The Barracuda NG Firewall is a family of hardware and virtual appliances designed to protect network infrastructure, improve site-to-site connectivity and simplify administration of network operations. Beyond its powerful network firewall and VPN technologies, the Barracuda NG Firewall integrates a comprehensive set of next generation firewall technologies, including Layer 7 application profiling, intrusion prevention, Web filtering, anti-virus, anti-spam and network access control.

With hardware models ranging from the micro branch office up to the large headquarters and datacenters, and a corresponding offering of virtual appliances, the Barracuda NG Firewall is designed for deployment across the entire enterprise. Through the Barracuda NG Control Center, administrators can manage security, content and traffic management policies from a single interface. Centralized management of security and content policy provides a number of benefits, including:

• » Consistent security posture and policy enforcement across the enterprise
• » Real-time accounting and reporting across multiple gateways
• » Comprehensive history and rollback of configuration and policy changes across the network
• » Centralized version control of anti-spam, anti-virus, Web filter and network access control updates

Features & Benefits of Barracuda Next Generation Firewalls

Barracuda NG Firewall integrates a comprehensive set of next generation firewall technologies, including Web filtering, malware protection, intrusion prevention, anti-spam protection and Layer 7 application profiling.

Barracuda NG Firewalls include licenses for an unlimited number of IPSec site-to-site connections and IPSec clients through the Barracuda NG VPN Client. The Barracuda NG Firewall SSL VPN and NAC option adds a customizable and easy-to-use Web portal-based SSL VPN as well as sophisticated network access control (NAC) functionality. NAC allows enforcement of minimum Windows client security prerequisites before being allowed access to the network or access to a quarantine network. Security posture can be specified according to available Windows patch level, availability of anti-virus and/or anti-spyware and user ID. The Barracuda NG Network Access Client also adds support for 802.1x port based security for 802.1x enabled routers and switches.

The Barracuda NG Firewall provides application-aware traffic management and prioritization across the WAN, featuring adaptive routing based on network traffic conditions and link status. In addition, through Barracuda NG Control Center, administrators can efficiently monitor VPN tunnels and firewall status.

To centralize management across many different firewalls and remote access users, the Barracuda NG Control Center enables administrators to configure security and network access policies, control firmware update revisions, and manage user settings. Template-based configuration and globally available security objects enable efficient configuration across thousands of locations. The Barracuda NG Control Center supports multiple administrators simultaneously - even within the same configuration tree. Highly customizable administrative roles can be defined to delegate administrative capabilities for specific departments or locations.

The Barracuda NG Control Center is offered at three levels - Standard Edition, Enterprise Edition and Global Edition. All Barracuda NG Control Center levels enable administration of an unlimited number of Barracuda NG Firewall platforms. The Standard Edition allows for a single configuration group. The Enterprise Edition allows for an unlimited number of configuration groups for a single enterprise / tenant or “range.” The Global Edition is designed for service providers who service multiple tenants and allows for separate and secluded configuration trees for each “range.”

All Barracuda NG Control Center and Barracuda NG Firewall appliances come with extensive network connectivity troubleshooting and visualization tools. Even for large networks it typically only takes a few mouse clicks to analyze and remediate a problem in the central audit log or access cache screen.

The Barracuda NG Firewall integrates stateful packet filtering and Layer 7 Application Profiling. The stateful packet filtering firewall ensures that the network and the system itself is protected against classic TCP Layer 2 to Layer 4 attacks.

Next generation firewalls utilizing Layer 7 application profiling can identify and enforce policy on more sophisticated applications, which may hide their traffic inside otherwise “safe” port/protocols such as HTTP. Skype and peer-to-peer (P2P) applications are particularly notorious for requiring Layer 7 application profiling for policy enforcement. The Barracuda NG Firewall integrates Layer 7 application profiling into its core firewall functions, enabling enforcement of policy based on user ID, security posture, location and time of day. Policy actions can include blocking, allowing, throttling, or even enabling or disabling of specific application features.

The Barracuda NG Firewall includes a client-to-site as well as site-to-site virtual private network (VPN) service to allow safe, encrypted communication over the Internet. Every Barracuda NG Firewall model includes an unlimited number of VPN client licenses.

The Barracuda NG Firewall includes a TCP proxy to effectively open TCP packets, inspect and rebuild TCP network traffic.

The Barracuda NG Firewall includes the ability to modify network address information in datagram (IP) packet headers for the purpose of remapping a given address space into another. This feature is most often used to hide internal IP addresses from the outside network.

Specification of Barracuda NG Firewall F301

Model Specification	F300
CAPACITY*
Firewall throughput (Gbps)*	0.35
VPN throughput (Mbps)**	269
Concurrent sessions	70,000
Web Security recommended users	50-100
HARDWARE
Form factor	1U rack mount
Dimensions (in.)	1.8x16.9x13
Dimensions (cm.)	4.5x43.0x33.0
Weight (lbs. /kg.)	9.9/4.5
Copper Ethernet NICs	4x10/100
1Gb Fiber SFP NICs (std / max)	-
10Gb Fiber SFP+ NICs (std/max)	-
Max Power Draw (Amps)	1.6
Power supply	Single, external
Integrated Wi-Fi access point	F301
3G USB Modem	Optional
FEATURES
Firewall
IPS
IPsec VPN
Traffic Intelligence
Layer 7 Application Profiling
Spam Filter
NG Web Filter	Optional
NG Malware Protection	Optional
NG SSL VPN and NAC	Optional
NG Secure Web Proxy