 1Y 3Y 5Y Barracuda NG Web Filter 1Y 3Y 5Y Barracuda NG Malware Protection 1Y 3Y 5Y Barracuda NG SSL VPN and NAC 1Y 3Y 5Y Barracuda NG Firewall Cold Spare F400 BNGIF400a c BNGF400a c Barracuda NG Firewall F600 Barracuda NG Firewall Model F600 BNGIF600a lt model gt BNGF600a lt model gt Energize Updates 1Y 3Y 5Y BNGIF600a lt model gt e1 3 5 BNGF600a lt model gt e1 3 5 Instant Replacement 1Y 3Y 5Y BNGIF600a lt model gt h1 3 5 BNGF600a lt model gt h1 3 5 Premium Support 1Y 3Y 5Y BNGIF600a lt model gt p1 3 5 BNGF600a lt model gt p1 3 5 Barracuda NG Web Security 1Y 3Y 5Y BNGIF600a lt model gt w1 3 5 BNGF600a lt model gt w1 3 5 Barracuda NG Web Filter 1Y 3Y 5Y BNGIF600a model u1 3 5 BNGF600a model u1 3 5 Barracuda NG Malware Protection 1Y 3Y 5Y BNGIF600a lt model gt m1 3 5 BNGF600a lt model gt m1 3 5 Barracuda NG SSL VPN and NAC 1Y 3Y 5Y BNGIF600a lt model gt v1 3 5 BNGF600a model v1 3 5 Barracuda NG Firewall Cold Spare F600 BNGIF600a model c BNGF600a model c Barracuda NG Firewall F800 Barracuda NG Firewall Model F800 BNGIF800a BNGF800a Energize Updates 1Y 3Y 5Y Instant Replacement 1Y 3Y 5Y Premium Support 1Y 3Y 5Y Barracuda NG Web Security 1Y 3Y 5Y Barracuda NG Web Filter 1Y 3Y 5Y Barracuda NG Ma
51. O EE EEE ao n Instant messaging Web site translation D IT security IT information Web storage 000 E jobsearch Webmailfunifedmesaging y mmm L Literature books Ul 00 Licensing U q LL o 5 5 y y SL Sh ca Licensing ACTIVATION Barracuda NG Firewall appliances and Barracuda NG Firewall Control Centers regardless if shipped as a hardware or virtual appliance need to be activated to function properly Upon login with the NG Admin management tool the activation process will start and retrieve the needed license files automatically If not done before the user may need to fill in a form and accept the End User License Agreement EULA in the process For Barracuda NG Firewall Vx editions a License Token will be sent out via email for verification before the actual activation The Barracuda NG Control Center may perform an activation on behalf of a Barracuda NG Firewall even if the actual unit is not yet online or known to the Barracuda NG Control Center For more details please see below BARRACUDA NG FIREWALL AND NG CONTROL CENTER HARDWARE UNITS For the Barracuda NG Firewalls to retrieve the licenses automatically via auto activation an administrator needs to connect to the appliance using the NG Admin management tool The workstation that NG admin is used on needs to be able to access the Internet to carry out activation and license retrieval on behalf for the accessed unit By def
52. ORING y Gateway health state o o e v ooo 9 cre LL Launch pad functionality e o o E E e Barracuda NG Earth support o o o TRUST CENTER Ke Gateway x 509 certificate CA e o o gt Gateway SSH key management 00 e e Kg eee e THH es Virtual IP addresses for gateways ProxyARP e e o Dynamic gateway IP address support 00 e A e oOo E LICENSE CENTER License timestamp server e e e License status display e A e Central event message list e A e Event forwarding SNMP mail e A e Eventlog e A e BARRACUDA ACTIVATION Central activation of managed units o o e Central license retrieval for managed units 00 e A e Central license extension for managed units e A e Offline unit activation for managed uns e A e Offline unit license retrieval for managed units R Offline unit license extension for managed units 1 Note that Configuration Groups named cluster in the firmware refers to an administratively bundled group of Barracuda NG Firewall appliances and not to a load sharing cluster Ul Ul STANDARD EDITION ENTERPRISE EDITION GLOBAL EDITION A BARRACUDA ACTIVATION CONTINUED Activation properties per cluster e e un Activation properties per ange e e O Re Full automatic activation 00 e A e Manualacivation e A e O E Activation of Vx units with license token 000 e A e ActvationofHAunit e A e O 24 CENTRAL SESSION TRACKING a Sessio
53. R aIeEMpIeH UJ O 5 O C O O c G M wm D lt LA eo Hardware Facts gt U T o 5 5 y y SL Sn CO BARRACUDA NG FIREWALL F200 F201 NG FIREWALL F200 INTERFACE Copper Ethernet NICs US 6 20 Serial console Integrated WiFi access point 802 11 b g Go 2 1 RJ45 Model F201 only PERFORMANCE AS OF FIRMWARE RELEASE 5 4 X Firewall throughput Mbps Firewall throughput Jumbo Frames Mbps VPN throughput AES 128 NOHASH Mbps VPN throughput AES 128 MD5 Mbps VPN throughput AES 128 SHA Mbps VPN throughput AES 256 MD5 Mbps IPS throughput Mbps Concurrent sessions New sessions s MEMORY RAM GB MASS STORAGE Type Size Gel SSD MTBF hours SIZE WEIGHT DIMENSIONS Weight appliance kg Weight carton with appliance kg Appliance size width x depth x height mm Carton size width x depth x height mm Form factor HARDWARE Hardware crypto accelerator Cooling Power supply 1 Measured with large packets MTU 1500 2 Measured with TCP 400 N A 100 80 35 000 2 00 Solid State AO or better 1 200 000 510 5 6 3 4x 190 x 50 470 x 355 x 180 Compact Yes built in Fan Single external rn UNK CO PORTI PORT 2 PORT 3 PORT 4 E E 40 O O O O O O O VE e ENVIRONMENTAL Noise emission db A Operating temperature C Storage temperat
54. Server Response Parsing Memory Comuption CVE 2007 0217 EXPLOIT Microsoft Works File Parsing WPS Buffer Overflow CVE 2007 0216 VULN Adobe Flash Player Multimedia File Define SceneAndFrameLabelData code execution 1 2 CVE 2007 0071 VULN MS Windows ANI File Format Handling Vulnerability CVE 2007 0038 VULN Microsoft IE VML Buffer Ovemun Vulnerability 1 CVE 2007 0024 ns eee i Ppev ge gg ji d 20o K N NMM NM A MMA NM NM NMM A AM NON NM WR D NN M T didi FFFTTTFTTETTTTTTFFFTTTTITTTTITTTTFFTTTTIFET eee j 8 daddddadadadaddddadadadsddddddadadadaddddad 344 CU CU CU n C C c a SA D de deena 0e060000000000000000000000000000000000000000 The threat scan view displays all events related to IDS IPS and Application Control AUTOMATIC SIGNATURE UPDATES As part of the Barracuda Energize Updates subscription automatic signature updates are delivered on a weekly schedule or on an emergency basis to ensure that the Barracuda NG Firewall is constantly up to date If the firewall unit is centrally managed the pattern updates are conveniently distributed by the Barracuda NG Control Center Note A valid Energize Updates subscription is required to enable IDS IPS and to receive automatic signature updates Management Concept of Barracuda NG Firewall Barracuda NG Admin is a simple and easy to use graphical configuration and management application that operates on all current Mic
55. Size GB 80 or better SSD MTBF hours 1 200 000 SIZE WEIGHT DIMENSIONS Weight appliance kg 2 5 Weight carton with appliance kg 38 VO L Ae a25 X Sm X 162 Appliance size width x depth x height mm Carton size width x depth x height mm Form factor Compact HARDWARE Hardware crypto accelerator Yes built in Cooling Fan Power supply Single external 1 Measured with large packets MTU 1500 2 Measured with TCP BARRACUDA NG FIREWALL F280 BEEN be DN PORT1 PORT2 PORT3 PORTA ENVIRONMENTAL Noise emission db A 47 Operating temperature C 0 to 4 40 Storage temperature C 10 ARO Operating humidity non condensing O 95 MTBF SYSTEM MTBF yrs SC CERTIFICATIONS amp COMPLIANCE CE emissions Yes CE electrical safety Yes FCC emissions des ROHS compliant Yes POWER amp EFFICIENCY Power supply type External brick Power type AC DC AC Input rating Volts 100 240 Input frequency Hz 50 60 Auto sense des Wattage max power draw W 60 Max power draw Amps 1 6 Max heat dissipation W 60 Max heat dissipation BTU 205 Energy efficiency average gt 83 PACKAGING CONTENT Appliance ies Serial cable Yes Straight network cable Yes Cross network cable Yes External power brick amp cables Yes USB flash drive for recovery amp installation Yes Quick start guide Yes Wireless antenna Yes 2x Barracuda L shape rackmount bracket Optional LA wd SUR oJempJeH UJ O O C C OL
56. areness e Centrally manageable e Central reporting drill down reports BARRACUDA WEB SECURITY SERVICE The Barracuda Web Security Service is a cloud based web filtering and security service that quickly gives administrators all the information and policy enforcement tools needed to protect users from Internet threats conserve network bandwidth and filter content for compliance and productivity The Barracuda NG Firewall is integrated with the Barracuda Web Security Service to enable malware scanning and content filtering in the cloud and benefit from its collaborative cache for an accelerated Internet experience The Barracuda Web Security Service provides a multitude of summary reporting and analysis tools to drill down on the details of Internet traffic Compatibility and Licensing Available for Barracuda NG Firewall models F10 and higher as well as all Barracuda NG Firewall Virtual Appliances Requires the purchase of an additional Barracuda Web Security Service subscription BWUxxxa w1 3 5 US CA or BWUIxxxa w1 3 5 International Barracuda Web Security Service subscriptions are based on per seat user licensing Barracuda Web Security Service subscription seats not used in conjunction with Barracuda NG Firewall may be used for any of the other Barracuda Web Security Service deployment options like Web Security Agent Software or Direct Cloud Redirection Web Security Signed in as o eME English US NETWORKS Activity Sec
57. as well as all Barracuda NG Firewall virtual appliances Unlimited user license if purchased e Configurable maximum archive size Content Security e Archiver package support with a Barracuda NG Firewall hardware appliance If purchased for a virtual appliance the number of protected IPs capacity applies Available as 1 3 and 5 years subscriptions In High Availability HA environments each unit needs to be licensed separately Office file types support Proactive detection of new threats e Advanced heuristics detection techniques e Hundreds of thousands signatures e Multiple signature updates per day BARRACUDA NG WEB SECURITY The Barracuda NG Web Security subscription option for Barracuda NG Firewall models F100 and higher includes the Barracuda NG Web Filter and Barracuda NG Malware protection offering complete web security Available as 1 3 and 5 years subscriptions U d T Q 5 5 Y Sn Sn ca KEY FEATURES e Enables wire speed malware and content filtering e Full web security even for low end NG Firewall units in remote locations Enables malware and content filtering without performance degradation of the Barracuda NG Firewall Malware signatures update continuously for fast response to new and known threats Advanced heuristics block unknown Web viruses and spyware e AJAX aware analysis detects malicious web apps and script based attacks e Full user aw
58. ault the activation procedure starts automatically after 30 seconds It can also be started manually on the NG Admin Status page During activation all available licenses will be transferred and stored in the licenses configuration node on the Barracuda NG Firewall This procedure may be repeated several times but only new licenses e g license renewals or purchases of additional license subscriptions these will be retrieved BARRACUDA NG FIREWALL VX AND NG CONTROL CENTER VX For Barracuda NG Firewall Vx editions the NG Admin management tool will ask for a license token before activation At this point the license token that was distributed via email needs to be entered The license token is usually a simple text string containing letters and numbers separated by dashes like EGNEN H5H69 62WKY Upon entering the license token the MAC address of your virtual machine will be retrieved and licenses will be issued based on this MAC address and provided to the NG Firewall Vx The VMware machine will also receive a unique serial ID that you will need for future downloads of IPS updates content security updates and license extensions The license token may be entered several times but only during the first use new licenses will be retrieved For subsequent use of the license token the procedure will retrieve the licenses issued earlier Note The activation date determines the start date for the following subscriptions Energize Updates incl IPS
59. available for Barracuda NG Control Center hardware and virtual appliances High Availability HA All subscriptions have to be licensed separately for the HA partner For further information please contact your local partner or Barracuda sales at sales barracuda com ENERGIZE UPDATES This subscription provides e Firmware maintenance which includes new firmware updates with feature enhancements and bug fixes as they are made available e Security updates to patch or repair any security vulnerabilities All released updates for the Application Control database e IPS signature and pattern updates e The Barracuda Web Filter e Basic Support which includes 24x7 email support and phone support between the hours of 9 00 a m and 5 00 p m Monday through Friday Note Energize Updatess are available for all Barracuda NG Firewall hardware and virtual models Available as 1 3 and 5 year subscriptions Purchasing at least 1 year of Energize Updates is required with every Barracuda NG Firewall INSTANT REPLACEMENT Provides an extended warranty ships a replacement unit overnight upon notification of a failed unit assists with data migration to new unit and provides a RAID hard disk replacement as applicable In addition the Instant Replacement service includes Enhanced Support which provides phone and email support 24x7 Hard disk replacement on Barracuda Networks models that have swappable RAID drives Barracuda Networks will
60. ave no user limitations Virtual versions of Barracuda s hardware appliance based solutions As organizations have adopted virtualization for their server infrastructures there has been a corresponding trend to extend the benefits of virtualization to the security layer Barracuda s award winning security solutions are also available as virtual appliances Barracudas virtual appliances are complete solutions eliminating the need for installing configuring and integrating disparate operating system database system management and application software In addition Barracuda s virtual appliances come locked down from a security perspective built from the ground up on the Barracuda OS a hardened Linux operating kernel and optimized to run seamlessly within virtualized environments Barracuda s virtual appliances are packaged and distributed in Open Virtualization Format OVF or XVA to support environments such as VMware KVM XenServer and Hyper V with release 5 4 3 scheduled for Q1 2014 respectively For more details on Barracuda Virtual Appliances please visit http www barracuda com vx N 00 Hardware Facts gt U T o 5 5 y y Sh Sn CO Hardware Facts for Barracuda NG Firewall BARRACUDA NG FIREWALL F10 NETWORKS NG FIREWALL F10 INTERFACE Copper Ethernet NICs USB 2 0 Serial console e PORT 1 O O PORT 2 Ax GRE E 1 RJ45 PERFORMANCE AS OF FIRMWARE REL
61. d for H1 2014 j a VIRTUAL n DEGNE NEC INTRUSION PREVENTION SYSTEM CONTINUED un Ki Bel Q o U o un VU du fe i LL TCP stream segmentation check e e e o o e o URL obfuscation check o e e e e e FTP evasion check e e e e e 9 e RPC defragmentation check e e e o o o HTML decoding o e e HIML decompression e e e Regular online pattern updates e e e e e o IPS exception whitelisting e e ROUTING NETWORKING HA capable with transparent session failover o o o o o e o GbE ethernet support o e e e o o o F400 8 Max number of physical interfaces 4 4 4 4 8 Pd a n a F900 24 802 1q VLAN support e e e o e e xDSL support PPPoE PPTP multi link o e e e e 3G UMTS HSDPA HSUPA Barracuda 3G UMTS USB Modem M10 DHCP client support e e e e e e o ISDN support EurolSDN syncppp rawip e e e Link monitoring DHCP 3G UMTS xDSL ISDN e e e e A Policy routing support e e e e e e e 6 Ethernet channel bonding e e e o e e e Multiple networks on interface IP aliases e e o e o e o U Multiple provider WAN link support e e e o e pu Configurable MTU size per route e e e e o o o LL Jumbo Frames up to 8 000 bytes o e e e e Uu IPinIP and GRE tunnels e o e e o o o Pri O e o o e O o e BGP e e o e e e e Dynamic VPN routing e e e a Integrated OSPF RIP router e e e o o o e U TRAFFIC MANAGEMENT o Maximum overall bandwidth per i
62. e Area Network WAN Administrators can control application level routing and prioritization of traffic across multiple links tunnels and trafic conditions Supported link types include dedicated lines xDSL 3G UMTS wireless mobile networks and any other link types presented as a copper or optical Ethernet link Leading next generation firewall capabilities industry leading centralized management highly resilient VPN technology combined with intelligent traffic management capabilities allow customers to save line costs and increase overall network availability gt What are the immediate benefits of deploying a Barracuda NG Firewall Improved security posture Fromasecurity perspective organizations can improve their security posture by integrating previously disparate security functions including web filtering malware protection email security intrusion prevention and Application Control into a single platform Achieve full application awareness Application Control allows for accurately identifying a vast number of protocols and applications BitTorrent Skype Instant Messaging etc that are traversing the network Even if they are using advanced obfuscation techniques port hopping or encryption Barracuda s Application Control can block the usage of unwanted applications control and throttle acceptable traffic and preserve bandwidth for business critical applications to ensure business continuity Achieve full use
63. e and SignNow is a doud based provider of electronic signature and online n y AAA x ACHIEVE FULL USER BASED VISIBILITY AND CONTROL The Barracuda NG Firewall provides seamless integration with amp di all authentication methods e g Active Directory RADIUS EJE LDAP s etc to facilitate policy configuration based on the O W D E actual user and group information and not just IP addresses Lire db 3r D Se Barracuda d NG Firewall le 5 9 5 amp o o Ed N z y gt a H sipgate mo 9 9 icq me O RICH REPORTING AND DRILL DOWN CAPABILITIES Real time and historical application visibility shows application traffic on the corporate network for intelligent adjustment of the corporate application use policies Information on exporting reports is available in section Barracuda NG Report Creator on page 26 New protocol and application definition updates are provided via Energize Updates to ensure continuous effectiveness of the Application Control capabilities Pie E A a 1 Firewall AE Shaping CR Dynamic ID State IPProtocol Pot Application Rule Type Source Destination Interface Sc Par b IU wp I tu vu EJ uuuyie 1161 ISIOLG 11H HZ PAM a a 19 1 YY L 1U 11 1 11U 14 13 3394 I2 Ju 12 EB TCP 80 Google Update monitor lt App gt ALL APPS FWD 10 17 1 110 173193439132 lo 56872 10 YD TCP 80 S Hotmail Base monitor lt App gt ALL APPS FWD 10 17 1
64. ection and Web Filter functions to the Barracuda Web Security Service for best performance 1 Measured with large packets MTU 1500 2 Measured with TCP p INK 4 PORT 1 PORT2 PORT3 PORT4 UIE ETE find PELLI Z Z ENVIRONMENTAL Noise emission db A Operating temperature C Storage temperature C Operating humidity non condensing MTBF SYSTEM MTBF yrs CERTIFICATIONS amp COMPLIANCE CE emissions CE electrical safety FCC emissions ROHS compliant POWER amp EFFICIENCY Power supply type Power type AC DC Input rating Volts Input frequency Hz Auto sense Wattage max power draw W Max power draw Amps Max heat dissipation W Max heat dissipation BTU Energy efficiency average PACKAGING CONTENT Appliance Serial cable Straight network cable Cross network cable External power brick amp cables USB flash drive for recovery amp installation Quick start guide Wireless antenna Barracuda 19 rackmount shelf kit 32 45 0 to 40 20 to 70 596 to 9596 gt 5 Yes Yes Yes Yes External brick AC 100 240 50 60 es 60 1 6 60 205 gt 83 Ves ves des des Ves Ves Yes Yes for F101 only Optional 3 If model F101 is ordered with the Barracuda ISDN PCI Modem M20 a low noise fan will be installed to make sure the heat generated by the data card during extended operation can be dissipated N Ve SU
65. erval 0000 continuously 0000 D Customzableblckpages e e e e el ee BARRACUDA NG WEB FILTER gt Black lists White lists per rule o o o Filter categories e o o NN 69 6 e Numberofenties 000000 100milion s 0 00 Temporal constraints A e oe ee User specific group specific restrictions e e e gt e o ee Category database 0000000 B Local or online Local update interval hourly hourly hourly hourly hourly hourly Online update interval 00000 continuously 02000 Customzableblckpages e e e e e oe e 1 While technically feasible to use the web proxy on the F10 hardware it is recommended to only to use it to forward web traffic to the Barracuda Web Security Service in the cloud ul O VIRTUAL APPLIANCES BARRACUDA NG MALWARE PROTECTION Features amp Capabilities Configurable archive recursion depth e o e e o o Quarantine functionality for proxy e e e e e 2 e 2 e Configurable unknown archive policy e e o ll e e 2 e Configurable maximum archive size e e e e e e e Archiver package support 2 e e e e e 2 e Office file types support 2 e e e e e Proactive detection of new threats 000000029 e e e e e e Advanced heuristics detection techniques e e e e e e Number Of signatures e Hundreds of thousands 00000 Frequency of signature updates e Multiple updates per day U t T Q 5 5 Y Sn Sn
66. essed boxes Integrated SSH SCP client Integrated web interface for access of other Barracuda products Integrated command line interface for optional scripting purposes Encrypted communication SSL AES 128 Fast user interface that responds without lag allowing quick and efficient configuration Configuration changes may be collected and applied in bulk at a later time Compatible with O tu Compatible with Windows 7 Designed for CERTIFIED FOR Windows Vista Microsoft Windows VP Windows 2000 pre EST Name Description Access IP Version County Appliance Server Sv Net Lic 4 1 Online Demo Environment es 4 SS 1 APAC Asia Pacific 5 4 x mem Bangkok 10 0 9137 5 4 2108 EE Thailand van sBKK G O EL Hongkong 10 0 9135 54 2108 Hong Kong VF50 sHKG Xt Saul Kuala Lumpur 10 0 9 136 5 4 2 108 ES Malaysia VF50 sKUL 4 Gm sua Shanghai 1009138 5 4 2 108 Mc VF50 sSHA G amp O 4 S1 EMEA Europe Middle East and Africa 54 x e sea Cairo 10 0 9 140 54 2108 Eat VF50 sCAI amp O EE INN Innsbruck 1009139 5 4 2 108 mm Austria VF50 sINN x SZ LHR London 10 0 9141 5 4 2 108 SE United Kingdom VF50 sLHR Y O Save Vienna 100 3142 54 2108 sis VF50 VIE O 4 SE 1 USA United States 54 4 San Anchorage 1009129 5 4 2 108 EEE United States VF50 sANC X c O Sar Atlanta 10 0 9128 5 4 2108 E Ured States VF50 sATL amp mc Control Center 100310 5 4 2108 G O mov Detroit 1
67. ewall included de LAN 2 SSL VPN access included via portal O TS Sl T SSLWPN browser support 000 AME EN a EE Seco IE Firefox Chrome Safari oaio pa L Network Access Control based on user credentials N E BEE Network Access Control based on machine health state patch level anti malware present anti spyware e ES MM Me E _ _ IPV6 router advertisement guard ee Be NR Windows XP 32 bit only Windows Vista 32 amp 64 bit Windows XP 32 bit only S T Windows 7 32 amp 64 bit Windows Vista 32 amp 64 bit PP Windows 8 32 amp 64 bit Windows 7 32 amp 64 bit Linux Windows 8 32 amp 64 bit Mac OS X 10 6 x 10 7 x 10 8 x 000 Barracuda VPN Client 7 L grama ag Server pa gang eom tcp udp Barracud goen Barracuda VPN ker Barracuda VPN E Message Preferences e Log Barracuda VPN Profile Name default B Profile Y User Authentication Username Server Password Password Remember in Keychain M Use a proxy server to connect IE Proxy enabled b Proxy Settings User Password b Connection Status P Barracuda VPN Client for Mac OS X Barracuda VPN Client for Microsoft Windows 7 UJ O Q C C OL O c e EU D 24 lesen Central Management across the Enterprise AVAILABLE AS pese Virtual Appliance
68. fine layout and way of delivery and the report creator does the rest PRE DEFINED REPORTS Top Application E Barracuda NG Report Creator CEN Top Allowed Applications m Top Blocked Applications B res San Ze Top URL Categories amp Websites SS Consolidation Groups i Last 7 days ES a Go E Top Allowed URL Categories amp Websites ia DO V a Top Blocked URL Categories amp Websites Traffic by Categories None Top Allowed Applications Traffic by Risk None bom ies amp Websites URI Coque None Top Alowed URL Categories A Webstes URLs None CUSTOMIZABLE REPORTS ON L Top Blocked URL Categories amp Websites Deep Application Context None paca zo QM e User Activity mr wd None Tus E agi ye so Yes URL Category Application Category de etn cag Rs Application 4 Application Reports Skype Traffic petiveries se ee Barracuda NG Report Creator User Interface Traffic and Application Usage Report A CME Overall risk factor 1 4 mer Applications 01 09 2013 16 36 03 09 2013 16 36 Copy O 1 3 GB 4042 Youtube Watch Video O 1622 m8 506 27 O web browsing O ou 1371 Qi Youtube Base 2 88MB 918 Google Services Base 2 79MB 578 Ki Facebook Base 2 44MB TT se Skype General 13 33MB 284 V Barracuda EMEA Intranet o 30MB 336 Cloud Base O 3 0 MB 50 Google Sate Browsing o 20MB 9 V Gmail Base o9 17MB 10 DI
69. g and statistics Complete reporting Extendable by secure application gateways SSH and SSL proxies Extendable by secure web access WAN protection and optimization and network access control solutions Maximum network protection at all data traffic levels Interruption free availability for scheduled and unscheduled downtime Ultimate trafic optimization for the integrated VPN and external service level agreements SLAs Allows organizations to uphold and improve internal and external service level agreements SLAs Allows a maximum of scalability for controlling and monitoring thousands of devices Complete and immediate control of all company network processes Costs transparency for enterprises Compliance with different regulations by maximum control of external network accesses As the backbone of a highly scalable and flexible communication protection platform the Barracuda NG Firewall enables companies to increase their corporate IT security BUSINESS ALIGNMENT Although IT security can hardly contribute directly to business success security solutions can have the same enemies as the business With Barracuda NG Firewalls IT security becomes a vital part of a business enabling environment COST EFFICIENCY Lifecycle Costs Extendable Barracuda NG Firewalls offer companies sustainable investment protection Central management covers centralized update management and comprehensive hardware replaceme
70. gine prioritizes data flows and takes care of smart traffic distribution among dedicated lines xDSL ISDN satellite uplinks 3G UMTS or multi provider uplinks Every uplink line is monitored to allow for almost instantaneous fail safe redistribution and reprioritization of traffic in case of failure The Barracuda NG Firewall ensures that all remote offices can always rely on accessing essential resources with adequate performance while reducing overall cost of the WAN network BUSINESS ALIGNMENT Hackers are not the biggest threat to corporate communications Line link and other unexpected data line failures are The Barracuda NG Firewall s traffic intelligence technology not only protects the most important applications from hackers spyware and viruses but also keeps applications available even in the event of most uplink failure scenarios Application based provider selection Depending on the application the least expensive route is selected while simultaneously increasing availability Cost savings through higher available virtual bandwidth Traffic compression dt available to applications Generic large dictionary compression to the byte stream inside the VPN tunnel between two Barracuda NG Firewall COST EFFICIENCY Line Costs The Barracuda NG Firewall allows usage failover and bundling of multiple cost effective types of Internet connections and intelligent data reroute in case of uplink failure result
71. he F100 F200 units themselves are larger than 1U LA Ve SUR oJempJeH CO CU o n C O o c e SA D j eo Hardware Facts U i LL O 5 5 y y pa SL ca BARRACUDA NETWORK MODULE M801 Optional network module providing 8x1 GbE RJ45 copper ports Available for Barracuda NG Firewall models F800 and F900 BARRACUDA NETWORK MODULE M802 Optional network module providing 4x1 GbE fiber slots for standard SFP type transceivers compatible with SR and LR transceivers Available for Barracuda NG Firewall models F800 and F900 for self installed field upgrades BARRACUDA NETWORK MODULE M803 Optional network module providing 2x10 GbE fiber ports for standard SFP type transceivers compatible with SR and LR transceivers Available for Barracuda NG Firewall models F800 and F900 Note Transceivers have to be bought separately and are not included in the Network Modules M802 and M803 Note M802 M803 All Barracuda Network Modules M801 M803 are covered by Instant Replacement subscription of the appliance at no extra charge Additional Hardware Options Barracuda 3G UMTS USB Modem M10 Barracuda Network Module M801 S E gt Barracuda Network Module M802 a E E a Barracuda Network Module M803 E gt Barracuda 19 rackmount shelf kit o e n Barracuda L shape rackmount bracket 2x s E Barracuda rail kit E E e F1
72. hes o o e e e e o Event triggered notification e e e e e e Load balancing for protected servers Q e e e e o o Multipath load balancing e e e e o e e A ee Dp DS MED LS E TE Bridging mode routing mode mixed e e e e e o o Virtual IP proxyARP support e e e e e 9 C Transparent IP to user mapping O e OQ User authentication x 509 Microsoft NTLM O RADIUS RSA SecurlD LDAP LDAPS Microsoft o O e o o 2 Active Directory TACACS local RPC protocol support ONC RPC DCE RPC e e e e o G VoIP support H 323 SIP SCCP skinny 6 e e e e e e RA Vea E ee E e Standby mode Active Active with external Link Balancer only and Active Passive Network notification on failover e o e e y Key based authentication o e e e e e e a Encrypted HA communication e e e e Transparent failover without session loss e o e e e e e Provider link failover e e e e e o e INTRUSION PREVENTION SYSTEM Inline Intrusion Prevention pattern based e e e e e e Application Control e e e e e e Generic pattern filter e e e o e e e Active ARP handling o e e o e o o SYN DoS DDoS attack protection e o o e o o o Reverse routing path check e e e o o o e ICMP flood ping protection O by size and rate limit Malformed packet check e 8 e e e e e TCP split handshake protection e e e e o o o 1 IPv6 firewall forwarding traffic IPS and Application Control Full support for IPv6 6in4 4in6 is schedule
73. hfinder best gateway finder o o we WLAN roaming support e 9 Always connect technology o e Fast reconnect technology e e SECURITY FEATURES Full server side control e o Split DNS o o Split tunnel mode e o Exclusive Network Access ENA e e 7 ENA function is only available if the full Barracuda Network Access Client is chosen during the installation procedure CD LU O C C OL O c e 21 D Ul E BARRACUDA NG CONTROL CENTER STANDARD EDITION ENTERPRISE EDITION GLOBAL EDITION SOFTWARE EE C400 AND VC400 C610 AND VC610 VC820 CONFIGURATION MANAGEMENT un Ki Bel Q o U o un VU du fe i LL Tenants 1 1 5 Configuationgroups 0000 Nolimit amp Maximum managed gateways recommended Ho umit No pe d 20 200 1000 depending on HW Configuration templates repositories e A e Shared configuration dara 0 A en e Operating system parameters 0000000000 SU e e oo Networking routing parameters 0 0000 e A e e Flat file data storage 000000000 e e e o Database characteristics transaction orientation locking etc s e R Backup and restore functionality e UR e e Gateway configuration archive for speed instal e e LO e Configuration update monitoring e A e o FulRCSvesionng 000 0 e A e o VPN graphical tunnel interface e A e egene o o o Multi release management e O Multi platform management e of e STATUS MONIT
74. ilable as EE 1 3 and 5 year subscriptions For more information on Premium Support please visit www barracuda com support e Dedicated support team that is familiar with your environment e Proactive monitoring for optimal performance ON SITE COLD SPARE UNIT The cold spare unit provides a cold standby appliance of the same type as the main unit to Barracuda end customers This cold standby unit can be activated quickly in case of hardware failure of the active unit The cold standby appliance includes a Cold Spare license for the Barracuda NG Firewall firmware only no productive use for firewalling or other functions possible This way the appliance is firmware upgradeable to the patch level that corresponds to the main unit fully licensed unit If the main unit fails the on site cold spare unit may be used to temporarily host the license and configuration backup par file including the license of the failed main unit for a period of up to 15 days If the failed unit is covered under Instant Replacement IR or within the warranty period Barracuda Networks will ship a replacement unit of the same type as the failed unit to the customer The former cold spare unit inherits the license features of the former main unit by a swap with a new license issued effectively transforming the cold spare to the new main unit The shipped unit includes a cold spare license and effectively becomes the new cold spare The customer needs to ship
75. ing in decreased line costs and increased availability Lifecycle Costs Extendable Barracuda NG Firewalls offer companies sustainable investment protection The central management covers centralized update management and comprehensive hardware replacement options Deployment Costs Unique management functions allow for quick and efficient roll outs Operating Costs Completely GUI driven central management for all aspects of the solution saves significant time and effort compared to competing products Data deduplication Instantaneous activation of backup uplinks Intelligent traffic management and Qo5 Web cache proxy Distributed Internet breakouts Graphical interface for configuration and control appliances For typical network traffic compression rates may reach up to 9596 effectively reducing the bandwidth needed at remote locations Automatic activation and switch to alternate uplinks Even failed uplink hardly yields any noticeable loss of connectivity Business sensitive data and applications are given preference to enable continuity in business operations Bandwidth is limited for certain low priority applications Reduced bandwidth requirements for Internet access and better user experience Improved user friendliness and ease of use without compromising security or increasing costs Cost savings resulting from greater scalability and better manageability Secure Web Access A m
76. isualization amp management Multi homing multi netting Class based filtering Dynamic DNS support FTP GATEWAY Restrict active passive data transfer Restrict non RFC FTP commands Full integration with Barracuda NG Malware Protection Buffer overflow protection Central user authentication Customizable login greeting text User specific group specific restrictions Destination redirection specific restrictions Time restrictions Deny file up download Deny file directory modifications Deny specific file extensions Activity visualization amp reporting MAIL SECURITY amp SPAM FILTER Supported protocols Multi domain support Configurable relaying policy per domain DSN generation Spool queue visualization amp management Visualisation of mail activity backlog Spool queue synchronisation for HA Restrictable mail reception Configurable maximum mail data size Configurable maximum number of mail recipients Support for external virus scanning Activity visualization amp reporting Mail delivery Accept policies Recipient database Configurable block criteria host subject sender recipient Attachment and or header stripping Subject rewriting Cloning Grey listing MONTIM AD UD A RADIUS tong CEC SVE ORS EMIF POPs Sit POPS EE e e e e Explicit MX Explicit MX Explicit MX Explicit MX VIRTUAL APPLIANCES SVE PORS 6 Explicit MX e e I Ke VIRTUAL APPLIANCES MAIL SECURITY amp SP
77. ivating or online updates will be prevented Gy Ordering Information Calculation of co terminus subscriptions To allow customers to consolidate their maintenance and subscription offerings to a single end or renewal date daily rates for all subscription types are offered These daily rates should be used to extend expiring subscriptions to coincide with the dates of subscriptions expiring in the future Barracuda Networks does credit early termination of subscriptions using these daily rates BARRACUDA NG FIREWALL APPLIANCES ORDER NO ORDER NO PRODUCT EMEA INTERNATIONAL NORTH AMERICA O G D zt 2 jo o co jo Barracuda NG Firewall F10 Barracuda NG Firewall Model F10 Energize Updates 1Y 3Y 5Y Instant Replacement 1Y 3Y 5Y Premium Support 1Y 3Y 5Y BNGIF10a BNGIF10a e1 3 5 BNGIF10a h1 3 5 BNGIF10a p1 3 5 BNGF10a ENST BNGF10a h1 3 5 bios 3 5 Barracuda NG Firewall Cold Spare F10 BNGIF10a c BNGF10a c Barracuda NG Firewall F100 Barracuda NG Firewall Model F100 BNGIF100a BNGF100a Energize Updates 1Y 3Y 5Y Instant Replacement 1Y 3Y 5Y Premium Support 1Y 3Y 5Y Barracuda NG Web Security 1Y 3Y 5Y BNGIF100a w1 3 5 BNGF100a w1 3 5 S Barracuda NG Web Filter 1Y 3Y 5Y BNGIF100a u1 3 5 BNGF100a u1 3 5 Barracuda NG Malware Protection 1Y 3Y 5Y BNGIF100a m1 3 5 BNGF100a m1 3 5 Barracuda NG Firewall Cold Spare F100 BNGIF100a c BNGF100a c Barracuda NG Firewall
78. l time visibility into KEY FEATURES online activity broken down by individual users and applications letting e Customizable blacklists and whitelists administrators create and enforce effective Internet content and access Filter entire URL string beyond FQDN policies e 69 content categories for a detailed list see page 57 e Multiple category selection Available for Barracuda NG Firewall models F100 and higher as well as all 100 million entries Barracuda NG Firewall virtual appliances Unlimited user license if purchased with 100 000 new URL database entries per day a Barracuda NG Firewall hardware appliance If purchased for a virtual appliance Temporal constraints the number of protected IPs capacity applies User specific group specific restrictions Available as 1 3 and 5 years subscriptions Category dardo In High Availability HA environments each unit needs to be licensed separately e Local or online updates e Hourly intervals or continuous updates e Customizable block pages N O BARRACUDA NG MALWARE PROTECTION The Barracuda NG Malware Protection provides gateway based protection against malware viruses spyware and other unwanted programs inside KEY FEATURES SMTP HTTP POP3 and FTP traffic e Configurable archive recursion depth e Quarantine functionality for proxy e Configurable unknown archive policy Compatibility and Licensing Available for Barracuda NG Firewall models F100 and higher
79. ls will determine whether or not external attacks can penetrate your network or can be blocked at the outset As the most successful attacks mounted today are within the network a single remote access link with an unsecured external PC or laptop is often sufficient to allow hackers and malicious codes to open a back door into the company There are also hazards that arise as a result of intentional or unintentional misconduct by some employees This threat cannot be mastered with perimeter protection alone because attackers are already behind the network limits Crucial business processes run smoothly thanks to multi gigabit firewall performance and integrated bandwidth management By combining a stateful inspection firewall with intrusion prevention denial of service protection intelligent application selective bandwidth and multipath management plus VPN technology guarantee constant availability and protection Protection is no longer limited to the perimeter and branches but extends to all sensitive network areas Flexible deployment and support for virtualized environments is crucial for successful realization of clean bit structures in your LAN Combination of stateful inspection application control and intrusion prevention Fully developed high availability functionality Secure VPN connectivity with traffic intelligence Central management Correlation of global and local rule sets Real time monitoring loggin
80. lware Protection 1Y 3Y 5Y Barracuda NG SSL VPN and NAC 1Y 3Y 5Y Barracuda NG Firewall Cold Spare F800 Barracuda NG Firewall F900 Barracuda NG Firewall Model F900 Energize Updates 1Y 3Y 5Y Instant Replacement 1Y 3Y 5Y Premium Support 1Y 3Y 5Y NG Web Security 1Y 3Y 5Y NG Web Filter 1Y 3Y 5Y NG Malware Protection 1Y 3Y 5Y NG SSL VPN and NAC 1Y 3Y 5Y Barracuda NG Firewall Cold Spare F900 ORDER NO EMEA INTERNATIONAL BNGIF400a BNGIF400a e1 3 5 BNGIF400a h1 3 5 BNGIF400a p1 3 5 BNGIF400a w1 3 5 BNGIF400a u1 3 5 BNGIF400a m1 3 5 BNGIF400a v1 3 5 BNGIF800a e1 3 5 BNGIF800a h1 3 5 BNGIF800a p1 3 5 BNGIF800a w1 3 5 BNGIF800a u1 3 5 BNGIF800a m1 3 5 BNGIF800a v1 3 5 BNGIF800a c BNGIF900a BNGIF900a e1 3 5 BNGIF900a h1 3 5 BNGIF900a p1 3 5 BNGIF900a w1 3 5 BNGIF900a u1 3 5 BNGIF900a m1 3 5 BNGIF900a v1 3 5 BNGIF900a c ORDER NO NORTH AMERICA BNGF400a BNGF400a e1 3 5 BNGF400a h1 3 5 BNGF400a p1 3 5 BNGF400a w1 3 5 BNGF400a u1 3 5 BNGF400a m1 3 5 BNGF400a v1 3 5 BNGF800a e1 3 5 BNGF800a h1 3 5 BNGF800a p1 3 5 BNGF800a w1 3 5 BNGF800a u1 3 5 BNGF800a m1 3 5 BNGF800a v1 3 5 BNGF800a c BNGF900a BNGFSODa las BNGF900a h1 3 5 BNGF900a p1 3 5 BNGF900a w1 3 5 BNGF900a u1 3 5 ANGIE BNGF900a v1 3 5 BNGF900a c QN LA uoneuuoju DULISPIO CO CU y n C O o c G SA D QN ja 5 BARRACUDA NG FIREWALL NETWORK MODULES FOR MODELS F800 F
81. ment interface Serial interfaces Central management interface All management via VPN tunnel LOGGING MONITORING ACCOUNTING System health activity monitoring Monitoring of network environment Dynamic routing table updates FW connection monitoring Human readable log files Active event notification Real time accounting and reporting Syslog streaming fully GUI configurable ADDITIONAL FUNCTIONS SNMP queries SMS control NTP4 time server and client DNS Multi domain support DNS operation types DNS doctoring SSH GATEWAY Termination of SSHv2 terminal access sessions not supported remote execution secure copy secure FTP Central user authentication e e e e e 9 e e O e e e e e e e e e e e 9 e e 9 e e e e O e e e e e 9 e e e e e O e 9 e e e e e e e o e e e 9 o e e e 9 e e e O e e e e 9 e e e e e e e o e 9 e e e e e UPD Email SNMP trap e e e e e e o e e e e e e e e o Master slave forwarder cacher MONT M EE INADIIUS Ee AE VIRTUAL APPLIANCES I NI sal jiqede 9 sainjee SS CU o O C OR C c G SA D j 00 Features amp Capabilities U i T o 5 5 Y y SL Se CO SSH GATEWAY CONTINUED User specific group specific restrictions Public key authentication on target system Session activity tracing Customizable login greeting text DHCP DHCP server DHCP relay Lease DB v
82. n display e o Sessiontermination e ee CENTRAL SOFTWARE UPDATE Real time version display e o o Kernel and OS updates 00 en e e Barracuda NG Firewall updates e e do e o Update log viewer e A e SECURE REMOTE EXEC ENVIRONMENT SSHV2 Job scheduling Execution log viewer ADMINISTRATION MODEL Fully GUI based access NG Admin management tool d x S Sworgauhentcaionsassennpton oe lt EE O an na DN Configurable roles o o LU Acisatieen nonne 9 2 MES Configurable administrative domains e o OR Multiple domains per administrator e e e 0 ConfigurableaccessonOSlevel O e e o a Configurable access notification e A e o Gi REPORTING AND ACCOUNTING EL Historical reports on gateway activity e e e eg Customer based gateway activity reports e A e D Policy distribution e e A e rt e 5 Gateway resource utilisation o e e Central log host e A e Streaming relaying to external log host e e e o ADDITIONAL FUNCTIONS NTP4 time server for gateways e o e Integrated DNS server e LO e e OO Highavailability Optional Optional HA license included SIEM syslog interface 0000 e A e Public Key Infrastructure e e e Revision Control System 0000s e A e o Barracuda NG Access Monitor o o Ul a U T o 5 5 y y pa A CM Media Sharing CATEGORIZATION CATEGORIES BARRACUDA WEB FILTER OI Academic Cheating M Messaging Activi
83. nt options Deployment Costs Unique management functions allow for quick and efficient roll outs Operating Costs Central management saves significant time and effort License and Hardware Costs Unique license and appliances server hardware combination achieves a maximum of flexibility and cost optimization WAN Protection and Optimization In a globally networked organization protecting the network and optimizing for performance are two of the biggest IT challenges that distributed organizations face today WAN Optimization allows increased reliability improving application quality on the one hand and reducing line costs on the other Ideal solutions combine all requirements for remote connectivity security application control and network performance improvement in a fully integrated product and under the same scalable management The Barracuda NG Firewall appliances include all security connectivity and optimization services commonly needed at remote locations and branch offices This effectively enables enterprises to secure the whole network from headquarters to all remote locations Integrated Application Layer Control makes sure only allowed traffic passes through the firewall while reaction times are optimized WAN compression reduces bandwidth load by local caching of network traffic data deduplication as well as caching of frequently accessed web content on the web proxy The built in traffic intelligence en
84. nterface e e TG On the fly reprioritisation via via firewall status GUI aa Ingress shaping per interface CENTRAL USER AUTHENTICATION Supported services VPN FW HTTP Proxy VENDE RR TIPS Soy Authentication methods MS NTLM MS CHAP RADIUS RSA SecurlD LDAP LDAPS MS Active Directory TACACS local VPN Encryption support AES 128 256 3DES DES Null L e e e e e Cryptohardware acceleration VIA Padlock e e e o E Private CA up to 4 096 bit RSA e e e o e e External PKI support e e 9 e e e e x 509v3 policy extensions Fully recognised O o e e e e Certificate revocation OCSP CRL e e e o o e e Site to site VPN with traffic intelligence o o o o e e e WAN traffic compression via data deduplication o o e O o Star hub and spoke VPN network topology O O o o O e VPN CONTINUED Client VPN Microsoft domain logon Pre logon Strong user authentication Replay protection NAT traversal HTTPS and SOCKS proxy compatible Redundant VPN gateways Native IPsec for third party connectivity PPTP L2TP IPsec client VPN only OSPF via VPN SYSTEM MANAGEMENT Central management Local management Comprehensive GUl based configuration management Command line interface CLI available SSH based access Multiple administrators Role based administrators Real time accounting and visualisation Easy roll out and recovery USB installation and recovery Full life cycle management In band management Dedicated manage
85. o specialized expertise required All Barracuda products feature intuitive interfaces that ensures easy centralized product management with no need for specialized training e Multiple deployment options Available in hardware virtual cloud based and hybrid configurations Barracuda products are ideal for a wide variety of network infrastructure types e No support phone trees Specially trained Barracuda support technicians are available 24x7 to answer customer calls and provide live support e Automatic product updates Every Barracuda solution is backed by Barracuda Energize Updates which automatically ensure continuous protection against the latest threats e Low total cost of ownership Barracuda Networks solutions are easy to scale for performance and increased capacity as organizations grow protecting your investment and keeping total cost low Barracuda Labs and Barracuda Networks Technical Support Every Barracuda Networks product is backed by world class services and technical support To keep systems maintenance free Barracuda Energize Updates ensure that Barracuda Networks products are kept up to date to mitigate the latest security threats Barracuda Energize Updates are backed by Barracuda Labs a 24x7 operations center where engineers monitor the Internet and the industry for the latest threats applications websites and trends Barracuda Networks Technical Support is staffed with IT experts ready to solve technical issues
86. omino Web Server HTTP header buffer overflow 1 CVE 2008 2240 VULN Microsoft Visio DXF file handling code execution 1 CVE 2008 1090 EXPLOIT Apache HTTP Server mod negotiation Filename Handling cross site scripting 1 CVE 2008 0455 EXPLOIT Citadel SMTP RCPT TO Remote buffer overflow 1 CVE 2008 0394 EXPLOIT 3ivx MPEG 4 MP4 File Handling Stack overflow 1 CVE 2007 6402 EXPLOIT Apple QuickTime RTSP Content Type Header Vulnerability CVE 2007 6166 EXPLOIT ACD Systems ACDSee Products XPM Values Section buffer overflow 1 CVE 2007 6009 EXPLOIT RealNetworks RealPlayer RealMedia file Format processing heap comuption 1 CVE 2007 5081 EXPLOIT Trend Micro ServerProtect TMregChange Stack overflow 1 CVE 2007 4731 EXPLOIT Apple Safari Regular Expression heap buffer overflow 1 CVE 2007 3944 DOS CA Products AV Engine CHM File Handling denial of service 1 CVE 2007 3875 EXPLOIT Borland Interbase Database Service Create Request buffer overflow 1 2 CVE 2007 3566 VULN MS XML Core Services and OLE Automation SubstringData Function Integer Overflow CVE 2007 2223 EXPLOIT ACD Systems ACDSee Products XPM File Handling buffer overflow 2 CVE 2007 2193 EXPLOIT Apache Tomcat JK Web Server Connector Long URL Stack overflow 1 CVE 2007 0774 EXPLOIT Apple QuickTime Color Table ID heap comuption 1 CVE 2007 0718 VULN Microsoft Office Drawing Record msofbtOPT code execution 1 CVE 2007 0671 EXPLOIT Microsoft Word Section Table Array buffer overflow 1 CVE 2007 0515 EXPLOIT MS IE FTP
87. onitor lt App gt ALL APPS FWD 17222074 23 0 174 49 lo 61568 The live view provides real time visibility of application usage current sessions and user activity Any network traffic can be immediately terminated or reprioritized by changing the respective QoS class Note A valid Energize Updates subscription is required to enable the full feature set of Application Control Without valid Energize Updates Application Control will detect application traffic on the network but customers will not be able to block or throttle traffic based on the successful detection L ADVLNVAGV ADO TONHDIL UJ LU LU C C OL O c e I D md N TECHNOLOGY ADVANTAGE 2 Intrusion Detection amp Prevention System Complete and Comprehensive Real Time Network Protection OVERVIEW The Barracuda NG Firewall Intrusion Detection and Prevention System IDS IPS can strongly enhance network security by providing complete and comprehensive real time network protection against a broad range of network threats vulnerabilities exploits and exposures in operating systems applications and databases s preventing network attacks such as SOL Rss injections or buffer overflows In addition the IDS IPS keeps spyware and worms out of the corporate network to prevent fraud and maintain strict privacy By constantly monitoring network and system activities for malicious or suspicious behavior the Barracuda NG Firewall can reac
88. ork Modules for F800 F900 64 Barracuda NG Firewall Hardware Options 64 Barracuda NG Control Center Appliances 64 Barracuda NG Control Center Virtual Appliances 65 Barracuda NG Firewall Virtual Appliances 65 About Barracuda Networks Inc NYSE CUDA Barracuda Networks Inc combines premises based gateways and software virtual appliances cloud services and sophisticated remote support to deliver comprehensive content security data protection and application delivery solutions The company s expansive product portfolio includes offerings for protection against email web and network intrusion threats as well as products that improve application delivery and network access message archiving backup and data protection Protecting users applications and data for more than 150 000 organizations worldwide Barracuda Networks has developed a global reputation as the go to leader for powerful easy to use affordable IT solutions The company s proven customer centric business model focuses on delivering high value subscription based IT solutions for security and storage THE BARRACUDA NETWORKS DIFFERENCE Barracuda Networks continues to gain wide acclaim from customers media and analysts by offering exceptional customer service and top notch products Companies and organizations of all sizes rely on Barracuda solutions for six key reasons Rapid deployment Our advanced integrated solutions are uniquely easy to install and configure N
89. ort for wireless third generation broadband communication using 3G UMTS HSDPA HSUPA technologies thus providing bandwidths of up to 7 2 Mbps Especially for remote sites the Barracuda 3G UMTS Modem M10 is a cost effective rapidly deployable and ultra reliable WAN backup solution which can protect businesses and organizations against outages caused by accidental cable or fiber link cuts during construction moves or maintenance work Who can benefit from the Barracuda 3G UMTS USB Modem M10 e Enterprises looking for a cost effective secondary link in order to quickly increase total overall bandwidth and to reduce traffic volume on the primary link Enterprises relying on high quality WAN backup and WAN connectivity for business critical traffic e Branch offices and remote sites looking for a cost effective alternative to earth bound uplinks e Branch offices and remote sites looking to bridge the gap until cable connections become available e Branch offices and remote sites residing in areas without a good selection of affordable or reliable Internet uplinks e Construction sites retail rapid deployments and portable businesses requiring quick access to Internet connectivity Remote Appliance Control via Cell Phone Interaction The Barracuda 3G UMTS USB Modem M10 can also be used as a remote control to securely trigger predefined commands via cell phones and smart phones which carry out the following restorative operations on the firewall gateway
90. overheads Central Management mmm Managementpath y Barracuda NG Admin B Data path E a a E a E c E B Home a AMM BUSINESS ALIGNMENT b a l aa H RW ES y BarracudaNGControlCenter e E Finance and accounting processes A seess sa are supported by central control of Barracuda NG infrastructure resource use Central and Network Access Clients efficient management accelerates the implementation of integration processes Change traceability protects from faulty CAI gt operations and any possible negative d Branch Office 9 e M Le Small Office ZE impacts TEN SEER P Barracuda NG Firewall F100 M f Barracuda NG Firewall F10 COST EFFICIENCY af SI Management is the most critical expense L factor of any security infrastructure af j l JE Branch Office a f y Headquarters Customers report that time and effort dl C CERE Ce Ml A PE Pak ja needed for deploying upgrading extending e Barracuda NG Firewall F300 Barracuda NG Firewall F800 and operating Barracuda NG Firewalls has decreased by a factor of three to six Typical deployment of Barracuda NG Firewall with centralized management compared with other products Lifecycle Costs Central lifecycle management drastically decreases time spent for deploying patches Even devices with differing software versions can be centrally managed at the same time Central management Increased
91. plus 2 x BNGIM803a Appliance BNGIF900a plus 1 x BNGIM802a plus 1 x BNGIM803a Appliance BNGIF900a plus 1 x BNGIM802a Appliance BNGIF900a plus 3 x BNGIM803a Appliance BNGIF900a plus 2 x BNGIM803a Appliance BNGIF900a plus 1 x BNGIM803a ORDER NO ORDER NO BAYA BAY B BAY C EMEA INTERNATIONAL NORTH AMERICA 1 M80 Appliance BNGF900a plus 1 x BNGM801a Appliance BNGF900a plus 3 x BNGM802a Appliance BNGF900a plus 2 x BNGM802a plus 1 x BNGM803a Appliance BNGF900a plus 2 x BNGM802a Appliance BNGF900a plus 1 x BNGM802a plus 2 x BNGM803a Appliance BNGF900a plus 1 x BNGM802a plus 1 x BNGM803a Appliance BNGF900a plus 1 x BNGM802a Appliance BNGF900a plus 3 x BNGM803a Appliance BNGF900a plus 2 x BNGM803a Appliance BNGF900a plus 1 x BNGM803a I Ul Features amp Capabilities BARRACUDA NG FIREWALL sonifigede gt 9 91n e94 APPLIANCES FIREWALL Stateful packet forwarding per rule o o e o e e e Transparent proxy TCP per rule e O e e 9 e e Inline graphical packet analyser e e e e o o o NAT src dst nets PAT o e e o e Policy based NAT per rule o o e e e o o Protocol support IPv4 IPv6 ARP e e e e o o Gigabit performance e e o Object oriented rule set o e e e o o e Virtual rule sets e e e o e e e Virtual rule test environment e e e e e o o Redirection to local application e e e e e e e Realtime connection status e 8 Historical access cac
92. r based visibility and control The Barracuda NG Firewall provides seamless integration with all authentication methods e g Active Directory RADIUS LDAP s etc to facilitate policy Inside the Technolog configuration based on the actual user and group information and not just IP addresses Corporate network optimization From a global network management perspective you can reduce administrative overhead through centralized management capabilities that serve thousands of nodes and reduce hard dollar costs by better managing WAN links and link bandwidth State of the art failover and bandwidth management capabilities make sure that your business critical trafic receives the bandwidth it deserves even in case of link loss Accelerated troubleshooting At a help desk and troubleshooting level the Barracuda NG Firewall provides unprecedented levels of visibility into individual network flows arming the network engineer with powerful tools to diagnose and maintain the network AVAILABLE AS Virtual Appliances y see page 27 Uncompromised Protection and Availability for Corporate Network Boundaries and Segmentations The more important global communications are for a company the more important it is to protect corporate network boundaries After all the perimeter is still the most important front line of defense against hackers and malicious code The performance of security solutions at the Internet and VPN gateway leve
93. rcement of minimum Windows client security prerequisites before being allowed access to the network or access to a quarantine network Security posture can be specified according to available Windows patch level availability of anti virus and or anti spyware and user ID Access restrictions are enforced locally on the client by the centrally managed personal Windows firewall as well as at the gateway Besides providing full IPv6 support for the personal firewall the Barracuda Network Access Client also introduces IPv6 Router Advertisement Guard which monitors and controls IPv6 Router Advertisement RA messages of the IPv6 Neighbor Discovery Protocol This effectively enables companies to protect against potential denial of service Man in the Middle and malformed RA message attacks Rogue Internet access points that may be appearing when using smartphones or other 3G devices connected to client machines are no longer advertised and thus sealed from the network Using existing Barracuda NG Firewall appliances Barracuda Networks offers a ready to use Network Access Control framework without expensive investments into the basic network infrastructure All Barracuda Network Access Clients as well as all Barracuda NG Firewall units acting as policy servers can be administered monitored and reviewed from a single Barracuda NG Control Center If the Barracuda NG Firewall is deployed as virtual appliance then the respective capacity counter is
94. red with large packets MTU 1500 3 Measured with large packets MTU9000 4 Measured with TCP UJ NI BARRACUDA NG CONTROL CENTER C400 SUR oJempJeH INTERFACE CERTIFICATIONS amp COMPLIANCE Copper Ethernet NICS 2X GDE CE emissions Yes USB 2 0 4 CE electrical safety Yes Serial console 1 DB9 1 RJ45 FCC emissions Yes MEMORY ROHS compliant Yes RAM GB 2 POWER amp EFFICIENCY MASS STORAGE Power supply type Single internal Type HDD Power type AC DC AC Size GB 2x 250 or better Input rating Volts 100 240 SIZE WEIGHT DIMENSIONS Input frequency Hz 47 63 Weight appliance kg 5 94 Auto sense ies Weight carton with appliance kg 746 Max power draw Amps ls Appliance size width x depth x height mm 406 x 425 x 44 PACKAGING CONTENT Carton size width x depth x height mm 483 x 565 x 178 Appliance Yes Form factor 1U Full Size Direct power to wall outlet Yes ENVIRONMENTAL USB flash drive for recovery amp installation Yes Noise emission db A N A Quick start guide Yes Operating temperature C O to 35 2x Barracuda L shape rack mount bracket Yes Storage temperature C 210 16 Operating humidity non condensing 596 to 9596 UJ O O C C OL O c G HI D LA 00 Hardware Facts gt U T o 5 5 y y SL Se CO BARRACUDA NG CONTROL CENTER C610 INTERFACE Copper ethernet NICs USB 2 0 Serial MEMORY RAM GB MASS STORAGE Type Size GB
95. rosoft operating systems Windows XP Windows Vista Windows 7 and Windows 8 requires NET All configuration changes are collected locally and only need to be activated when needed With Barracuda NG Admin it is possible to manage and configure multiple Barracuda NG Firewalls simultaneously by directly connecting to the appliance and executing configuration changes locally J y 1006622 tp2 bo o 25 9 S e Mm Y N Gi Number of Sessions 36 Packet Throughput 0 Pkts Sec Data Throughput 0 Bits Sec B https El domain Bl squid B netbios ns D netbios dgm B bootps B ttp El NGF MGMT Bl squid D netbios ns D NGF MGMT Others NGF MGMT D bootpc D Others O https D ICMP O Others High 44 Hits Informational 423 Hits e e e e Certificate lt NOT LOADED gt Connected SSL Secured AES128 SHA Timezone 2011 03 03 08 45 25 1 Europe Vienna The dashboard displays a live view on a selection of important status and statistics data such as top application usage detected intrusion events number of active sessions etc Next update of 24h Data in 14 min KEY BENEFITS No installation needed All functions of the Barracuda NG Firewall can be configured and managed via the graphical user interface Same look and feel whether a single Barracuda NG Firewall or thousands managed via Barracuda NG Control Centers Simultaneous access to multiple gateways Admin private key management Trust verification of acc
96. rracuda Networks Australia Level 28 303 Collins St Melbourne Victoria 3000 Australia Phone 61 3 9678 9240 Fax 61 3 8677 2578 Email apacinfo barracuda com Barracuda Networks Taiwan 7F 3 No 68 Sec 1 Zhonghua Road Wanhua District Taipei City 108 Taiwan R O C Phone 886 2 2388 6689 Fax 886 2 2388 6659 Email apacinfo barracuda com China Barracuda Networks Beijing 1202 Building 2 Wanliu Yishuiyuan Wanliu East Road Hidian District Beijing 100089 China Phone 86 10 8256 3109 Fax 86 10 8256 1965 Email chinainfo barracuda com Barracuda Networks Guangzhou Room 2615D Building B FengXing Square Office No 242 Tianhe Road Guangzhou 510620 China Phone 86 20 3810 4187 Fax 86 20 3810 4632 Email chinainfo barracuda com Barracuda Networks Shanghai AF Building 2 Shanghai New Withub S amp T Creation Center No 799 Hutai Road Shanghai 200072 China Phone 86 21 5181 0518 Fax 86 21 5181 0517 Email chinainfo barracuda com Europe Middle East Africa Barracuda Networks AG Innsbruck Eduard Bodem Gasse 1 6020 Innsbruck Austria Phone 43 0 508 100 Fax 43 0 508 100 7200 Email office barracuda com Barracuda Networks Vienna Lasallestrasse 7A Unit 4 Floor 8 1020 Vienna Austria Phone 43 0 508 100 Fax 43 0 508 100 7200 Email office barracuda com Barracuda Networks United Kingdom West Ham Industrial Estate Grafton Way Basingstoke Hampshire RG2
97. s T 2y she To centralize management across many different firewalls and remote access KEY BENEFITS users the Barracuda NG Control Center enables administrators to manage and Substantial cost benefits through industry configure security content traffic management and network access policies leading centralized management off ALL from a single interface Template based configuration and globally available security and network functions from a security objects enable efficient configuration across thousands of locations The single management interface Barracuda NG Control Center helps significantly reduce the cost associated with Consistent security posture and policy security management while providing extra functionality both centrally and locally enforcement across the entire enterprise at the managed gateway Software patches and version upgrades are centrally controlled from within the management console and deployment can be applied to all managed devices Highly customizable administrative roles can be defined to delegate administrative capabilities for specific departments or locations Centralized version control of anti spam anti virus content filtering and Network Access Control updates Real time accounting and reporting across multiple gateways The Barracuda NG Control Center is offered at three levels Standard Edition Central collection and processing of statistics Enterprise Edition and Global Edition All Barracuda NG
98. security and reduced costs Ideal revision capabilities and simple restoration of Revision control system proven configurations Deployment Costs Rollouts of hundreds of devices within a few weeks instead of months GTI Graphical Tunnel Interface Simple drag amp drop configuration and Operating Costs The unique and for VPN configurations visualization of VPN tunnels versatile features of Barracuda NG Control Centers and Barracuda NG Firewalls Scalability dramatically lower operating costs The Barracuda NG Control Center grows with organizational needs and requirements The Barracuda NG Control Center can be restored Fast disaster recovery in just a few minutes with only two configuration files mud o TECHNOLOGY ADVANTAGE 1 Application Control Regain Control of the Network By integrating Application Control into its core firewall engine the Barracuda NG Firewall can identify and enforce security policies on more sophisticated applications that may hide their traffic inside otherwise safe port protocols such as HTTP Instant messaging IM and and peer to peer P2P applications are particularly notorious for opening backdoors into the network and spreading malicious content thus ultra reliable application control for policy enforcement is required The Barracuda NG Firewall provides a powerful and extremely reliable detection and classification of network traffic based applications and protocols by combining
99. st Groups 000 cont Mobile Communications z y E E Web based Email Ul NI CATEGORIZATION CATEGORIES BARRACUDA NG WEB FILTER I O A Abortion M Malware Mechel 00 Mobile telephony D Anonymousproxies 050000 Music radio broadcast eil Arctecte conucion mme entree 0 2 Arts museums theaters Non governmental organizations Auctions classified ads 000 P Personal web sites E B Banking o Phishing URLS Banner advertisements 000000 Political extreme hate discrimination Blogs bulletin boards 00 Political parties Brokers stockexchange 00000000 Pornography 0 Business networking 00000 R Recreational facilities theme parks 0000 E Ml Religion 00 Cinema television Restaurants entertainment venues 0000 Cities regions countries 000 S Search engines web catalogs portals Communication services 000000 Sects Computer crime hacking Self help addiction Computergames 00 Shopping 0000s MM MM ZZ AL ZZ lll Social media 000 Digital postcards 00 Social networking 0000 S E Education 0000 Software hardware 0 Environment climate pers Spam URLS 0000 A Sports 00 DO e F Fashion cosmetics jewelry 0 Swimwear lingerie Financial services insurance realestate Tobacco o G Gambling lottery Toys N General business 00000 Me al Governmental organizations siti x Unknown GU HII gt me Wi mm rr al Ta EE EE R
100. t in real time to block and prevent such activities In case an attack is detected the Barracuda NG Barracu da NG Admin 5 2 root O F201 Box Config N LL lt E gt O lt gt J io O Z uu U LL H Default Policy Clone Default Policy E Scan only for explicit signatures Edit explicit actions 0 Policy 2 Copy to Default Policy Firewall can drop the offending packets while m EE T still allowing all other traffic to pass or just detect and log the intrusion attempt Depending on the e severity of the threat highly granular actions can be assigned on a per firewall rule base enabling U the Barracuda NG Firewall to allow block or log questionable traffic based on severity location TE user group type and application Easy to use IDS IPS policy settings Za ROBUST PROTECTION AGAINST A MULTITUDE OF THREATS amp EXPLOITS O The Barracuda NG Firewall provides immediate out of the box protection against a vast number of exploits and vulnerabilities e in operating systems applications and databases to prevent network attacks such as e SOL Injections e Denial of Service DoS and Distributed Denial of Service Arbitrary Code Executions DDos Attacks Access Control Attempts and Privilege Escalations Directory Traversal Attempts Cross Site Scripting e Probing and Scanning Attempts Buffer Overflows e Backdoor Attacks Trojans Rootkits Viruses Worms and Spywares COUNTERING IPS EVAS
101. than evaluation Please take into consideration that systems in evaluation mode provide only weak encryption amp authentication methods DES RSA 512 Note In this mode the default password for the root account will always be accepted even if it was changed before Grace Period In the case of a hardware failure or transfer of service to another appliance a license strictly bound to a MAC address results in a loss of service For this reason almost every issued Barracuda NG Firewall license has a grace period typically 15 days During this time the Barracuda NG Firewall works according to the parameters defined in the license even if the hardware ID that the license is attached to does not match the actual hardware If this happens please contact your local Barracuda Networks sales team or Barracuda Networks partner immediately to obtain a new license CPU core restricted licenses Licenses with a restriction on the number of supported CPU cores such as licenses for virtual machines are immediately invalid without grace mode if the available number of CPU cores exceeds the number of CPU cores specified in the license Evaluation licenses Evaluation licenses provide access to the full feature set of the Barracuda NG Firewall but are time limited Please note that upon expiration of such a license the Barracuda NG Firewall will NOT stop forwarding traffic but any configuration changes with the exception of entering a license act
102. tual Appliances Virtual versions of Barracuda s hardware appliance based solutions 27 Hardware Facts for Barracuda NG Firewall 28 Barracuda NG Firewall F10 28 Barracuda NG Firewall F100 F101 29 Barracuda NG Firewall F200 F201 30 Barracuda NG Firewall F280 31 Barracuda NG Firewall F300 F301 32 Barracuda NG Firewall F400 So Barracuda NG Firewall F600 34 Barracuda NG Firewall F800 35 Barracuda NG Firewall F900 36 Barracuda NG Control Center C400 SI Barracuda NG Control Center C610 38 Barracuda 19 rackmount shelf kit 39 Barracuda L shape rackmount bracket 39 Barracuda 3G UMTS USB Modem M10 S Barracuda Network Module M801 40 Barracuda Network Module M802 40 Barracuda Network Module M803 40 Supported Barracuda Network Module Combinations 4 Features amp Capabilities Barracuda NG Firewall 45 Barracuda Network Access Clients DI Barracuda NG Control Center 54 Categorization Categories Barracuda Web Filter 56 Categorization Categories Barracuda NG Web Filter 2 Licensing Activation 58 Barracuda NG Firewall and NG Control Center hardware units 58 Barracuda NG Firewall Vx and NG Control Center Vx 58 Base Licenses for Barracuda NG Firewall Units 58 Base Licenses for Barracuda NG Firewall Vx Units 59 Barracuda NG Firewall subscriptions and respective license capacities 59 Format of Licenses 60 System behavior with invalid or missing licenses 60 Ordering Information Barracuda NG Firewall Appliances 61 Barracuda NG Firewall Netw
103. ultitude of undesirable contents penetrates companies via email and the Internet The never ending flood of spam blocks network resources and reduces employee productivity Dubious websites disrupt the working atmosphere and can under certain circumstances even lead to legal problems for organizations Increasingly cunning malicious code like Trojans soyware keyloggers back doors etc steal or manipulate business information and bring critical processes to a standstill Often business secrets are also transferred easily to attackers via protocols such as HTTPS because this data traffic is still a closed book for many security products Companies used to provide Internet connectivity through central proxy and content security gateways to assure consistent security policies with state of the art antivirus patterns While this concept has proved reliable it is also costly since the WAN infrastructure is based either on dedicated WAN networks e g MPLS with high bandwidth costs or cheaper VPN via public Internet Routing all Internet traffic to headquarters and then exiting to the Internet results in high data volumes and traffic jams for business critical applications between branch offices and headquarters Barracuda NG Firewalls provide comprehensive and coordinated content security functionalities so that web and email based risks and spam are reliably repelled at the perimeter The Barracuda NG Firewall also detects malicious software that is
104. ure C Operating humidity non condensing MTBF SYSTEM MTBF Dis CERTIFICATIONS amp COMPLIANCE CE emissions CE electrical safety FCC emissions ROHS compliant POWER amp EFFICIENCY Power supply type Power type AC DC Input rating Volts Input frequency Hz AUTO Sense Wattage max power draw W Max power draw Amps Max heat dissipation W Max heat dissipation BTU Energy efficiency average PACKAGING CONTENT Appliance Serial cable Straight network cable Cross network cable External power brick amp cables USB flash drive for recovery amp installation Quick start guide Wireless antenna Barracuda 19 rackmount shelf kit 47 0 to 40 20 to 70 5 to 95 S16 Yes Yes Yes Yes External brick AC 100 240 50 60 es 60 1 6 60 205 gt 83 Yes Ves Yes M S des des Yes Yes for F201 only Optional BARRACUDA NG FIREWALL F280 INTERFACE Copper Ethernet NICs 4x1 GbE USB 2 Serial console 1 RJ45 Integrated WiFi access point 802 11 b g Yes PERFORMANCE AS OF FIRMWARE RELEASE 5 4 X Firewall throughput Gbps 1 3 Firewall throughput Jumbo Frames Mbps N A VPN throughput AES 128 NOHASH Mbps 310 VPN throughput AES 128 MD5 Mbps 290 VPN throughput AES 128 SHA Mbps 260 VPN throughput AES 256 MD5 Mbps 250 IPS throughput Mbps 450 Concurrent sessions 100 000 New sessions s 8 500 MEMORY RAM GB 4 MASS STORAGE Type Solid State
105. urity Global Backup Web Security Dashboard TOTAL TRAFFIC ACTIVITY BY SUPERCATEGORY Email security i Bandwidth DI 3 000M 190K Appliance Control 152K _ 2 400M 114K Barracuda services you don t yet 1 800M 76K use are not displayed in this 38K list 1 200M Show all services 600M D e e p D D A A S amp 4 S Ca 2 Ee i Pd Ed A ss By 3 v x S N Information M Leisure M Communications M Commerce E Uncategorized E Security Technology M Purewireintellige L TOP USERS TOP APPLICATIONS Internet Explorer Google chrome TOP FILE TYPES TOP SITES ast 5 E ET dell Last 7 www gratisweb com www barracudanetworks com perso wanadoo es mail google com text html text plain my screenname acl com cfteam net 209 205 196 16 webmail acl com www google co ve image gif video x ms asf The Barracuda Web Security Service dashboard provides a drill down view of web activity across all the users in the organization regardless of location N Aylundas Ua U0D UJ LU CD C C OL O c e a D for the Barracuda NG Firewall Every Barracuda NG Firewall unit supports an unlimited number of VPN clients at no extra cost The optional Barracuda NG Firewall SSL VPN and NAC subscription adds a customizable and easy to use web based SSL VPN as well as sophisticated Network Access Control NAC functionality NAC allows enfo
106. used e g the Barracuda NG Firewall VF25 provides up to 25 VPN clients the Barracuda NG Firewall VF50 provides up to 50 VPN clients and so on KEY BENEFITS e Network Access based on client health status patch level or presence and update status of antivirus anti spyware options e Blocks or quarantines unhealthy or unknown clients e Provides the ability to create guest networks with limited or specially defined connectivity policies e Auto remediation functionality makes sure antivirus anti spyware options at the client are up to date e Integrated Personal Firewall to enforce access restriction rules for programs and users e Endpoint IPv6 Router Advertisement Guard Provides reporting on client health status Provides reporting on client VLAN amp port connection locations Compatible with Compatible with Lap f e Et d T TM Designed for CERTIFIED FOR Windows 7 Microsoft Windows Windows XP Vista Windows 2000 N UJ SOFTWARE FEATURES VPN CLIENT SSL VPN AND NAC LA Server and unlimited clients included EEN SE E with hardware unit purchase price GE O Availability Unlimited clients serviced if purchased If purchased for virtual appliances l Ka dier ease count apple If purchased for virtual appliances then m rr a a E Capacity count applies A este e YPN client supports TCP 443 SSL encapsulation O A 4 E C Managed client fir
107. width Consuming Encrypted Suppo Tunneling Encrypted Tunneling Supports File Transfer Client Appli O Business Encrypted Supports File Transfer Browser Based Client This sub application identifies all Facebook Apps an This sub application identifies content which is not c Facebook chat can be used to send instant messag This sub application identifies the usage of Faceboo This sub application identifies the usage of Faceboo Encrypted Supports File Transfer Browser Based Bandwidth Consuming Time Productivity Consumi Time Productivity Consuming Encrypted Browser A Facebook user can send a message to any numb This sub application identifies the usage of Faceboo The FacebookPosting application includes several This is the in several websites embedded part of Fa Facebook Video Call is a part of Facebook chat It c This sub application identifies the usage of Faceboo FaceTime is a videotelephony software application las ara dci and Adobe Online Office offers services which allow users to create conve The Battlefield franchise is a series of computer and console games B BBC iPlayer commonly shortened to iPlayer is an intemet television an Copy is an online filesharing service provided by Barracuda Networks Crashplan is a data sync and backup software This application is not CyberGhost VPN is a popular tunneling and anonymization servic
108. y SL Se CO PRODUCT Barracuda NG Firewall F201 Wifi Bundle Barracuda NG Firewall Model F201 Wifi Bundle Energize Updates 1Y 3Y 5Y Instant Replacement 1Y 3Y 5Y Premium Support 1Y 3Y 5Y Barracuda NG Web Security 1Y 3Y 5Y Barracuda NG Web Filter 1Y 3Y 5Y Barracuda NG Malware Protection 1Y 3Y 5Y Barracuda NG SSL VPN and NAC 1Y 3Y 5Y Barracuda NG Firewall Cold Spare F201 Barracuda NG Firewall F280 Barracuda NG Firewall Model F280 Energize Updates 1Y 3Y 5Y Instant Replacement 1Y 3Y 5Y Premium Support 1Y 3Y 5Y Barracuda NG Web Security 1Y 3Y 5Y Barracuda NG Web Filter 1Y 3Y 5Y Barracuda NG Malware Protection 1Y 3Y 5Y Barracuda NG SSL VPN and NAC 1Y 3Y 5Y Barracuda NG Firewall Cold Spare F280 Barracuda NG Firewall F300 Barracuda NG Firewall Model F300 Energize Updates 1Y 3Y 5Y Instant Replacement 1Y 3Y 5Y Premium Support 1Y 3Y 5Y Barracuda NG Web Security 1Y 3Y 5Y Barracuda NG Web Filter 1Y 3Y 5Y Barracuda NG Malware Protection 1Y 3Y 5Y Barracuda NG SSL VPN and NAC 1Y 3Y 5Y Barracuda NG Firewall Cold Spare F300 Barracuda NG Firewall F301 Wifi Bundle Barracuda NG Firewall Model F301 Wifi Bundle Energize Updates 1Y 3Y 5Y Instant Replacement 1Y 3Y 5Y Premium Support 1Y 3Y 5Y Barracuda NG Web Security 1Y 3Y 5Y Barracuda NG Web Filter 1Y 3Y 5Y Barracuda NG Malware Protection 1Y 3Y 5Y Barracuda NG SSL VP

Barracuda Networks NG Firewall F100

Contents

Download Pdf Manuals

Related Search

Related Contents