Barracuda firewalls rely on R&S®PACE 2 How deep packet inspection enables security and traffic control of critical enterprise cloud applications

DEEP PACKET INSPECTION

2

Challenge & Solution

Barracuda’s cloud-ready firewalls utilize the deep packet inspection (DPI) engine R&S®PACE 2 to achieve reliable application visibility allowing for network traffic control and facilitating the secure delivery of critical business cloud applications.

ChallengeWhen Barracuda first contracted with Rohde & Schwarz in 2007, their customers were most concerned about the unauthorized use of Skype, other P2P applications and instant messaging. The need for application control and awareness remains as new customer requirements arise. Today, Barracuda secures enterprise applications hosted in private and public clouds, protects east-west data center traffic and prevents unwanted traffic and malware from entering corporate networks.

Fast and reliable application classification on the basis of deep packet inspection (DPI) remains a prerequisite for firewall solutions to enforce advanced security and traffic management policies. With a trusted, dependable solution at their disposal, firewall vendors are optimally equipped to face the diverse challenges at hand. These contain pro-tecting highly complex distributed networks on physical and virtual infrastructure and a growing number of mobile workers requiring access to enterprise cloud applications, such as Office 365 and salesforce CRM. In the era of cloud applications, network firewalls are more than just security devices. They are the crucial factor in ensuring network availability on distributed networks.

Challenges Barracuda faces include: ❙ Protecting distributed enterprise networks that rely on cloud computing, software as a service (SaaS) and an increasingly mobile workforce

❙ Ensuring up-to-date application security policies despite the rise of shadow IT (e.g. BYOD: employees bringing their own mobile devices to the workplace)

❙ Requiring a high-performance DPI engine that receives regular application and protocol updates without increasing internal R&D expenses and investment in signature plug-ins and maintenance

❙ Generating a greater return on investment (ROI) by offering additional services

SolutionBy embedding the deep packet inspection engine R&S®PACE 2 from Rohde & Schwarz at the core of their NextGen firewall F-Series, Barracuda is able to classify network traffic up to application level (layer 7).

R&S®PACE 2 provides a powerful and reliable detection and classification kit. By combining deep packet inspec-tion and behavioral traffic analysis, application detection achieves a stupendous rate – regardless of advanced obfuscation or port hopping techniques, or encryption.

With R&S®PACE 2 embedded in their F-Series firewalls, Barracuda is able to identify protocols such as Voice over IP (VoIP). A high bandtwidth can be maintained even if settings are changed to reprioritize applications on the fly, e.g. dynamic Quality of Service (QoS) settings.

Summary

Area of Business ❙ IT security vendor providing networking, security and storage products based on network appliances and cloud services

Challenge ❙ Enforcing advanced security and traffic management policies on the basis of full traffic visibility

❙ Securing and monitoring enterprise applications hosted in public clouds

❙ Guaranteeing uninterrupted network availability and operational continuity

Solution ❙ Embedding the DPI engine R&S®PACE2, which classifies applications running on the network in real time, in the NextGen Firewall F-Series

Benefits ❙ DPI provides the means for firewalls to control which applications are permitted, prioritized or de-prioritized for access

❙ Maximized return on investment (ROI) and reduced total cost of ownership (TCO) by sourcing R&S®PACE 2

DPI-enabled application control

R&S®PACE 2

Barracuda NextGen Firewall F-series

Cloud

Rohde & Schwarz Barracuda Firewalls Rely on R&S®PACE 2 3

This improves site-to-site connectivity and enables un-interrupted access to applications hosted in the cloud, all while simplifying the administration of network operations for enterprises and managed services providers.

Additionally, real-time traffic visibility and an accessible traffic history provide valuable input for prioritization decisions. This is a crucial factor in QoS optimization of business-critical applications. It also helps to adjust corporate policies for the application use.

BenefitsBy embedding R&S®PACE 2, Barracuda is able to: ❙ Manage network traffic volumes ❙ Quickly and accurately identify applications for real-time security and policy control

❙ Detect the newest applications (encrypted or unencrypted)

❙ Preserve bandwidth and speed up business-critical applications to ensure business continuity

❙ Reduce costs associated with developing, implementing, QA-testing and maintaining an in-house DPI

ResultThe F-Series virtual and cloud-based firewalls by Barracuda facilitate real-time policy and security management in distributed enterprise networks. Providing a trusted network protection solution has increased their customers’ satisfaction.

By sourcing the DPI engine R&S®PACE 2, Barracuda is able to focus on their core product and on advancing their position in the market with their unique products and services.

Convinced of the benefits of R&S®PACE 2, Barracuda decided to embed the Rohde & Schwarz DPI engine into their product Web Security Gateway.

“We are committed to provide award-winning products and excellent support for our customers and partners. This is only possible if our technology partners can live up to the same high expectations and standards. Throughout our entire partnership we have always felt very well looked after by Rohde & Schwarz who have always been highly committed to provide a timely solution to any problem.”

Dr. Klaus M. Gheri, VP & GM, Network Security, Barracuda

Added benefits of R&S®PACE 2: ❙ Weekly signature updates ❙ Highest classification accuracy in the DPI market ❙ Fast performance and low memory footprint ❙ Maximized return on investment (ROI) ❙ Reduced total cost of ownership (TCO)

5215

.423

0.32

02.

00 P

DP

1 e

n

ipoque GmbH

A Rohde & Schwarz Company

Augustusplatz 9, 04109 Leipzig

Info: +49 (0)341 59403 0

Email: info.ipoque@rohde-schwarz.com

www.ipoque.com

Rohde & Schwarz GmbH & Co. KG

www.rohde-schwarz.com

R&S® is a registered trademark of Rohde & Schwarz GmbH & Co. KG

Trade names are trademarks of the owners

PD 5215.4230.32 | Version 02.00 | January 2019

Barracuda firewalls rely on R&S®PACE 2

Data without tolerance limits is not binding | Subject to change

© 2019 Rohde & Schwarz GmbH & Co. KG | 81671 Munich, Germany

© 2019 ipoque GmbH | 04109 Leipzig, Germany

5215423032