Barracuda NextGen Firewall F

Protecting Your Digital Assets in Amazon Web Services

Security
The growth in cloud computing capabilities and services has driven more data into Data Protection
Application Delivery
places where traditional IT security measures cannot reach - into data centers not
owned by your corporate IT group. Beyond its powerful network firewall, IPS, and VPN
technologies, the Barracuda NextGen Firewall F-Series integrates a comprehensive set
of next-generation firewall technologies, including comprehensive application
control, availability, and quality-of-services (QoS) features.

The Barracuda Advantage Product Spotlight

• A true Cloud Generation Firewall: deployed how
you need it, leverages all built-in AWS features, and
license models ensure frictionless commerce
• Simplicity of operation, bridging on-premises
and cloud security in a single interface
• Secure and reliable connectivity between on-
premises and Amazon Web Services deployments
• Central management of all functionality for both, on-
premises and Amazon Web Services deployments
• Unrivaled Quality of Service capabilities
• Full user/group awareness
• Full application visibility and
granular access control
• Advanced Threat Protection (incl. sandboxing)
• Built-in web security and IDS/IPS
• Full SD-WAN capabilities included
• Application-based provider selection
• Full support for AWS Direct Connect
• True license flexibility with Bring-Your-Own-License
or Pay-as-You-Go (hourly- or volume-based)

Granular Application Control Central Management

The Barracuda NextGen Firewall F-Series gives administrators
granular control over applications, allowing them to define
rules for forwarding data traffic using the best respective
transmission channels based on type of application, user,
content, time of day, and geographical location. The Barracuda
NextGen Firewall F-Series allows organizations to prioritize
traffic by limiting or restricting access to non-business-related
applications and network traffic, even when encrypted.
The Barracuda NextGen Firewall F-Series benefits of the same
industry-leading single-pane-of-glass central management as
on-premises deployments do. Easily manage the secure VPN
connections to, from, and within Amazon Web Services and
the Barracuda NextGen Firewall F-Series deployment itself.

Integrated Next-Generation
Security and Connectivity
The Barracuda NextGen Firewall F-Series Intrusion Detection
and Prevention System (IDS/IPS) strongly enhances network
security by providing complete and comprehensive real-
time network protection against a broad range of network
threats, vulnerabilities, exploits, and exposures in operating
systems, applications, and databases preventing network
attacks such as SQL injections and arbitrary code executions. The Barracuda NextGen Firewall F-Series dashboard provides real-time
information and summaries of what is going on in an organization's network.
The F-Series incorporates advanced site-to-site and
client-to-site VPN capabilities, using both SSL and
IPsec protocols to ensure remote users can easily
and securely access network resources without
ADVANCED
complex client configuration and management. THREAT DETECTION

We are using the Barracuda NextGen Firewalls, provisioned through the AWS Marketplace, to effectively guard
Max Longin
our application against web-based attacks and application layer attacks. The Barracuda solution plugs in
Founding Partner
seamlessly to our AWS environment, and it is doing its job of minimizing the attack surface area and helping
Club Automation
our customers keep club member cardholder data protected.
Barracuda Networks • Barracuda NextGen Firewall F: Protecting Your Digital Assets in Amazon Web Services

Technical Specs
Firewall Intrusion Detection and Prevention Traffic Intelligence & SD-WAN
• Stateful packet inspection and forwarding • Protection against exploits, • Simultaneous use of multiple uplinks
• Full user-identity awareness threats and vulnerabilities (transports) per VPN tunnel
• IDS/IPS • Packet anomaly and fragmentation protection • FIPS 140-2 certified cryptography
• Application control and granular • Advanced anti-evasion and obfuscation techniques • Auto-VPN tunnel creation between remote
application enforcement • Automatic signature updates spoke locations based on application type
• Interception and decryption of SSL/ • Dynamic bandwidth detection
TLS encrypted applications Advanced Threat Protection • Performance-based transport selection
• Antivirus and web filtering in single pass mode • Dynamic, on-demand analysis of • Adaptive session balancing across multiple uplinks
• Email security malware programs (sandboxing) • Traffic Replication (forward error correction)
• SafeSearch enforcement • Dynamic analysis of documents with • Application-based provider selection
• Google Accounts Enforcement embedded exploits (PDF, Office, etc.) • Application-aware traffic routing (VPN, Direct Connect)
• Denial of Service protection (DoS/DDoS) • Detailed forensic analysis • Traffic shaping and QoS
• Spoofing and flooding protection • Botnet and spyware protection • Built-in data deduplication
• ARP spoofing and trashing protection • TypoSquatting and link protection for email
• DNS reputation filtering VPN
Central Management Options via • Drag & drop VPN tunnel configuration
• NAT (SNAT, DNAT), PAT Barracuda NextGen Control Center • Network Access Control
• Dynamic rules / timer triggers • Administration for unlimited number of firewalls
• Single object-oriented rule set for routing, • iOS and Android mobile device VPN support
• Support for multi-tenancy
bridging, and routed bridging • Multi-factor authentication for SSL
• Multi-administrator support & RCS
• Virtual rule test environment VPN and CudaLaunch
• Enterprise/MSP licensing
Protocol Support • Template & repository-based management Barracuda Energize Updates
• REST API • Standard technical support
• IPv4, IPv6
• BGP/OSPF/RIP • Firmware updates
Infrastructure Services • IPS signature updates
• VoIP (H.323, SIP, SCCP [skinny]) • DHCP server, relay
• RPC protocols (ONC-RPC, DCE-RPC) • Application control definition updates
• SIP, HTTP, SSH, FTP proxies
• 802.1q VLAN • Web filter updates
• SNMP and IPFIX support
• DNS Cache

BARRACUDA NEXTGEN PAY-AS-YOU-GO LICENSE

BRING-YOUR-OWN-LICENSE
FIREWALL F-SERIES HOURLY-BASED VOLUME-BASED
CAPABILITIES Level 2 Level 4 Level 6 Level 8 not restricted not restricted
Virtual Cores 1 2 4 8 1 - 16 1 - 16
Max Number of Interfaces 2 2 4 4 4 4
FEATURES
Firewall • • • • • •
Application Control • • • • • •
IPS • • • • • •
VPN (Site-to-Site and Client-to-Site) • • • • • •
SSL Interception • • • • • •
WAN Compression • • • • • •
Network Access Control for VPN
client-to-site connections
• • • • • •
Energize Updates • • • • • •
Malware Protection 1 Optional Optional Optional Optional - -
Advanced Threat Protection 1 Optional Optional Optional Optional - -
Advanced Remote Access Optional Optional Optional Optional • •
Premium Support 3 Optional Optional Optional Optional - -
1 2
Including FTP, mail and Web protocols Premium Support ensures that an organization's network is running at its peak performance by providing the highest level of 24x7 technical support for mission-critical
environments. For more information please visit https://www.barracuda.com/support/premium.

Security Options
• Advanced Threat Protection prevents from
network breaches, identifies zero-day malware
exploits, targeted attacks, advanced persistent
threats and other advanced malware.
• Malware Protection provides gateway- • Advanced Remote Access provides a
based protection against malware, viruses, customizable and easy-to-use portal-based SSL VPN
spyware, and other unwanted programs as well as sophisticated Network Access Control
inside SMTP/S, HTTP/S, and FTP traffic. (NAC) functionality and CudaLaunch support.

Specifications subject to change without notice.

Datasheet US 2.9 • Copyright 2015-2017 Barracuda Networks, Inc. • 3175 S. Winchester Blvd., Campbell, CA 95008 • 408-342-5400/888-268-4772 (US & Canada) • barracuda.com
Barracuda Networks and the Barracuda Networks logo are registered trademarks of Barracuda Networks, Inc. in the United States. All other names are the property of their respective owners.