DATASHEET

Barracuda
Web Application Firewall Vx
Protect applications and data from advanced threats.

Barracuda Web Application Firewall Vx blocks an ever-expanding list

of sophisticated web-based intrusions and attacks that target the applications
hosted on web servers and the sensitive or confidential data to which they
have access. Placed between the Internet and web servers, the Barracuda
Web Application Firewall Vx scans all inbound web traffic to block attacks,
and scans outbound traffic to provide highly effective data loss prevention.

Barracuda Web Application Firewall Vx simplifies application security

so you can focus on your business. Its comprehensive feature set, versatile
deployment options, and ease of use lets you automate many application
security tasks.

Constant protection Identity and Affordable and easy

from evolving threats
Barracuda Web Application Firewall Vx
provides superior protection against data
loss, DDoS, and all known and unknown
(zero-day) application attack vectors.
Automatic updates provide defense
against new threats as they appear. As
new types of threats emerge, it acquires
new capabilities to block them.
access management
Barracuda Web Application Firewall Vx
has strong authentication and access
control capabilities that ensure security
and privacy by restricting access
to sensitive applications or data to
authorized users.
to use
Pre-built security templates and
intuitive web interface provide
immediate security without the need for
time-consuming tuning or application
learning. Integration with security
vulnerability scanners and SIEM tools
automates the assessment, monitoring,
and mitigation process.

Barracuda Networks • DATASHEET • Barracuda Web Application Firewall Vx NETWORK AND APP SECURITY
 Cloud detection and services layer
Shared services (threat intelligence, application scanning services)

Reporting
Ease of use and analytics Virtual patching Bootstrapping
and rehydration
Auto-scaling

Access control Authentication Authorization

OWASP Top Protection Advanced Bot Advanced Threat

Security 10 and more for APIs Protection
DDoS prevention
Protection

Caching and
App delivery Load balancing
compression
Content routing Traffic encryption

API-driven and DevSecOps-ready

Technical specs Support options

Web application security Advanced Bot Protection Barracuda Energize Updates

• OWASP Top 10 protection • Detects “low-and-slow” bots • Standard technical support

• Protection against common attacks • Minimizes false positives • Firmware and capability updates as required
- SQL injection • Allows human and good-crawler activity • Automatic application definitions updates
- Cross-site scripting
- Cookie or forms tampering Advanced authentication
(660VX and above)
• Form field meta-data validation Management features
• Adaptive security • Kerberos v5
• Website cloaking • SAML • Customizable role-based administration
• Response control • Azure AD • Vulnerability scanner integration
• JSON payload inspection • RSA SecurID • Trusted host exception
• XML firewall • Rest API
• Web scraping protection Application delivery and acceleration • Custom templates
• Outbound data theft protection • High availability
- Credit card numbers Logging, monitoring, and reporting
• SSL offloading
- Custom pattern matching (regex) • Load balancing • System log
• Granular policies to HTML elements • Content routing • Web firewall log
• Protocol limit checks • Access log
• File upload control DDoS protection • Audit log
• Integration with Barracuda NextGen Firewall • Network firewall log
Hypervisor support
to block malicious IPs • On-demand and scheduled reports
• VMware ESX/ESXi • Barracuda IP Reputation Database
• VMware Server/Fusion/Workstation/Player Centralized management
• Heuristic Fingerprinting
• Citrix Xenserver • CAPTCHA challenges • Monitor and configure multiple Barracuda products
• Oracle VirtualBox • Slow Client protection from a single interface
• Microsoft Hyper-V • Layer 3 and Layer 7 Geo IP - Check health and run reports
• Anonymous proxy - Assign roles with varied permissions
Supported web protocols
• ToR exit nodes - Available from anywhere
• HTTP/S 0.9/1.0/1.1/2.0 • Barracuda blacklist
• WebSocket
• FTP/S SIEM integrations
• XML • HPE ArcSight
• IPv4/IPv6 • RSA enVision
• Splunk
Authentication
• Symantec
• LDAP/RADIUS • Microsoft Azure Event Hub
• Client certificates • Custom
• SMS passcode
• Single sign-on
• Multi-domain SSO

Barracuda Networks • DATASHEET • Barracuda Web Application Firewall Vx NETWORK AND APP SECURITY
Model Comparison
360VX 460VX 660VX 760VX 860VX 960VX

CAPACITY
Backend servers supported 1-5 5-10 10-25 25-50 50-150 150-300
Number of cores supported 2 4 6 8 10 12
Throughput 25Mbps 50Mbps 200Mbps 500Mbps 1Gbps 5Gbps
FEATURES
SSL offloading ✓ ✓ ✓ ✓ ✓ ✓
Smart signatures ✓ ✓ ✓ ✓ ✓ ✓
Response control ✓ ✓ ✓ ✓ ✓ ✓
Outbound data theft protection ✓ ✓ ✓ ✓ ✓ ✓
File upload control ✓ ✓ ✓ ✓ ✓ ✓
Antivirus for file uploads - - ✓ ✓ ✓ ✓
Advanced Threat Protection1 - - ✓ ✓ ✓ ✓
Authentication and authorization ✓ ✓ ✓ ✓ ✓ ✓
Basic AAA - ✓ ✓ ✓ ✓ ✓
Advanced AAA - - ✓ ✓ ✓ ✓
Protection against DDoS attacks2 ✓ ✓ ✓ ✓ ✓ ✓
Web scraping protection ✓ ✓ ✓ ✓ ✓ ✓
Network firewall ✓ ✓ ✓ ✓ ✓ ✓
High availability Active/passive Active/passive Active/passive Active/passive Active/passive Active/passive
XML firewall - - ✓ ✓ ✓ ✓
JSON firewall ✓ ✓ ✓ ✓ ✓ ✓
Advanced Bot Protection3 ✓ ✓ ✓ ✓ ✓ ✓
URL encryption - ✓ ✓ ✓ ✓ ✓
Adaptive profiling - ✓ ✓ ✓ ✓ ✓
Vulnerability scanner integration ✓ ✓ ✓ ✓ ✓ ✓
Load balancing - ✓ ✓ ✓ ✓ ✓
Caching and compression - ✓ ✓ ✓ ✓ ✓
Content routing - - ✓ ✓ ✓ ✓
Advanced routing - - ✓ ✓ ✓ ✓

1
Requires active Advanced Threat Protection subscription.
2
Volumetric DDoS protection requires the Advanced DDoS Prevention subscription.
3
Advanced Bot Protection requires subscription.

DATASHEET • US 4.0 • Copyright 2019 Barracuda Networks, Inc. • 3175 S. Winchester Blvd., Campbell, CA 95008 • 408-342-5400/888-268-4772 (US & Canada) • barracuda.com
Barracuda Networks and the Barracuda Networks logo are registered trademarks of Barracuda Networks, Inc. in the United States. All other names are the property of their respective owners.