Barracuda NG Firewall 5.4.x - Product Overview · 2016-04-04 · CONTENTS About the Company 3 References 4 Barracuda NextGen Firewall F 5 Application & Identity-Aware Protection for

ProductBarracuda NextGen Firewall F

(firmware 6.2.x)

Product Overview

CONTENTS

About the Company 3References 4

Barracuda NextGen Firewall F 5Application & Identity-Aware Protection for Distributed Network Environments 5

Secure Your Networks Perimeter 6

Intrusion Detection and Prevention 6Malware Protection 6Advanced Threat Detection 7Web Filtering 7

Controlling Application Usage 8

Application Control 8Personalized Application Control 8Application-Based Provider Selection 8Deep Application Context 8User Identity Awareness & Control 9Application Risk and Usage Report 9

Cloud Enablement & WAN Virtualization 10

Application-Based Provider Selection 10Traffic Shaping and Quality of Service 10Failover and Link Balancing 11Dynamic Mesh VPN 11WAN Optimization 11Supported Virtualization and Public Cloud Offerings 11

Secure Remote Access 12

Browser Remote Access (SSL VPN) 13Mobile Apps (CudaLaunch) 13VPN Clients (Barracuda Network Access Client) 13

Central Management across the Enterprise 14

Scalable Deployment 14Lifecycle Management 14

Virtual Appliances 15Virtual versions of Barracuda’s hardware appliance-based solutions 15Barracuda NextGen Firewall F 15Barracuda NextGen Control Center 15

Public Cloud 16

Model Comparison 17

Hardware Facts 18Barracuda NextGen Firewall F10 18Barracuda NextGen Firewall F18 19Barracuda NextGen Firewall F80 20Barracuda NextGen Firewall F180 21Barracuda NextGen Firewall F280 22Barracuda NextGen Firewall F380 23Barracuda NextGen Firewall F400 24Barracuda NextGen Firewall F600 25Barracuda NextGen Firewall F800 26Barracuda NextGen Firewall F900 27Barracuda NextGen Firewall F1000 28Barracuda NextGen Control Center C400 29Barracuda NextGen Control Center C610 30

Additional Hardware Options 31

Built-in Wi-Fi Option 31Spare Power Supply Unit 31Maintenance Kit 31Barracuda Wall Mount Bracket 32Barracuda L-shape Rack Mount bracket 32Available F400 Sub-models 32Available F600 Sub-models 33Available F800 Sub-models 34Available F900 Sub-models 35Available F1000 Sub-models 36

Features & Capabilities 37

Barracuda NextGen Firewall F 37Barracuda VPN & Network Access Clients 43CudaLaunch 45Barracuda NextGen Control Center 46

Subscriptions 48

Availability Matrix 48Energize Updates 48Warranty Extension 49Instant Replacement 49Premium Support 49Web Security 50Malware Protection 50NextGen Web Filter 50Basic Remote Access 51Premium Remote Access 51Advanced Threat Detection 51

Ordering Information 52

Barracuda NextGen Firewall F - Hardware Appliances 52Barracuda NextGen Firewall F - Hardware Options 55Barracuda NextGen Firewall F - Virtual Appliances 56Barracuda NextGen Control Center - Hardware Appliances 56Barracuda NextGen Control Center - Virtual Appliances 56Barracuda NextGen Firewall F - Amazon Web Services (AWS) 57Barracuda NextGen Firewall F - Microsoft Azure 57

About the CompanyBarracuda Networks provides cloud-connected security and storage solutions that simplify IT. These powerful, easy-to-use and affordable solutions are trusted by more than 150,000 organizations worldwide. Barracuda’s expansive product portfolio delivers protection against threats targeting email, web, and network intrusions, as well as products that improve application delivery, network access, message archiving, backup, and data protection, on-premises or in the cloud.

Barracuda’s high-value, subscription-based IT solutions provide end-to-end network and data security that helps customers address security threats, improve network performance, and protect and store their data. Barracuda’s international headquarters are in the heart of Northern California’s Silicon Valley.

About the CompanyBarracuda Networks provides cloud-connected security and storage solutions that simplify IT. These powerful, easy-to-use and affordable solutions are trusted by more than 150,000 organizations worldwide. Barracuda’s expansive product portfolio delivers protection against threats targeting email, web, and network intrusions, as well as products that improve application delivery, network access, message archiving, backup, and data protection, on-premises or in the cloud.

Barracuda’s high-value, subscription-based IT solutions provide end-to-end network and data security that helps customers address security threats, improve network performance, and protect and store their data. Barracuda’s international headquarters are in the heart of Northern California’s Silicon Valley.

ReferencesNo other product we tried has the flexibility the Barracuda NextGen Firewall F deployment has with our complex remote access and site to site needs, as well as great layered security. All the issues we have raised have been promptly resolved by product development, even when they were mistakes made on our end. Great support!

As a company with internationally distributed facilities, the centralized management concept particularly impressed us – Barracuda Networks therefore quickly became our partner of choice.

Manager of IT Service and Infrastructure Technology,ODLO Sports Group AG

IT Vice President,Altair Engineering, Inc.

Transportation Financial Retail Manufacturing

Industry Broadcasting/Advertising NGO Governmental

Food Legal NGO Healthcare

Recently I tried one of these dedicated products to protect of advanced persistent threats. After one month of extensive monitoring it turned out that our NextGen Firewall Fs protect our infrastructures so well, that we can continue to focus on actual business problems. Having chosen the right firewall still saves us money and time every day.

CIO, Union ofTurkish Bar Associations

5Barracuda NextGen Firewall F | Application & Identity-Aware Protection for Distributed Network Environments

Barracuda NextGen Firewall FApplication & Identity-Aware Protection for Distributed Network Environments

Barracuda NextGen Firewall F-Series is a family of hardware and virtual appliances designed to protect network infrastructure, improve site-to-site connectivity and simplify administration of network operations. Beyond its powerful network firewall and VPN technologies, the F-Series integrates a comprehensive set of next-generation firewall technologies, including identity-aware Application Control, intrusion prevention, web filtering, antivirus, anti-spam, and Network Access Control. On top of these next-generation capabilities Barracuda NextGen Firewall F provides sophisticated next-generation Advanced Persistent Threat Protection with the Advanced Threat Detection.

Barracuda NextGen Firewall F-Series features intelligent site-to-site traffic management capabilities that optimize both availability and performance of the Wide Area Network (WAN). Administrators can control application-level routing and prioritization of traffic across multiple links, tunnels, and traffic conditions.Leading next-generation firewall capabilities, industry-leading centralized management, highly resilient VPN technology combined with intelligent traffic management capabilities, allow customers to save line costs and increase overall network availability.

What are the immediate benefits of deploying a Barracuda NextGen Firewall F? Improved security posture - From a security perspective, organizations can improve their security posture by integrating previously disparate security functions, including Web Filtering, Malware Protection, Email Security, Intrusion Prevention, Application Control, and - for protection against zero-day exploits and advanced persistent threat - Advanced Threat Detection into a single platform.

Achieve full application awareness - Application Control allows for accurately identifying a vast number of protocols and applications (BitTorrent, Skype, Instant Messaging, etc.) that are traversing the network. Even if they are using advanced obfuscation techniques, port-hopping, or encryption. Barracuda’s Application Control can block the usage of unwanted applications, control and throttle acceptable traffic, and preserve bandwidth for business-critical applications to ensure business continuity.

Achieve full user-based visibility and control - Barracuda NextGen Firewall F-Series provide seamless integration with all authentication methods (e.g., Active Directory, RADIUS, LDAP/s, etc.) to facilitate policy configuration based on the actual user and group information and not just IP addresses.

Corporate network optimization - From a global network management perspective, you can reduce administrative overhead through centralized management capabilities that serve thousands of nodes and reduce hard dollar costs by better managing WAN links and link bandwidth. State-of-the-art failover and bandwidth management capabilities make sure that your business-critical traffic receives the bandwidth it deserves, even in case of link-loss.

Accelerated troubleshooting - At a help desk and troubleshooting level, the F-Series provides unprecedented levels of visibility into individual network flows, arming the network engineer with powerful tools to diagnose and maintain the network.

Insi

de

the

Tech

no

log

y

6 Secure Your Network’s Perimeter | Barracuda NextGen Firewall F

Secure Your Network’s PerimeterBarracuda NextGen Firewall F provides several layers to protect an organization’s network

BarracudaAdvanced Threat Detection

BarracudaEnergize Updates

IPS / IDS

Malware Protection

Barracuda NextGen Firewall F-Series

on-box

Web Filtering(cloud or on-box)

Advanced persistent threats,Advanced malware & zero-day exploits

Malware (AV / IPS)

Geo IP Control

DoS / DDoS

Advanced persistent threats,Advanced malware & zero-day exploits

Malware (AV)

Web Filtering

Intrusion Detection and PreventionThe built-in Intrusion Detection and Prevention System (IDS/IPS) strongly enhances network security by providing complete and comprehensive real-time network protection against a broad range of network threats, vulnerabilities, exploits, and exposures in operating systems, applications, and databases preventing network attacks such as:

• SQL injections and arbitrary code executions

• Access control attempts and privilege escalations

• Cross-Site Scripting and buffer overflows

• DoS and DDoS attacks

• Directory traversal and probing and scanning attempts

• Backdoor attacks, trojans, rootkits, viruses, worms, and spyware

By providing advanced attack and threat protection features such as stream segmentation and packet

anomaly protection, TCP split handshake protection, IP and RPC defragmentation, FTP evasion protection, as well as URL and HTML decoding, the Barracuda NextGen Firewall F-Series is able to identify and block advanced evasion attempts and obfuscation techniques that are used by attackers to circumvent and trick traditional intrusion prevention systems.

As part of Barracuda’s Energize Updates subscription, automatic signature updates are delivered on a regular schedule or on an emergency basis to ensure that the Barracuda NextGen Firewall F is constantly up-to-date. If the firewall unit is centrally managed, the pattern updates are conveniently distributed by the Barracuda NextGen Control Center.

Malware ProtectionThe optional Malware Protection shields the internal network from malicious content by scanning web content (HTTP and HTTPs), email (SMTP, POP3), and file transfers (FTP) via two fully integrated antivirus engines. Malware protection is based on regular signature updates as well as advanced heuristics to detect malware or other potentially unwanted programs even before signatures are available. The malware protection covers viruses, worms, trojans, malicious java applets, and programs using known exploits on PDF, pictures and office documents, macro viruses, and many more, even when using stealth or morphing techniques for obfuscation.

Details?Page 86

Details?Page 86

Barracuda NextGen Firewall F | Secure Your Network’s Perimeter 7

Advanced Threat DetectionBarracuda’s Advanced Threat Detection (ATD) uses next-generation sandbox technology powered by full-system emulation to catch not only persistent threats and zero-day exploits, but also advanced malware designed to evade detection. Files are forwarded to a cloud-based sandbox environment, where they are executed and analyzed to identify suspicious and malicious behavior.

Barracuda ensures flexible and simple deployment with your existing network infrastructure—no additional hardware is required since resource intensive sandboxing is offloaded to the cloud. The cloud database is continuously updated by all Barracuda NextGen Firewall F’s with enabled ATD and, thereby, speed up the processing of already known files.

The administrator has full policy control over how PDF documents, Microsoft Office Files, EXEs/MSIs/DLLs, Android APKs, compressed files and archives are emulated and delivered to the client. Based on identified malware activity, infected users can be automatically quarantined preventing the malware from spreading within the network.

Customizable, on-demand analysis reports for any emulated file provide full insight and details on malicious activities, file behavior, system-registry entries, evasion and obfuscation techniques. This also enables network activities such as establishing encrypted connections to Botnet Command and Control Centers for increased security posture to evade scaled Botnet attacks.

Web FilteringThe web filtering options for the Barracuda NextGen Firewall F-Series enables highly granular, real-time visibility into online activity, broken down by individual users and applications, letting administrators create and enforce effective Internet content and access policies.

It protects user productivity, blocks malware downloads and other web-based threats, and enables compliance by blocking access to unwanted websites and servers, providing an important additional layer of security alongside application control.

Details?Page 87

Details?Page 87

Barracuda ATDSignature DB

Barracuda NextGen Firewall F









8 Controlling Application Usage | Barracuda NextGen Firewall F

Controlling Application UsageBlock unwanted applications, control acceptable traffic, and ensure business continuity

The Barracuda NextGen Firewall F-Series gives administrators granular control over applications, allowing them to define rules for forwarding data traffic using the best respective transmission channels based on type of application, user, content, time of day, and geographical location. Mobile devices, online applications, social networks, and streaming media have caused an enormous increase in non-business network data traffic, pushing bandwidth capacities to their limits and causing degradation in performance of business-critical applications.

Application ControlThe Barracuda NextGen Firewalls family provides a powerful and extremely reliable detection and classification of thousands of applications and sub-applications by combining Deep Packet Inspection (DPI) and behavioral traffic analysis – no matter if the protocols are using advanced obfuscation, port hopping techniques, or encryption. It allows the creation of dynamic application policies and facilitates establishing and enforcing acceptable access and use policies for users and groups by application, application category, location, and time of day. Barracuda NextGen Firewalls combine application control with seamless integration of authentication schemes like Active Directory, RADIUS, or LDAP/S. As a consequence, an administrator is always on top of what the users to on the organization’s network. Barracuda NextGen Firewalls feature advanced application-based routing path selection and Quality of Service (QoS) capabilities. These provide additional business value in addition to security by significantly improving network quality and availability, as well as reducing direct line cost due to bandwidth saved.

For rich reporting and drill-down capabilities, Barracuda NextGen Firewalls come with real-time and historical application visibility that shows application traffic on the corporate network, thus providing a basis for deciding which connections should be given bandwidth prioritization, crucial to QoS optimization for business-critical applications. Furthermore, it allows adjusting and refining the corporate application use policies.

Personalized Application ControlOn top of thousands of applications that are delivered out of the box and constantly updated, Barracuda NextGen Firewalls provide a way to easily create user-defined application definitions for best-in-class application control customized and tailored to an organization’s specific needs.

Application-Based Provider SelectionThe combination of next-generation security and adaptive WAN routing allows Barracuda NextGen Firewalls to dynamically assign available bandwidth for several links not only based on protocol, user, location, and content, but also based on applications, application categories, and web filter categories. This keeps expensive, highly available lines free for business and mission-critical applications, while significantly reducing response times and freeing up additional bandwidth.

Deep Application ContextThe deep application context analysis allows for deeper inspection of the application data stream by continually evaluating the actual intention of applications and the respective users. By this means administrators can gain detailed insight into what a specific application was used for or if a user was trying to circumvent the corporate application usage policy.

Details?Page 85

Application Control

Barracuda NextGen Firewall

ISP Z

ISP Y

ISP X

Games

General

CustomApp

General Games

CustomApp

use X use Y use Zuse X or Y

Application Usage & Risk Report.pdf

Barracuda NextGen Firewall F | Controlling Application Usage 9

User Identity Awareness & ControlBarracuda NextGen Firewalls support authentication of users and enforcement of user-aware firewall rules, web filter settings, and application control by seamlessly integrating with • Microsoft and Citrix terminal service environments

• Microsoft Active Directory

• NTLM

• RADIUS

• RSA SecurID

• LDAP/LDAPS

• TACACS+

• and more...

Application Risk and Usage ReportThe Application Usage and Risk Report is a predefined report type in the Barracuda Report Creator tool providing automated reports and risk analysis based on the network traffic that is traversing the network. It provides an overview on how effective the currently deployed technologies are in detecting and enforcing the corporate application usage policies and gives recommendations what should be taken into account when redefining these policies. Even if not used as a routing device, Barracuda NextGen Firewalls can still collect data required for generating such reports using a• Layer2 Bridge or

• SPAN Port / Port Mirroring deployment

In either way, collecting the traffic has no impact on the firewall performance at all.The report creation can be started manually (on-demand) or scheduled (including automated email distribution). And - of course - this report is fully customizable to comply with possible branding requirements.

Example of a report pdf page

Microsoft TSCitrix TS

TS Agent

Active Directory

NTLM

LDAP/S

RADIUS

x.509RSA SecurID

TACACS+

SMS Passcode(VPN)

local authenticationdatabase

DC Agent Wi-Fi Controlers

i

Details?Page 88

10 Cloud Enablement & WAN Virtualization | Barracuda NextGen Firewall F

Cloud Enablement & WAN VirtualizationThe need for an Application Delivery Network

Today’s corporate networks are being transformed by the proliferation of mobile devices and the increasing adoption of SaaS offerings like Microsoft’s Office 365 and moving corporate services to private or public clouds.

The net result of this is increased dispersion or fragmentation of corporate network into multiple dislocated segments and a massively increased attack surface. In this scenario a firewall solution is needed that can be deployed to multiple locations on the network with the corresponding next-generation deep inspection features to mitigate attacks. The introduction of, e.g., Office 365 all of a sudden creates a need for direct internet break outs at multiple branch office locations. Thus multiple enforcement points need to be created. Business critical internal traffic running across the WAN links must be protected against outages as well as quality of service impairments due to aggressive but less important network activities on the same physical infrastructure.

Multiple Barracuda NextGen Firewall F’s deployed to multiple physical and cloud locations allow an organization to span a highly performant and secure logical application delivery network (ADN) on top of the physical and virtualized infrastructure components. In conjunction with our leading central management concepts both the initial implementation and subsequent life cycle management tasks around the AND can be accomplished a surprisingly low total cost.

The key feature here is that full next-gen deep inspection can be combined with smart policy based adaptive traffic management. Policy based means that applicable QoS settings (bandwidth guarantees, priorities), network path selection, e.g., MPLS vs VPN, and/or privacy requirements can be based on the application or the person/groups causing the traffic. Adaptive means that failover policies can be defined that make sure that in case of unavailability of a particular path available alternative paths can be utilized. This feature allows for improved fault tolerance against outages as well for cost optimization strategies where multiple carriers/ISPs are combined to get the required bandwidth at an optimum price point.

Public cloud offerings like Amazon EC2 and Microsoft Azure are a new and increasingly attractive way to lower cost around IT operations. The business lines profit from a faster-time-to-market, good compute elasticity and an easy option to achieve global service availability quickly. There are challenges too. Replication typical on-premises DC concepts in these environments is impossible without a cloud compatible firewall product.

Barracuda NextGen Firewall F-Series is ideal for securing and compartmentalizing these public cloud environments – connecting on-premises networks to the cloud and connecting logically separated components within the cloud data centers.

Application-Based Provider SelectionBut before an organization can benefit of the cloud, it is mandatory to get to the cloud!

As mentioned earlier, Barracuda NextGen Firewalls include information on application, application categories, as well as web filter categories into its link selection policy. Such link policies can force for instance business critical traffic to use T1 lines whereas uncritical bulk traffic is routed via less expensive lines.

Traffic Shaping and Quality of ServiceLimited network resources make bandwidth prioritization a necessity. Barracuda NextGen Firewalls provide strong Quality of Service (QoS) that lets the administrator apply quality aspects and service guarantees to selected traffic flows within the WAN. QoS is often used to prioritize the network traffic of applications that are critical and must not be affected by the network traffic of other applications. Barracuda NextGen Firewalls come with a large set of QoS techniques, such as traffic shaping, on-the-fly traffic prioritization, and bandwidth partitioning, which assigns a bandwidth limit to certain types of traffic. To select traffic for different priority classes, the available real-time traffic analysis can be used to identify whether network traffic was sent by business-critical applications or by potentially unwanted applications.

Barracuda NextGen Firewall F | Cloud Enablement & WAN Virtualization 11

Failover and Link BalancingTo ensure the best and most cost-efficient connectivity, Barracuda NextGen Firewalls provide a wide range of built-in uplink options such as unlimited leased lines, up to four uplinks, etc. By eliminating the need to purchase additional devices for link balancing, security conscious customers will have access to a WAN connection that never goes down, even if one or two of the existing WAN uplinks are severed. Further, traffic intelligence mechanisms make sure the next defined uplink is activated on the fly and all traffic is rerouted to make full use of the remaining lines. In the event that backup lines provide less bandwidth, intelligent traffic shaping automatically prioritizes business-critical applications, networks, or distinct endpoints.

Dynamic Mesh VPNBarracuda NextGen Firewall F’s can allow the automatic creation and tear down of direct VPN tunnels between spokes in hub-and-spoke architectures enhances connection quality for latency-sensitive traffic, while saving remote gateway’s resources. Dynamic direct tunnels are disabled when not used, can be built between dynamically addressed nodes and co-exist within a hub-and-spoke network allowing flexible choice of routing path by firewall module.

WAN OptimizationBarracuda NextGen Firewalls can significantly enhance the WAN performance of distributed network environments by improving availability, performance, and response time of business-critical applications by lowering throughput and transmission delays, affecting time-sensitive decisions and enterprise profitability. The next-generation networking concept of Barracuda NextGen Firewalls provides a set of powerful features to efficiently reduce and offset the negative effects of high line latencies and response times. By implementing enterprise-grade WAN acceleration features such as data deduplication, traffic compression, and protocol optimization, Barracuda NextGen Firewalls can significantly improve site-to-site WAN traffic and increase productivity by accelerating the delivery of business applications - at no extra charge. WAN traffic can be effectively compressed up to 95 percent, significantly reducing the bandwidth needed at remote locations while increasing network responsiveness.

Supported Virtualization and Public Cloud Offerings

12 Secure Remote Access | Barracuda NextGen Firewall F

Secure Remote AccessThe Barracuda NextGen Firewall F-Series incorporates advanced Client-to-Site VPN capabilities, using SSL, IPsec, and TINA protocols to ensure remote users can easily and securely access network resources without time-consuming client configuration and management. The communication protocols used with our clients are optimized to be fully roaming-capable by quickly reconnecting upon loss of communication. Smart pathfinder technology determines the nearest point of entry to the corporate network. Advanced NAT traversal technology can use different ports encapsulated in either TCP or UDP and, thus, is able to pass through web proxies.

The influx of private computing devices, from smartphones to laptops and tablets, into the workplace may help increase productivity, flexibility, and convenience. However, BYOD (Bring Your Own Device) adds new security challenges and risks, such as enabling and controlling access, as well as preventing data loss. The F-Series provides strong capabilities to give users the full advantage of their devices while reducing possible risks to the business. Unwanted applications can be blocked, LAN segmentation can protect sensitive data, and network access control can check the health state of each device connecting to the corporate network.

on-premiseBarracuda NextGen Firewall F

BYO

D

on-premiseBarracuda NextGen Firewall F

“Private”Cloud

InternalNetwork

Mobile App(CudaLaunch)

Desktop VPN Clients(Barracuda Network Access Client)

Browser Remote Access(SSL VPN)

Details?Page 43

About TINA Protocol The TINA protocol can encapsulate encrypted ESP payload in TCP or UDP packets, thus adapting to underlying transport network quality and providing failure resistant, high-speed VPN connections. It also improves VPN connectivity substantially by adding:

• Multiple concurrent physical transport paths per logical tunnel

• Session level or packet level transport aggregation for increased total tunnel throughput

• Adaptive traffic shaping depending on VPN transport availability

• Fallback transports in case of uplink failure• Traffic compression and deduplication• DHCP and NAT support

Barracuda NextGen Firewall F | Secure Remote Access 13

Browser Remote Access (SSL VPN)Barracuda‘s Mobile Portal enables you to set up shortcuts on the home-screen of devices such as smartphones or tablets. When accessing the portal via the web browser on a mobile device, users can browse apps, network folders and files as if they were connected to the office network. The Mobile Portal supports most of commonly used devices, e.g., Apple iOS, Android, and Blackberry devices and is part of the “Basic Remote Access” subscription.

Mobile Apps (CudaLaunch)CudaLaunch is an application for both iOS and Android devices that provides mobile workers secure remote access through the Barracuda NextGen Firewall F to their organization’s private cloud applications and other sensitive information. As an app, it provides a familiar app store setup and install experience for end users. And unlike browser-based remote access, CudaLaunch provides a more responsive look and feel that is unified across mobile platforms and avoids the idiosyncrasies of mobile browsers.

VPN Clients (Barracuda Network Access Client)Every Barracuda NextGen Firewall supports an unlimited number of VPN clients at no extra cost. The Barracuda Network Access VPN Client provides a sophisticated VPN client for Windows, Mac OS, and Linux that provides richer performance and functionality than standard IPsec client software. Benefits include quick restoration of VPN tunnels , “Always On” VPN connections for PCs, redundant VPN Gateway Support, selective routing of network traffic through the VPN tunnel and finding the optimal VPN Gateway based on location. The Barracuda Network Access Client, when used with a Barracuda NextGen Firewall F, provides centrally managed Network Access Control (NAC) and an advanced Personal Firewall. This enforces client health and security policies for remote users connecting to the corporate network.

Barracuda VPN Client for Mac OS

Barracuda VPN Client for Windows 7

14 Central Management across the Enterprise | Barracuda NextGen Firewall F

Central Management across the EnterpriseTo centralize management across many different firewalls and remote access users, the Barracuda NextGen Control Center enables administrators to manage and configure security, content, traffic management, and network access policies from a single interface. Template-based configuration and globally available security objects enable efficient configuration across thousands of locations.

The Barracuda NextGen Control Center helps significantly reduce the cost associated with security management while providing extra functionality both centrally and locally at the managed gateway. Software patches and version upgrades are centrally controlled from within the management console and deployment can be applied to all managed devices.

Highly customizable administrative roles can be defined to delegate administrative capabilities for specific departments or locations.

Scalable DeploymentManaging the security issues in a widely distributed enterprise network can be painful and extremely time consuming. Managing a system may take only 15 minutes per day. But having 20 firewall systems in place results in five hours per day – just to manage the existing system.

With Barracuda NextGen Control Center, managing multiple F-Series deployments takes the same amount of time as managing one.

• Create pre-configured templates for easy-rollout.

• Have all information about the enterprise security deployment available in real time.

• Create reports of either one or all F-Series deployments.

Lifecycle ManagementScalable Barracuda NextGen Firewall F’s offer companies sustainable investment protection. Energize Updates automatically provide the latest firmware and threat definitions to keep the appliance up to date. With a maintained Instant Replacement subscription, organizations receive a new appliance with the latest specs every four years.

Barracuda NextGen Control Center’s Status Map displays a drill down status overview of all centrally managed Barracuda NextGen Firewall F-Series deployments.

Details?Page 89

Barracuda NextGen Firewall F | Virtual Appliances 15

Virtual AppliancesVirtual versions of Barracuda’s hardware appliance-based solutions

As organizations have adopted virtualization for their server infrastructures, there has been a corresponding trend to extend the benefits of virtualization to the security layer. The Barracuda NextGen Firewall F Vx provides the same powerful technology, comprehensive features, and ease-of-use found in a Barracuda NextGen Firewall F hardware appliance. It is ideally suited for organizations that are standardizing hardware platforms or deploying virtual environments. Beyond its powerful network firewall, IPS, and VPN technologies, Barracuda NextGen Firewall F Vx integrates a comprehensive set of next-generation firewall technologies, including Application Control, availability, and traffic flow optimization across the wide area network, web filtering, antivirus, anti-spam, and network access control enforcement.

Barracuda NextGen Firewall FAvailable for:

Details?Page 85

Barracuda NextGen Firewall FVx Editions VF25 VF50 VF100 VF250 VF500 VF1000 VF2000 VF4000 VF8000CAPACITY

Number of Protected IPs 25 50 100 250 500 Unlimited Unlimited Unlimited Unlimited

Allowed Cores 2 2 2 2 2 2 4 8 16

AVAILABLE SUBSCRIPTIONS

NextGen Web Filter Optional

Malware Protection Optional

Advanced Threat Detection Optional

Basic Remote Access Optional

Premium Remote Access Optional

Barracuda NextGen Control CenterAvailable for:

Details?Page 85

Barracuda NextGen Control Center Standard Edition Enterprise Edition Global Edition

Available models VC400 VC610 VC820

Maximum managed gateways [recommended]

No limit[20]

No limit [depending on HW]

No limit [depending on HW]

Multi tenancy - Yes, with configuration groupingsYes, includes support for 5 tenants (additional tenants

available)

Manageable configuration groupings 1 No limit No limit

AVAILABLE OPTIONS

High availability (HA) support Optional Optional HA license included

Additional tenant for multi tenancy - - Optional

Note: For more details on Barracuda Virtual Appliances, please visit barracuda.com/solutions/virtual.

16 Public Cloud | Barracuda NextGen Firewall F

Public CloudGrowth in cloud computing capabilities and services has driven more data into places where traditional IT security measures cannot reach; specifically, data centers not owned by your corporate IT group. Barracuda NextGen Firewall F-Series provides centralized management and highly secure, encrypted traffic to, from, and within public cloud deployments.

Integrated Next-Generation SecurityBarracuda NextGen Firewall F-Series is designed and built from the ground up to provide comprehensive, next-generation firewall capabilities. Based on application visibility, user-identity awareness, intrusion prevention, and centralized management, F-Series deployments are the ideal solution for today’s dynamic enterprises that are adding public cloud deployments into their company network.

Central ManagementUsers of a Barracuda NextGen Firewall F deploymentll benefit from the same single-pane-of-glass central management that is used in on-premises deployments. It enables users to manage the secure VPN connections, to, from, and within public cloud deployments, and Barracuda NextGen Firewall F deployments.

For more details on Microsoft Azure and Barracuda NextGen Firewall F-Series, please visit barracuda.com/programs/azure.

Microsoft Azure - compute instance NameA1 A2 A3 A4

CAPABILITIES LEVEL 2 LEVEL 4 LEVEL 6 LEVEL 8Virtual Cores 1 2 4 8Firewall Throughput 400 Mbps 2 Gbps 5 Gbps 9 Gbps

VPN Throughput 120 Mbps 500 Mbps 1 Gbps 1.5 Gbps

IPS Throughput 80 Mbps 900 Mbps 2.5 Gbps 3 Gbps

Concurrent Sessions 35,000 300,000 500,000 1,000,000New Session/s 2,500 16,000 35,000 45,000

FEATURES 1

Malware Protection Optional Optional Optional OptionalAdvanced Threat Detection Optional Optional Optional Optional

Premium Remote Access 3 Optional Optional Optional Optional

Premium Support - - Optional Optional

For more details on Amazon Web Services and Barracuda NextGen Firewall F-Series, please visit barracuda.com/programs/aws.

Amazon Web Services - compute instance NameT2.small C3.Medium c3.Xlarge c3.2xlarge

CAPABILITIES LEVEL 2 LEVEL 4 LEVEL 6 LEVEL 8Virtual Cores 1 2 4 8Max Number of Interfaces 2 2 4 4

Firewall Throughput 400 Mbps 2 Gbps 5 Gbps 9 Gbps

VPN Throughput 120 Mbps 500 Mbps 1 Gbps 1.5 Gbps

IPS Throughput 80 Mbps 900 Mbps 2.5 Gbps 3 Gbps

Concurrent Sessions 35,000 300,000 500,000 1,000,000New Session/s 2,500 16,000 35,000 45,000

FEATURES 2

Malware Protection Optional Optional Optional OptionalAdvanced Threat Detection Optional Optional Optional Optional

Premium Remote Access 3 Optional Optional Optional Optional

Premium Support - - Optional Optional

Details?Page 85

Details?Page 89

1 For more details on Microsoft Azure and Barracuda NextGen Firewall F-Series, please visit barracuda.com/programs/azure.2 For more details on Amazon Web Services and Barracuda NextGen Firewall F-Series, please visit barracuda.com/programs/aws.3 Basic Remote Access is included in Energize Updates or - alternatively - with PAYG licensing

Barracuda NextGen Firewall F | Model Comparison 17

Model ComparisonWith hardware models available for small branch offices as well as large headquarters and data centers, and a corresponding offering of virtual appliances, the Barracuda NextGen Firewall F-Series is designed for deployment across the entire enterprise.

MODEL COMPARISON F10 F18 F80 F180 F280 F380 F400 F600 F800 F900 F1000

CAPACITY (more detailed on page 18ff.)

Firewall Throughput 1 300 Mbps

1.0Gbps

1.35Gbps

1.65Gbps

3.0Gbps

3.8Gbps

5.5Gbps

16.3Gbps 2

19.6Gbps 2

22.2Gbps 2

40Gbps 2

VPN Throughput 3 85Mbps

190Mbps

240Mbps

300Mbps

1.0Gbps

1.2 Gpbs

1.2Gbps

2.3Gbps 2

7.3Gbps 2

7.8Gbps 2

10Gbps 2

IPS Throughput 1 60Mbps

400Mbps

500Mbps

600Mbps

1.0Gbps

1.4Gbps

2.0Gbps

5.0Gbps 2

6.5Gbps 2

7.1Gbps 2

13Gbps 2

Concurrent Sessions 2,000 80,000 80,000 100,000 250,000 400,000 500,000 2,100,000 2 2,500,000 2 4,000,000 2 10,000,000 2

New Sessions/s 1,000 8,000 8,000 9,000 10,000 15,000 20,000 115,000 2 150,000 2 160,000 2 250,000 2

Firewall Users No limit

Site-to-Site VPN Tunnels

256 No limit

Barracuda VPN Clients (recommended) 4

No limit(5) (25) (25) (50) (50) (50) (50) (100) (500) (1,000) (2,000)

AVAILABLE SUBSCRIPTIONS (more detailed on page 91ff.)

Energize Updates Mandatory

Warranty Extension Optional

Instant Replacement Optional

Cold Spare Unit Optional

Premium Support depends on product mix and size of deployment Optional



Advanced Threat Detection

Optional

Basic Remote Access

Optional

Premium Remote Access

Optional

1 Measured with large packets (MTU1500)2 Measured with 10GbE fiber ports.

3 VPN throughput using AES-128 NOHASH4 Basically, the number of Barracuda VPN Clients connecting is unlimited.

Branch Office Firewalls Head Office / Core Firewalls

F10 F380

F18F400

F280

F900

MGMT

IPMI

CONSOLE

USB USB

F1000

F600F80

F180

F800

User Interface / Tools

Control Center Servers

Vx

Public Cloud

Remote Access

Dedicated VPN Clients for

CudaLaunch app for

Clientless SSL VPN

18 Hardware Facts | Barracuda NextGen Firewall F

1 Measured with large packets (MTU1500)2 Measured with TCP

Hardware FactsBarracuda NextGen Firewall F10

INTERFACE

Copper Ethernet NICs 4x1 GbE

USB 2.0 2

Serial / console 1 [RJ45]

PERFORMANCE [AS OF FIRMWARE RELEASE 6.2.x]

Firewall throughput [Mbps] 1 300

VPN throughput [AES-128, NOHASH, Mbps] 85

VPN throughput [AES-128, MD5, Mbps] 75

VPN throughput [AES-128, SHA, Mbps] 75


IPS throughput [Mbps] 1 60

Concurrent sessions 2,000

New sessions/s 2 1,000

MEMORY

RAM [MB] 512

MASS STORAGE

Type Flash

Size [GB] 4

SIZE, WEIGHT, DIMENSIONS

Weight appliance [lbs] 2.6

Weight carton with appliance [lbs] 6.6

Appliance size: width x depth x height [in] 9.4 x 6.5 x 1.2

Carton size: width x depth x height [in] 10.2 x 12.6 x 5.5

Form factor Desktop Mini

HARDWARE

Display -

Hardware crypto accelerator Yes, built-in

Cooling Fanless

Power supply Single, external

ENVIRONMENTAL

Noise emission [db/A] < 32

Operating temperature [°F] +30 to +105

Storage temperature [°F] -5 to +160

Operating humidity (non-condensing) 5% to 95%

MTBF [SYSTEM]

MTBF [yrs.] > 5

CERTIFICATIONS & COMPLIANCE

CE emissions Yes

CE electrical safety Yes

FCC emissions Yes

ROHS compliant Yes

POWER & EFFICIENCY

Power supply type External brick

Power type [AC/DC] AC

Input rating [Volts] 100-240

Input frequency [Hz] 50-60

Auto sense Yes

Wattage / max. power draw [W] 40

Max. power draw [Amps.] 1.6

Max. heat dissipation [W] 36

Max. heat dissipation [BTU] 123

Energy efficiency [average] > 80%

PACKAGING CONTENT

Appliance Yes

Serial cable Yes

Straight network cable Yes

Cross network cable Yes

External power brick & cables Yes

USB flash drive for recovery & installation Yes

Quick start guide Yes

USBCONSOLERESETDC 12V 1234

USBCONSOLERESETDC 12V 1234

Barracuda NextGen Firewall F | Hardware Facts 19

VGA USB 2.0 CONSOLERESETPOWER19V DC 1 2 3 4



Barracuda NextGen Firewall F18

INTERFACE


USB 2.0 4



Firewall throughput [Gbps] 1 1.0








MEMORY

RAM [GB] 2

MASS STORAGE

Type SSD

Size [GB] 30






Form factor Compact

HARDWARE

Display -

Cooling Fanless


ENVIRONMENTAL

Noise emission [db/A] N/A




MTBF [SYSTEM]

MTBF [yrs.] > 5


CE emissions Yes


FCC emissions Yes

ROHS compliant Yes

POWER & EFFICIENCY





Auto sense Yes






PACKAGING CONTENT

Appliance Yes

Serial cable Yes






2x Barracuda wall mount bracket Yes






INTERFACE


USB 2.0 4


VGA Yes

Integrated WiFi (IEEE 802.11b/g/n) Yes










MEMORY

RAM [GB] 2

MASS STORAGE

Type Solid State

Size [GB] 30

SSD MTBF [hours] 1,200,000






Form factor Compact

HARDWARE

Display -

Cooling Fan


ENVIRONMENTAL





MTBF [SYSTEM]

MTBF [yrs.] > 5


CE emissions Yes


FCC emissions Yes

ROHS compliant Yes

POWER & EFFICIENCY


Power type [AC/DC] DC

Input rating [Volts] 19


Auto sense Yes






PACKAGING CONTENT

Appliance Yes

Serial cable Yes






Wireless antenna Yes




VGA USB 2.0 CONSOLERESETPOWER19V DC 1 2 3 4 S1

S2

S3

S4

S5

S6

S7

S8

5

6


S2

S3

S4

S5

S6

S7

S8

5

6


INTERFACE


Switch 8-port

USB 2.0 4












MEMORY

RAM [GB] 2

MASS STORAGE

Type Solid State

Size [GB] 80







Form factor Compact

HARDWARE

Display -

Cooling Fan


ENVIRONMENTAL





MTBF [SYSTEM]

MTBF [yrs.] > 5


CE emissions Yes


FCC emissions Yes

ROHS compliant Yes

POWER & EFFICIENCY





Auto sense Yes






PACKAGING CONTENT

Appliance Yes

Serial cable Yes








2x Barracuda L-shape rack mount bracket Yes



INTERFACE


Switch 8-port

USB 2.0 4





VPN throughput [AES-128, NOHASH, Gbps] 1.0




IPS throughput [Gbps] 1 1.0



MEMORY

RAM [GB] 4

MASS STORAGE

Type Solid State

Size [GB] 80







Form factor Compact

HARDWARE

Display -

Cooling Fan


ENVIRONMENTAL





MTBF [SYSTEM]

MTBF [yrs.] > 5


CE emissions Yes


FCC emissions Yes

ROHS compliant Yes

POWER & EFFICIENCY





Auto sense Yes






PACKAGING CONTENT

Appliance Yes

Serial cable Yes











S2

S3

S4

S5

S6

S7

S8

5

6


S2

S3

S4

S5

S6

S7

S8

5

6




INTERFACE


USB 2.0 2











MEMORY

RAM [GB] 4

MASS STORAGE

Type Solid State

Size [GB] 80



Weight appliance [lbs] 13




Form factor 1U Rack Mount

HARDWARE

Display Yes

Cooling Fan

Power supply Single, internal

ENVIRONMENTAL





MTBF [SYSTEM]

MTBF [yrs.] > 5


CE emissions Yes


FCC emissions Yes

ROHS compliant Yes

POWER & EFFICIENCY

Power supply type Internal




Auto sense Yes






PACKAGING CONTENT

Appliance Yes

Serial cable Yes



Direct power to wall outlet Yes







INTERFACE

Standard model 8x1 GbE Copper

Model F208x1 GbE Copper +

4x1 GbE SFP

USB 2.0 2




VPN throughput [AES-128, NOHASH, Mbps] 1.2







MEMORY

RAM [GB] 4

MASS STORAGE

Type Solid State

Size [GB] 80








HARDWARE

Display Yes

Cooling Fan

Power supply

Single, internal (standard)

Dual hot swap, internal (SFP)

ENVIRONMENTAL





MTBF [SYSTEM]

MTBF [yrs.] > 5


CE emissions Yes


FCC emissions Yes

ROHS compliant Yes

POWER & EFFICIENCY





Auto sense Yes


Max. power draw [Amps.] 5




PACKAGING CONTENT

Appliance Yes

Serial cable Yes




USB recovery & installation stick Yes



Barracuda rail kit Optional

Picture shows Barracuda NextGen Firewall F400 model F20.


1 Please consult section “Available F600 Sub-models” on page 812 Measured with 10GbE fibre ports.3 Measured with large packets (MTU1500)4 Measured with TCP


INTERFACE 1

Model C10 / C20 12x1 GbE Copper

Model F10 / F208x1 GbE Copper +

4x1 GbE SFP

Model E208x1 GbE Copper +

2x10 GbE SFP+

USB 2.0 2


PERFORMANCE [AS OF FIRMWARE RELEASE 6.2.x] 2



VPN throughput [AES-128, MD5, Gbps] 1.7

VPN throughput [AES-128, SHA, Gbps] 1.7



Concurrent sessions 2,100,000


MEMORY

RAM [GB] 8

MASS STORAGE

Type SSD

Size [GB] (models Cxx / Fxx) 160

Size [GB] (models E20) 300








HARDWARE

Display Yes

Cooling Fan

Power supply 1

Single, internal,Dual hot swap,

internal (optional)

ENVIRONMENTAL





MTBF [SYSTEM]

MTBF [yrs.] > 5


CE emissions Yes


FCC emissions Yes

ROHS compliant Yes

POWER & EFFICIENCY





Auto sense Yes






PACKAGING CONTENT

Appliance Yes

Serial cable Yes




USB recovery & installation stick Yes



Barracuda rail kit Yes

Picture shows Barracuda NextGen Firewall F600 model E20.




INTERFACE 1

Model CCC 20x1 GbE Copper

Model CCF12x1 GbE Copper +

4x1 GbE SFP

Model CCE12x1 GbE Copper +

4x10 GbE SFP+

USB 2.0 2











MEMORY

RAM [GB] 12

MASS STORAGE

Type Solid State

Size [GB] 300








HARDWARE

Display Yes

Cooling Fan

Power SupplyDual hot swap,

internal

ENVIRONMENTAL





MTBF [SYSTEM]

MTBF [yrs.] > 4


CE emissions Yes


FCC emissions Yes

ROHS compliant Yes

POWER & EFFICIENCY





Auto sense Yes

Wattage / max. power draw [W] 2x 400




Energy efficiency [average] >80%

PACKAGING CONTENT

Appliance Yes

Serial cable Yes








Picture shows Barracuda NextGen Firewall F800 model CCF.

Alarm o�

Alarm o�



Picture shows Barracuda NextGen Firewall F900 model CFE.Barracuda NextGen Firewall F900

INTERFACE 1

Model CCC 24x1 GbE Copper

Model CCE16x1 GbE Copper

4x10 GbE SFP+

Model CFE8x1 GbE Copper

8x1 GbE SFP4x10 GbE SFP+

USB 2.0 2











MEMORY

RAM [GB] 24

MASS STORAGE

Type Solid State

Size [GB]80 (system)

300 (logs, cache)








HARDWARE

Display Yes

Cooling Fans

Power supplyDual hot swap,

internal

ENVIRONMENTAL





MTBF [SYSTEM]

MTBF [yrs.] > 4


CE emissions Yes


FCC emissions Yes

ROHS compliant Yes

POWER & EFFICIENCY

Power supply typeInternal, dual hot

swap




Auto sense Yes





Energy efficiency [average] >80%

PACKAGING CONTENT

Appliance Yes

Serial cable Yes









MGMT

IPMI

CONSOLE

USB USB

Picture shows Barracuda NextGen Firewall F1000 model CFE.



INTERFACE 1

Model CE016x1 GbE Copper

4x10 GbE SFP+

Model CE232x1 GbE Copper

8x10 GbE SFP+

Model CFE16x1 GbE Copper

16x1 GbE SFP 8x10 GbE SFP+

USB 2.0 2

IPMI 1 [RJ45]



Firewall throughput [Gbps] 3 40

VPN throughput [AES-128, NOHASH, Gbps] 10




IPS throughput [Gbps] 3 13



MEMORY

RAM [GB] 12

MASS STORAGE

Type Solid State

Size [GB] 600








HARDWARE

Display Yes

Cooling Fans, hot swap

Power supplyDual hot swap,

internal

ENVIRONMENTAL





MTBF [SYSTEM]

MTBF [yrs.] > 4


CE emissions Yes


FCC emissions Yes

ROHS compliant Yes

POWER & EFFICIENCY

Power supply typeInternal, dual hot

swap




Auto sense Yes



Max. heat dissipation [W] 680.4

Max. heat dissipation [BTU] 2321.6


PACKAGING CONTENT

Appliance Yes

Serial cable Yes









Barracuda NextGen Control Center C400

INTERFACE


USB 2.0 4

Serial / console 1 [DB9] / 1 [RJ45]

MEMORY

RAM [GB] 2

MASS STORAGE

Type HDD

Size [GB] 2x 250






Form factor 1U Full Size

ENVIRONMENTAL






CE emissions Yes


FCC emissions Yes

ROHS compliant Yes

POWER & EFFICIENCY

Power supply type Single, internal




Auto sense Yes


PACKAGING CONTENT

Appliance Yes





PORT1 PORT2NextGen Control Center C400

PORT1 PORT2NextGen Control Center C400


NextGen Control Center C610

NextGen Control Center C610

Barracuda NextGen Control Center C610

INTERFACE

Copper ethernet NICs 2x1 GbE

USB 2.0 2

Serial 1 [DB9]

MEMORY

RAM [GB] 4

MASS STORAGEType HDD

Size [GB] 4x 500

Redundant Disk Array (RAID) RAID 5







ENVIRONMENTAL






CE emissions Yes


FCC emissions Yes

ROHS compliant Yes

POWER & EFFICIENCY

Power supply type Dual, internal




Auto sense Yes


PACKAGING CONTENT

Appliance Yes




2 x Barracuda L-shape rack mount bracket Yes

Barracuda Rail kit Yes

Barracuda NextGen Firewall F | Additional Hardware Options 31

Additional Hardware Options

F10

F18

F80

F180

F280

F380

F400

F600

F800

F900

F100

0

Built-in WiFi option l l l

Spare power supply unit for sub-models with dual power supply

¡ ¡

Maintenance kit(two fans & one power supply unit)

¡

Wall mount bracket (2x) l l l l

L-shape rackmount bracket (2x) ¡ ¡ l l l l l l l l

Rail kit ¡ ¡ l l l l

¡ optional l included

Built-in Wi-Fi OptionThe Barracuda NextGen Firewall appliances F80, F180, and F280 offer built-in Wi-Fi.

ITEM SPECIFICATION ITEM SPECIFICATION

Standards 802.11b/g/n Wireless security 64/128-bits WEP

Operating Frequency 802.11b/g/n ISM Band: 2.412 ~ 2.4835 GHz WPA

Modulation 802.11b: DSSS (DBPSK, DQPSK, CCK) WPA2

802.11g: OFDM (BPSK, QPSK, 16-QAM, 64-QAM)


802.11n: OFDM (BPSK, QPSK, 16-QAM, 64-QAM)

Output Power 802.11b: 17dBm ± 2dBm

802.11g: 16dBm ± 2dBm

802.11gn HT20: 15dBm ± 2dBm@MCS7

802.11gn HT40: 14dBm ± 2dBm@MCS7

Receive Sensitivity 802.11b: ≤ -85dBm@11Mbps

802.11g: ≤ -76dBm@54Mbps

802.11gn HT20: ≤ -75dBm@MCS7

802.11gn HT40: ≤ -72dBm@MCS7

Spare Power Supply UnitThe spare power supply unit is available for F400.F20, F600.C20, F600.F20, and F600.E20 sub-models with standard dual power supply.

Maintenance KitThe maintenance kit for model F1000 consists of two fans and one power supply unit.

32 Additional Hardware Options | Barracuda NextGen Firewall F

Barracuda Wall Mount BracketThe Barracuda wall mount bracket allows mounting Barracuda NextGen Firewalls F18, F80, F180, and F280 on a wall or similar.

Barracuda L-shape Rack Mount bracket The L-Shape rack mount brackets are used for mounting F-Series desktop models in 1U Standard 19” rack slots. For Barracuda NextGen Firewall F18 and F80 the brackets are an optional item and, thus, to be ordered separately. For models F180 and F280 the L-shape brackets are included in packaging.The L-shape rack mount bracket enables Barracuda NextGen Firewalls F180 and F280 to be mounted in a 1U Standard 19” Rack slot.

Available F400 Sub-modelsThe F400 standard model is always shipped with a total of 8 RJ45 network ports and single power supply.Other F400 model types provide different port and power supply combinations. Please see list below.

F400 MODEL TYPE ORDER NO. EMEA /INTERNATIONAL

ORDER NO.NORTH AMERICA

Barracuda NextGen Firewall F400 standard model(8 RJ45 network ports and single power supply)

BNGIF400a BNGF400aFront

Rear

Barracuda NextGen Firewall F400 model F20(8 RJ45 network ports, 4x1 GbE fibre ports, and dual power supply)

BNGIF400a.F20 BNGF400a.F20Front

Rear

Note: Network ports are built-in and not replaceable in the field. Spare parts for redundant power supply can be ordered separately.


Available F600 Sub-modelsThe F600 standard model C10 is always shipped with a total of 12 RJ45 network ports and single power supply.Other F600 model types provide different port and power supply combinations. Please see list below.



Barracuda NextGen Firewall F600 model C10(12 RJ45 network ports and single power supply)

BNGIF600a.C10 BNGF600a.C10Front

Rear

Barracuda NextGen Firewall F600 model C20(12 RJ45 network ports and dual power supply)

BNGIF600a.C20 BNGF600a.C20Front

Rear

Barracuda NextGen Firewall F600 model F10(8 RJ45 + 4 SFP 1 GbE network ports and single power supply)


Rear

Barracuda NextGen Firewall F600 model F20(8 RJ45 + 4 SFP 1 GbE network ports and dual power supply)


Rear

Barracuda NextGen Firewall F600 model E20(8 RJ45 + 2 SFP+ 10 GbE network ports and dual power supply)

BNGIF600a.E20 BNGF600a.E20Front

Rear



Available F800 Sub-modelsThe F800 standard model CCC is always shipped with a total of 20x1 GbE network ports and dual power supply.Other F800 model types provide different port combinations. Please see list below.



Barracuda NextGen Firewall F800 model CCC(20x1 GbE network ports and dual power supply)

BNGIF800a.CCC BNGF800a.CCCFront

RearAlarm o�

Barracuda NextGen Firewall F800 model CCF(12x1 GbE copper + 4x1 GbE SFP (fibre) network ports and dual power supply)

BNGIF800a.CCF BNGF800a.CCFFront

RearAlarm o�

Barracuda NextGen Firewall F800 model CCE(12x1 GbE + 4x10 GbE SFP+ (fibre) network ports and dual power supply)

BNGIF800a.CCE BNGF800a.CCEFront

RearAlarm o�



Available F900 Sub-modelsThe F900 standard model CCC is always shipped with a total of 24x1 GbE network ports and dual power supply.Other F900 model types provide different port combinations. Please see list below.



Barracuda NextGen Firewall F900 model CCC(24x1 GbE copper network ports)

BNGIF900a.CCC BNGF900a.CCCFront

Rear

Barracuda NextGen Firewall F900 model CCE(16x1 GbE copper + 4x1 GbE SFP (fibre) network ports)

BNGIF900a.CCE BNGF900a.CCEFront

Rear

Barracuda NextGen Firewall F900 model CFE(8x1 GbE + 8x1 GbE SFP (fibre) + 4x10 GbE SFP+ (fibre) network ports)

BNGIF900a.CFE BNGF900a.CFEFront

Rear



Available F1000 Sub-modelsThe F1000 standard model CE0 is always shipped with a total of 16 RJ45 network ports and dual power supply. Fans and power supply blocks are hot swappable.Other F1000 model types provide different port combinations. Please see list below.



Barracuda NextGen Firewall F1000 model CE0(24x1 GbE copper network ports)

BNGIF1000a.CE0 BNGF1000a.CE0Front Barracuda NG Firewall F1000

MGMT

IPMI

CONSOLE

USB USB

Rear

Barracuda NextGen Firewall F1000 model CE2(32x1 GbE copper + 8x1 GbE SFP+ (fibre) network ports)

BNGIF1000a.CE2 BNGF1000a.CE2Front Barracuda NG Firewall F1000

MGMT

IPMI

CONSOLE

USB USB

Rear

Barracuda NextGen Firewall F1000 model CFE(16x1 GbE + 16x1 GbE SFP (fibre) + 8x10 GbE SFP+ (fibre) network ports)

BNGIF1000a.CFE BNGF1000a.CFEFront

MGMT

IPMI

CONSOLE

USB USB

Rear


Barracuda NextGen Firewall F | Features & Capabilities 37

Features & Capabilities Barracuda NextGen Firewall F

MODEL F10

F18

F80

F180

F280

F380

F400

F600

F800

F900

F100

0

VIRTUAL APPLIANCES

FIREWALL

Stateful packet forwarding (per rule) l l l l l l l l l l l l

Transparent proxy (TCP; per rule) l l l l l l l l l l l l

Inline graphical packet analyser l l l l l l l l l l l l

NAT (src, dst, nets), PAT l l l l l l l l l l l l

Policy-based NAT (per rule) l l l l l l l l l l l l

Protocol support (IPv4, IPv6 1) l l l l l l l l l l l l

Gigabit performance - l l l l l l l l l l l

Object oriented rule set l l l l l l l l l l l l

Virtual rule sets l l l l l l l l l l l l

Virtual rule test environment l l l l l l l l l l l l

Realtime connection status l l l l l l l l l l l l

Historical access caches l l l l l l l l l l l l

Event triggered notification l l l l l l l l l l l l

Load balancing for protected servers l l l l l l l l l l l l

Multipath load balancing l l l l l l l l l l l l

Firewall-to-firewall compression (stream & packet compression) l l l l l l l l l l l l

Dynamic rules with timer triggered deactivation ( per rule) l l l l l l l l l l l l

Bridging mode / routing mode (mixed) l l l l l l l l l l l l

Virtual IP (proxyARP) support l l l l l l l l l l l l

Transparent IP to user mapping l l l l l l l l l l l l

User authentication (x.509, Microsoft® NTLM, RADIUS, RSA SecurID, LDAP/LDAPS, Microsoft® Active Directory®, TACACS+, local)

l l l l l l l l l l l l

RPC protocol support (ONC-RPC, DCE-RPC) l l l l l l l l l l l l

VoIP support (H.323, SIP, SCCP (skinny)) l l l l l l l l l l l l

DHCP relaying with packet loop protection and configurable agent-ID policy


Standby mode Active-Active (with external load balancer only) and Active-Passive

Network notification on failover l l l l l l l l l l l l

Key-based authentication l l l l l l l l l l l l

Encrypted HA communication l l l l l l l l l l l l

Provider/link failover l l l l l l l l l l l l

Transparent failover without session loss l l l l l l l l l l l l

APPLICATION CONTROLDeep Packet Inspection l l l l l l l l l l l l

Application Behavior Analysis l l l l l l l l l l l l

More than 1,400 applications and protocols supported (Skype, BitTorrent, etc.)


Social Media Application Support (Facebook, Google+, etc.) l l l l l l l l l l l l

Media Streaming Application Support (YouTube, Netflix, etc.) l l l l l l l l l l l l

Proxy and Anonymizer Detection (Hide Me, Cyberghost, etc.) l l l l l l l l l l l l

Application Objects based on Category, Risk, Properties and Popularity


1 IPv6 firewall forwarding traffic, IPS, and Application Control.

38 Features & Capabilities | Barracuda NextGen Firewall F

MODEL F10

F18

F80

F180

F280

F380

F400

F600

F800

F900

F100

0

VIRTUAL APPLIANCES

APPLICATION CONTROL (CONTINUED)Predefined Categories such as Business, Conferencing, Instant Messaging, Media Streaming, etc.


Inspection of SSL encrypted traffic - l l l l l l l l l l l

Filtering of SSL encrypted traffic l l l l l l l l l l l l

Creation of Customized Applications l l l l l l l l l l l l

Deep Application Context - l l l l l l l l l l l

Google SafeSearch enforcement l l l l l l l l l l l l

YouTube for Schools support l l l l l l l l l l l l

Application Based Link Selection l l l l l l l l l l l l

Bandwidth and QoS Assignment l l l l l l l l l l l l

Application Logging l l l l l l l l l l l l

Application Blocking l l l l l l l l l l l l

Application Monitor and Drill-Down Function l l l l l l l l l l l l

Reporting l l l l l l l l l l l l

INTRUSION PREVENTION SYSTEM

Inline Intrusion Prevention l l l l l l l l l l l l

Generic pattern filter l l l l l l l l l l l l

Active ARP handling l l l l l l l l l l l l

SYN / DoS / DDoS attack protection l l l l l l l l l l l l

Reverse routing path check l l l l l l l l l l l l

ICMP flood ping protection l, by size and rate limit

Malformed packet check l l l l l l l l l l l l

TCP split handshake protection l l l l l l l l l l l l

TCP stream segmentation check l l l l l l l l l l l l

URL obfuscation check l l l l l l l l l l l l

FTP evasion check l l l l l l l l l l l l

RPC defragmentation check l l l l l l l l l l l l

HTML decoding - l l l l l l l l l l l

HTML decompression - l l l l l l l l l l l

SMB & NetBios Evasion Protection l l l l l l l l l l l l

Regular online pattern updates l l l l l l l l l l l l

IPS exception (whitelisting) l l l l l l l l l l l l

IPS exceptions based on

Source / Destination l l l l l l l l l l l l

Port & Port Range l l l l l l l l l l l l

Signature / CVE l l l l l l l l l l l l

MALWARE PROTECTION

Single-Pass Mode - l l l l l l l l l l l

Proxy Mode - l l l l l l l l l l l

Configurable archive recursion depth - l l l l l l l l l l l

Quarantine functionality for proxy - l l l l l l l l l l l

Configurable unknown archive policy - l l l l l l l l l l l

Configurable maximum archive size - l l l l l l l l l l l

Archiver package support - l l l l l l l l l l l

Office file-types support - l l l l l l l l l l l

Proactive detection of new threats - l l l l l l l l l l l

Advanced heuristics detection techniques - l l l l l l l l l l l


MODEL F10

F18

F80

F180

F280

F380

F400

F600

F800

F900

F100

0

VIRTUAL APPLIANCES

MALWARE PROTECTION (CONTINUED)Number of signatures - Hundreds of thousands

Frequency of signature updates - Multiple updates per day

Dynamic, on-demand analysis of malware programs (sandbox) - l l l l l l l l l l l

ADVANCED THREAT DETECTION

Supported file typesMicrosoft Office files - l l l l l l l l l l l

Microsoft executables (exe, msi, dll) - l l l l l l l l l l l

Adobe PDF documents - l l l l l l l l l l l

Android APK files - l l l l l l l l l l l

ZIP archives - l l l l l l l l l l l

RAR archives - l l l l l l l l l l l

Supported protocolsHTTP - l l l l l l l l l l l

HTTPS - l l l l l l l l l l l

FTP - l l l l l l l l l l l

SMTP - l l l l l l l l l l l

SMTPS - l l l l l l l l l l l

Dynamic analysis of documents with embedded exploits (PDF, Office, etc.)

- l l l l l l l l l l l

Detailed forensics for both, malware binaries and web threats (exploits)


High resolution malware analysis (monitoring, execution from the inside)


Support for multiple operating systems (Windows, Android, etc.) - l l l l l l l l l l l

Flexible malware analysis in the cloud - l l l l l l l l l l l

BARRACUDA WEB FILTER

Black lists/White lists (per rule) - l l l l l l l l l l l

Filter categories - 95

Temporal constraints - l l l l l l l l l l l

User specific / group specific restrictions - l l l l l l l l l l l

Cached online category database - l l l l l l l l l l l

Local update interval - N/A

Online update interval - continuously

Customizable block pages - l l l l l l l l l l l

ROUTING, NETWORKING

HA capable with transparent session failover l l l l l l l l l l l l

GbE ethernet support l l l l l l l l l l l l

Max number of physical interfaces 4 4 4 6 6 8 12 12 20 24 40 n/a

Integrated switch - - - 8-port 8-port - - - - - - n/a

802.1q VLAN support l l l l l l l l l l l l

xDSL support (PPPoE, PPTP (multi-link)) l l l l l l l l l l l l

DHCP client support l l l l l l l l l l l l

ISDN support (EuroISDN (syncppp, rawip)) - l l l l - - - - - - -

Link monitoring (DHCP, xDSL, ISDN) l l l l l l l l l l l l

Policy routing support l l l l l l l l l l l l

Ethernet channel bonding l l l l l l l l l l l l

Multiple networks on interface, IP aliases l l l l l l l l l l l l

Multiple provider / WAN link support l l l l l l l l l l l l


MODEL F10

F18

F80

F180

F280

F380

F400

F600

F800

F900

F100

0

VIRTUAL APPLIANCES

ROUTING, NETWORKING (CONTINUED)

Configurable MTU size (per route) l l l l l l l l l l l l

Jumbo Frames (up to 9,000 bytes) l l l l l l l l l l l l

IPinIP and GRE tunnels l l l l l l l l l l l l

PPTP l l l l l l l l l l l l

BGP l l l l l l l l l l l l

Dynamic VPN routing l l l l l l l l l l l l

Dynamic routing (BGP, OSPF, RIP) l l l l l l l l l l l l

TRAFFIC MANAGEMENT

Maximum overall bandwidth per interface l l l l l l l l l l l l

On-the-fly reprioritization via firewall status GUI l l l l l l l l l l l l

Ingress shaping per interface l l l l l l l l l l l l

CENTRAL USER AUTHENTICATION

Supported services

VPN, FW,

HTTP Proxy

VPN, FW, HTTP/FTP/SSH Proxy

Authentication methods MS NTLM, MS CHAP, RADIUS, RSA SecurID, LDAP/LDAPS, MS Active Directory, TACACS+, local

WiFi Access Point Authentication support l l l l l l l l l l l l

VPN

Encryption support (AES-128/256, 3DES/ DES, CAST, Blowfish, Null) l l l l l l l l l l l l

Private CA (up to 4,096 bit RSA) l l l l l l l l l l l l

External PKI support l l l l l l l l l l l l

x.509v3 policy extensions (Fully recognized) l l l l l l l l l l l l

Certificate revocation (OCSP, CRL) l l l l l l l l l l l l

Site-to-site VPN with traffic intelligence l l l l l l l l l l l l

Dynamic mesh VPN l l l l l l l l l l l l

WAN traffic compression via data deduplication - l l l l l l l l l l l

Star (hub and spoke) VPN network topology l l l l l l l l l l l l

Client VPN l l l l l l l l l l l l

Microsoft® domain logon (Pre-logon) l l l l l l l l l l l l

Strong user authentication l l l l l l l l l l l l

Replay protection l l l l l l l l l l l l

NAT traversal l l l l l l l l l l l l

HTTPS and SOCKS proxy compatible l l l l l l l l l l l l

Redundant VPN gateways l l l l l l l l l l l l

Native IPsec for third-party connectivity l l l l l l l l l l l l

PPTP/L2TP (IPsec; client VPN only) l l l l l l l l l l l l

Dynamic routing (OSPF, BGP) over VPN l l l l l l l l l l l l

SYSTEM MANAGEMENT

Central management l l l l l l l l l l l l

Local management l l l l l l l l l l l l

Comprehensive GUI-based configuration management l l l l l l l l l l l l

Command-line interface (CLI) available l l l l l l l l l l l l

SSH-based access l l l l l l l l l l l l

Multiple administrators l l l l l l l l l l l l

Role-based administrators l l l l l l l l l l l l

Real-time accounting and visualization - l l l l l l l l l l l


MODEL F10

F18

F80

F180

F280

F380

F400

F600

F800

F900

F100

0

VIRTUAL APPLIANCES

SYSTEM MANAGEMENT (CONTINUED)

Easy roll-out and recovery l l l l l l l l l l l l

USB installation and recovery l l l l l l l l l l l l

Full life-cycle management l l l l l l l l l l l l

In-band management l l l l l l l l l l l l

Dedicated management interface l l l l l l l l l l l l

Serial interfaces l l l l l l l l l l l l

Central management interface l l l l l l l l l l l l

All management via VPN tunnel l l l l l l l l l l l l

LOGGING/MONITORING/ACCOUNTING

System health, activity monitoring l l l l l l l l l l l l

Human readable log files l l l l l l l l l l l l

Statistics - - - l l l l l l l l l

Active event notification Email/SNMP trap

Real-time accounting and reporting - l l l l l l l l l l l

Syslog streaming (fully GUI configurable) l l l l l l l l l l l l

ADDITIONAL FUNCTIONS

SNMP queries l l l l l l l l l l l l

SMS control l l l l l l l l l l l l

NTP4 time server and clients l l l l l l l l l l l l

DNS

Multi-domain support l l l l l l l l l l l l

DNS operation types Master, slave, forwarder, cacher

DNS doctoring l l l l l l l l l l l l

SSH-GATEWAYTermination of SSHv2 terminal access sessions (not supported: remote execution/secure copy/secure FTP)


Central user authentication MSNT, MSAD, LDAP, RADIUS, RSA-ACE, TACACS+

User specific / group specific restrictions - l l l l l l l l l l l

Public key authentication on target system - l l l l l l l l l l l

Session / activity tracing - l l l l l l l l l l l

Customizable login greeting text - l l l l l l l l l l l

DHCP

DHCP server l l l l l l l l l l l l

DHCP relay l l l l l l l l l l l l

Lease DB visualization & management l l l l l l l l l l l l

Multi-homing, multi-netting l l l l l l l l l l l l

Class-based filtering l l l l l l l l l l l l

Dynamic DNS support l l l l l l l l l l l l

FTP GATEWAYRestrict active/passive data transfer - - - l l l l l l l l l

Restrict non-RFC FTP commands - - - l l l l l l l l l

Full integration with Malware Protection - - - l l l l l l l l l

Buffer overflow protection - - - l l l l l l l l l

Central user authentication - - - MSNT, MSAD, LDAP, RADIUS, RSA-ACE, TACACS+

Customizable login greeting text - - - l l l l l l l l l

User specific / group specific restrictions - - - l l l l l l l l l

Destination redirection / specific restrictions - - - l l l l l l l l l

Time restrictions - - - l l l l l l l l l


MODEL F10

F18

F80

F180

F280

F380

F400

F600

F800

F900

F100

0

VIRTUAL APPLIANCES

FTP GATEWAY (CONTINUED)Deny file up/download - - - l l l l l l l l l

Deny file/directory modifications - - - l l l l l l l l l

Deny specific file extensions - - - l l l l l l l l l

Activity visualization & reporting - - - l l l l l l l l l

Supported protocols - SMTP, POP3

Multi-domain support - - - l l l l l l l l l

Configurable relaying policy per domain - - - l l l l l l l l l

DSN generation - - - l l l l l l l l l

Spool-queue visualization & management - - - l l l l l l l l l

MAIL SECURITYSupported protocols - SMTP, SMTP with StartTLS, SMTPS

SSL Interception - l l l l l l l l l l l

DNS blacklist - l l l l l l l l l l l

Antivirus for email - optional

Advanced Threat Detection for email - optional

SPAM FILTERVisualization of mail activity backlog - - - l l l l l l l l l

Spool-queue synchronization for HA - - - l l l l l l l l l

Restrictable mail reception - - - l l l l l l l l l

Configurable maximum mail data size - - - l l l l l l l l l

Configurable maximum number of mail recipients - - - l l l l l l l l l

Support for external virus scanning - - - l l l l l l l l l

Activity visualization & reporting - - - l l l l l l l l l

Mail delivery - - - Explicit, MX

Accept policies - - - l l l l l l l l l

Recipient database - - - l l l l l l l l l

Configurable block criteria (host, subject, sender, recipient) - - - l l l l l l l l l

Attachment and/or header stripping - - - l l l l l l l l l

Subject rewriting - - - l l l l l l l l l

Cloning - - - l l l l l l l l l

Grey listing - - - l l l l l l l l l

Supports a scripting language for configuration - - - l l l l l l l l l

Subject modification on spam - - - l l l l l l l l l

White lists / black lists - - - l l l l l l l l l

Online tests - - - DCC, RBL

Auto learning / training - - - l l l l l l l l l

Customizable rules for spam rating - - - l l l l l l l l l

WEB PROxYSupports cache hierarchies (parenting, neighboring) - l l l l l l l l l l l

Cache hierarchies supporting protocols (ICP, HTCP, CARP, Cache Digest, WCCP)


Proxying and caching (HTTP, FTP, and others) - l l l l l l l l l l l

Proxying for SSL (no inspection) - l l l l l l l l l l l

Transparent caching - l l l l l l l l l l l

HTTP server acceleration - l l l l l l l l l l l

Caching of DNS lookups - l l l l l l l l l l l

Central user authentication (Native NTLM, RADIUS, RSA ACE, LDAP, MS Active Directory, TACACS+)


Support for external virus scanning (ICAP) - l l l l l l l l l l l


Barracuda VPN & Network Access ClientsBASIC REMOTE ACCESS SUBSCRIPTION

SOFTWARE FEATURESBARRACUDA VPN CLIENT

BARRACUDA NETWORK ACCESS CLIENT

BARRACUDA SSL VPN TRANSPARENT CLIENT

ARCHITECTURE

Integrated VPN client l l l

Integrated health agent - l l

Managed personal firewall - l l

Full NAC policy support - l l

Customizable user interface l l -

Low power consumption network stack l l -

SUPPORTED OS VARIANTS

Microsoft Windows XP (32-bit only) l l l

Microsoft Windows Vista (32-bit, 64-bit) l l l

Microsoft Windows 7 (32-bit, 64-bit) l l l



Linux (kernel 2.4, kernel 2.6) l - -

Mac OS X (10.5, 10.6, 10.7, 10.8, 10.9, 10.10, 10.11) l - -

MANAGEMENT

Central management of VPN configuration l l l

VPN diagnostic log l l l

VPN system diagnostics report l l l

VPN status monitoring l l l

Attack access cache l l l

Packet log (capture) l l l

VPN groups l l l

Silent client setup l l l

Password protection of settings 1, 4 l l l

AUTHENTICATION SUPPORTMicrosoft® Certificate Management (Crypto API) l 1 l l

Microsoft® Active Directory 2 l 1 l l

LDAP 2 l l l

RADIUS2 l l l

MSNT 2 l 1 l l

RSAACE 2 l l l

External X509 certificates l l l

SMS PASSCODE 2 l l l

RSA tokens 2 l l l

Smart cards 3 l 1 l l

Microsoft domain logon support (prelogon) l 1 l -

PERSONAL FIREWALL CAPABILITIESDynamic adapter object handling l l l

Dynamic user object handling l l -

RPC handling l l l

Multiple rule sets support l l -

Client side policy enforcement l l l

Application control l l -

Adapter control l l l

User context enforcement l l l

1 Only for Microsoft operating systems2 Queried by Barracuda NextGen Firewall F VPN server on behalf of client

3 For manufacturer with Microsoft Crypto Service Provider.4 Also prevents changes to client settings by users with administrator rights.


BASIC REMOTE ACCESS SUBSCRIPTION

SOFTWARE FEATURESBARRACUDA VPN CLIENT

BARRACUDA NETWORK ACCESS CLIENT

BARRACUDA SSL VPN TRANSPARENT CLIENT

PERSONAL FIREWALL CAPABILITIES (CONTINUED)

NetBIOS protection l l l

DoS attack protection l l l

Executable scripts l l l

POLICY MATCHING CAPABILITIES

ID-based policies l l l

Support for ID-based exemptions (health condition, software update)

- l l

Date and time conditions l l l

Access type (internal and external category support) - l l

Separate machine policies - l -

Separate quarantine policies - l l

Personal firewall active - l l

POLICY ASSIGNMENTS

Personal firewall rule set - l l

Registry entries - l -

Welcome message, welcome picture - l l

Corporate-ID support - l l

ID-based exemption from enforced client updates - l l

Gateway network access roles - l l

VPN PROPERTIES

Raw ESP l l l

UDP encapsulation l l l

TCP encapsulation l l l

Hybrid encapsulation l l l

DHCP-based parameter assignment 5 l l l

Cryptography l l l

AES-128/AES-256 l l l

3DES and DES l l l

CAST and BLOWFISH l l l

Authentication only (null encryption) l l l

SHA-1 and MD5 hashing l l l

VPN CONNECTION INTELLIGENCE

Redundant gateway support l l l

NAT traversal l l l

HTTPS proxy compatible l l l

SSL handshake simulation l l l

SOCKS4/5 proxy compatible l l l

Pathfinder best gateway finder l l -

WLAN roaming support l l -

Always connect technology l l -

Fast reconnect technology l l -

SECURITY FEATURES

Full server side control l l l

Split DNS l l l

Split tunnel mode l l l

Exclusive Network Access ENA l 7 l l

5 Involves routes, WINS & DNS adresses, IP address & network mask, domain & firewall rule set.6 ENA function is only available if the full Barracuda Network Access Client is chosen during the installation procedure.


CudaLaunch KEY FEATURES iOS AndroidAccess to NextGen Firewall Web Forwards (reverse proxied internal apps) l l

IP VPN connections (connect device to network) Standard IPsec TINA VPN

Built-in demo setup l l

Central administration via Barracuda NextGen Firewall F and NextGen Admin l l

Automatic self-configuration and management of VPN connections l l

Integration with Barracuda NextGen Firewall User Authentication l l

Client certificate authentication l l

Single Sign-On to internal apps l l

Launchpad favorites (apps or VPN connections) l l

User attributes (ability for end users to edit) l l

Dynamic firewall rule control (for system administrators) l l

Custom help or info text for your organization l l

Manually edit and create IP VPN connections l l

Debug log for easy support l l


Barracuda NextGen Control Center

SOFTWARE FEATURESSTANDARD

EDITION(C400 / VC400)

ENTERPRISE EDITION

(C610 / VC610)

GLOBAL EDITION(VC820)

PUBLIC CLOUD EDITION

AZURE AWS

CONFIGURATION MANAGEMENT

Tenants 1 1 5 2 2

Configuration groups 1 1 No limit No limit No limit No limit

Maximum managed gateways [recommended]

No limit [20]

No limit [200]

No limit [1000+ depending

on HW]

No limit [200]

No limit [200]

Configuration templates (repositories) l l l l l

Shared configuration data l l l l l

Operating system parameters l l l l l

Networking/routing parameters l l l l l

FW/VPN policies, application gateway parameters

l l l l l

Flat file data storage l l l l l

Database characteristics (transaction orientation, locking, etc.)

l l l l l

Backup and restore functionality l l l l l

Gateway configuration archive for speed install

l l l l l

Configuration update monitoring l l l l l

Full RCS versioning l l l l l

VPN graphical tunnel interface l l l l l

Dynamic mesh site-to-site VPN support l l l l l

Barracuda Network Access Client policy management

l l l l l

Multi-release management - l l l l

Multi-platform management l l l l l

STATUS MONITORING

Gateway health state l l l l l

Launch pad functionality l l l l l

Customizable layout l l l l l

Barracuda Earth support - l l l l

TRUST CENTER

Gateway x.509 certificate CA - l l l l

Gateway SSH key management - l l l l

VPN server for management tunnels to gateways

- l l l l

Virtual IP addresses for gateways (ProxyARP) - l l l l

Dynamic gateway IP address support - l l l l

LICENSE CENTER

License timestamp server l l l l l

License status display l l l l l

Central event message list l l l l l

Event forwarding (SNMP, mail) l l l l l

Event log l l l l l

BARRACUDA ACTIVATION

Central activation of managed units l l l l l

Central license retrieval for managed units l l l l l

Central license extension for managed units l l l l l

1 Note that “Configuration Groups“ (named “cluster“ in the firmware) refers to an administratively bundled group of Barracuda NextGen Firewall appliances and not to a load sharing cluster.


SOFTWARE FEATURESSTANDARD

EDITION(C400 / VC400)

ENTERPRISE EDITION

(C610 / VC610)

GLOBAL EDITION(VC820)

PUBLIC CLOUD EDITION

AZURE AWS

BARRACUDA ACTIVATION (CONTINUED)Offline (unit) activation for managed units l l l l l

Offline (unit) license retrieval for managed units

l l l l l

Offline (unit) license extension for managed units

l l l l l

Activation properties per cluster - l l l l

Activation properties per range - - l - -

Full automatic activation l l l l l

Manual activation l l l l l

Activation of Vx units with license token l l l l l

Activation of HA unit l l l l l

CENTRAL SESSION TRACKINGSession display l l l l l

Session termination l l l l l

CENTRAL SOFTWARE UPDATEReal-time version display l l l l l

Kernel and OS updates l l l l l

Barracuda NextGen Firewall F updates l l l l l

Update log viewer l l l l l

SECURE REMOTE ExEC. ENVIRONMENT (SSHV2)Job scheduling l l l l l

Script management l l l l l

Execution log viewer l l l l l

ADMINISTRATION MODEL

Fully GUI-based access(NextGen Admin management tool)

l l l l l

Strong authentication & AES encryption l l l l l

Role-based administration l l l l l

Configurable roles l l l l l

Adjustable view on configuration tree l l l l l

Configurable administrative domains - l l l l

Multiple domains per administrator - l l l l

Configurable access on OS level l l l l l

Configurable access notification l l l l l

REPORTING AND ACCOUNTINGHistorical reports on gateway activity l l l l l

Customer-based gateway activity reports l l l l l

Policy distribution l l l l l

Control Center resource utilization l l l l l

Gateway-resource utilization l l l l l

Central log host l l l l l

Streaming/relaying to external log host l l l l l

ADDITIONAL FUNCTIONSNTP4 time server for gateways l l l l l

Integrated DNS server l l l l l

High availability Optional Optional HA license included - -

SIEM syslog interface l l l l l

Public Key Infrastructure - l l l l

Revision Control System l l l l l

Access Monitor l l l - -

48 Subscriptions | Barracuda NextGen Firewall F

SubscriptionsAvailability MatrixBarracuda NextGen Firewall F10 F18 F80 F180 F280 F380 F400 F600 F800 F900 F1000 Vx

Public CloudBYOL PAYG

Energize Updates Mandatory

Warranty Extension Optional

Instant Replacement Optional

Premium Support depends on product mix and size of deployment Optional



Advanced Threat Detection Optional

Basic Remote Access Optional l l

Premium Remote Access Optional l

High Availability (“HA”): All subscriptions have to be licensed separately for the HA partner. For further information, please contact your local partner or Barracuda sales at [email protected].

Energize UpdatesBarracuda Energize Updates help you secure your investment in the ever-changing IT world. Benefit from security updates to patch or repair any security vulnerabilities, keep your Barracuda Networks product up-to-date and fully functional at all times, and get access to our award-winning support.

Note: Energize Updates are available for all Barracuda NextGen Firewall hardware and virtual models. Available as 1, 3, and 5 year subscriptions. Purchasing at least 1 year of Energize Updates is required with every Barracuda NextGen Firewall.

Energize Updates includes:• Basic support, i.e., email support 24/7, and phone support

Monday through Friday from 9:00 am to 5:00 pm

• Firmware maintenance, which includes new firmware updates with feature enhancements and bug fixes

• Barracuda Early Release Firmware program (optional)

• Unlimited number of client-to-site VPN connections

• Security updates to patch or repair any security vulnerabilities

• URL filter based on Barracuda Web Filter online URL categorization in single-pass (i.e., used directly in the firewall engine) as well as in proxy mode

• Regular updates for Application Control database

• IPS signature and pattern updates.

Barracuda NextGen Firewall F | Subscriptions 49

Warranty ExtensionProvides an extended warranty, and ships a replacement unit on the next business day (best effort) with standard mail upon notification of a failed unit.

Note: Available for all Barracuda NextGen Firewall F-Series hardware models. Warranty Extension must be purchased within 60 days of hardware purchase and is a continuous subscription from date of activation. Available as 1 and 3 year subscriptions with a maximum coverage of 5 years.

Instant ReplacementOne hundred percent uptime is important in corporate environments, but sometimes equipment can fail. In the rare case that a Barracuda Networks product fails, Barracuda ships a replacement unit on the same or next business day. And by means of the Hardware Refresh Program, we ensure that customers benefit from the latest hardware improvements and firmware capabilities:• Enhanced support providing phone and email support 24/7

• Hard disk replacement on models that have swappable RAID drives

• Free hardware refresh after four years of continuous IR coverage.

Note: Available for all Barracuda NextGen Firewall hardware models. Instant Replacement must be purchased within 60 days of hardware purchase and is a continuous subscription from date of activation. Available as 1, 3, and 5 year subscriptions.

Comparison “Warranty Extension - Instant Replacement”

Warranty Extension Instant Replacement

Replacement Next business day (best effort) Same day or next business day

Shipment Standard Express

Hard disk replacement (swappable RAID) Standard shipping

Support Basic Support (with EU) Enhanced Support

Available subscriptions 1, 3 years 1, 3, 5 years

Free hardware refresh after 4 years l

Premium SupportPremium Support ensures that an organisation’s network is running at its peak performance by providing the highest level of 24/7 technical support for mission-critical environments. A dedicated Premium Support Account Manager and a team of technical engineers provide fast solutions to high-priority support issues, thereby ensuring that Barracuda Networks equipment maintains continuous uptime.

• Dedicated phone and email support 24/7

• Priority response time to resolve mission-critical issues

• Priority Level Agreement (PLAs) to guarantee that issues are handled, resolved, and closed quickly

• Dedicated Support Account Manager who is familiar with the customer’s environment

• Proactive ticket monitoring and reporting to provide comprehensive information and controlK

ey B

enefi

ts

Note: Available for all Barracuda NextGen Firewall F-Series hardware and virtual models. Premium Support for Barracuda NextGen Firewall F-Series hardware appliances can only be purchased in combination with Instant Replacement. Premium Support may be purchased on Barracuda NextGen Firewall F virtual appliances without Instant Replacement. Available as 1, 3, and 5 year subscriptions. For more information on Premium Support please visit www.barracuda.com/support.

50 Subscriptions | Barracuda NextGen Firewall F

Web SecurityThe Web Security subscription bundles Malware Protection and NextGen Web Filter, offering complete web security. Available as 1, 3, and 5 years subscriptions.

Malware ProtectionThe Malware Protection subscription provides gateway-based protection against malware, viruses, spyware, and other unwanted programs inside SMTP/S, HTTP/S, and FTP traffic. Using Malware Protection in proxy mode adds POP3 traffic.

• Configurable archive recursion depth

• Quarantine functionality for proxy

• Configurable unknown archive policy

• Configurable maximum archive size

• Archiver package support

• Office file-types support

• Proactive detection of new threats

• Advanced heuristics detection techniques

• Hundreds of thousands signatures

Key

Ben

efits

Compatibility and Licensing: Available for Barracuda Barracuda NextGen Firewall models F18 and higher, as well as all Barracuda Barracuda NextGen Firewall F virtual appliances. Unlimited user license if purchased with a Barracuda NextGen Firewall F hardware appliance. If purchased for a virtual appliance the number of protected IPs (capacity) applies. Available as 1, 3, and 5 years subscriptions. In High Availability (HA) environments each unit needs to be licensed separately.

NextGen Web FilterThe NextGen Web Filter is a legacy subscription that enables the use of the Proventia Web Filter database with the on-box locally hosted categorization engine. This is only available in proxy mode and not in single-pass mode (i.e., not in firewall/streaming mode).

• Customizable blacklists and whitelists

• 95 content categories

• Multiple category selection

• Temporal constraints

• User specific / group specific restrictions

• Online categorization lookup

• Persistent local cache

Key

Ben

efits

Compatibility and Licensing: Available for Barracuda NextGen Firewall models F18 and higher, as well as all Barracuda NextGen Firewall F-Series virtual appliances. Unlimited user license if purchased with a Barracuda NextGen Firewall F hardware appliance. If purchased for a virtual appliance the number of protected IPs (capacity) applies. Available as 1, 3, and 5 years subscriptions. In High Availability (HA) environments each unit needs to be licensed separately.

Barracuda NextGen Firewall F | Subscriptions 51

Basic Remote AccessEnables the SSL VPN service and NAC support. For Barracuda NextGen Firewall F deployments in Public Cloud offerings like Amazon Web Services and/or Azure with Pay-As-You-Go licencing, this subscription is included in the Energize Update subscription.

Included SSL-VPN Features• Browser-based access via desktop and mobile portals.

• SSL-VPN-based server-side NAC

• VPN Templates for SSL VPN

Included Network Access Client Features• Windows Personal FW

• Windows Health Check (NAC) via Access Control Service

User Session Limits• Unlimited concurrent SSL VPN user sessions

• One concurrent Client-to-Site VPN session by the same user

Premium Remote AccessAdds CudaLaunch support and includes the Basic Remote Access Subscription. For Barracuda NextGen Firewall F deployments in Public Cloud offerings like Amazon Web Services and/or Azure with Pay-As-You-Go licencing, this subscription is included.

CudaLaunch• iOS

• Android

User Session Limits• Unlimited concurrent SSL VPN user sessions

• Unlimited concurrent CudaLaunch sessions

• Multiple concurrent Client-to-Site VPN sessions by the same user

Advanced Threat DetectionPrevent malicious files—even unknown ones—from entering the organization. Avoid network breaches, identify zero-day malware exploits, targeted attacks, advanced persistent threats and other advanced malware that routinely bypass traditional signature based IPS and antivirus engines before they do harm to your network.

Environment and Number of Files Inspected Per Month

Hardware Appliances

# of filesinspected

Virtual Appliances

# of filesinspected

F18 108.000 VF25 43.200

F80 108.000 VF50 108.000

F180 108.000 VF100 216.000

F280 216.000 VF250 324.000

F380 260.000 VF500 432.000

F400 324.000 VF1000 540.000

F600 540.000 VF2000 648.000

F800 750.000 VF4000 750.000

F900 1.000.000 VF8000 1.000.000

F1000 on request

Amazon Web Services

# of filesinspected

Microsoft Azure

# of filesinspected

Level 2 108.000 Level 2 108.000

Level 4 216.000 Level 4 216.000

Level 6 324.000 Level 6 324.000

Level 8 750.000 Level 8 750.000

• Prevent malicious files—even unknown ones—from entering the organization and avoid network breaches.

• Identify zero-day malware exploits, targeted attacks, advanced persistent threats and other advanced malware which routinely bypass traditional signature based IPS and antivirus engines.

• Granular Control over PDFs, EXEs/MSIs/DLLs, Android APKs, Microsoft Office files, and compressed files and archives

• Full interoperability with the integrated SSL Inspection files can be extracted and checked in order to detect advanced malware in the encrypted stream.

• Cloud based emulation – resource intensive file emulation is offloaded to the Barracuda Cloud.

• Learning local cryptographic hash database for emulation optimization

• Multiple and simultaneous OS environments for emulated files

• Automatic email notifications in case malware activity has been identified can help minimizing the time for reaction of the administrator in order to mitigate the network breach.

• Available for hardware and virtual appliances as well as for Microsoft Azure and Amazon AWS Cloud on BYOL licencing model.

Key

Ben

efits

Compatibility and Licensing: Available for Barracuda NextGen Firewall models F18 and higher, as well as all Barracuda NextGen Firewall F virtual appliances. Available as 1, 3, and 5 years subscriptions. Requires a valid Web Security or Malware Protection subscription. In case the monthly file capacity is reached, the system stops forwarding files to the ATD cloud for the rest of the current month.

52 Ordering Information | Barracuda NextGen Firewall F

Ordering InformationCalculation of co-terminus subscriptions: To allow customers to consolidate their maintenance and subscription offerings to a single end or renewal date, daily rates for all subscription types are offered. These daily rates should be used to extend expiring subscriptions to coincide with the dates of subscriptions expiring in the future. Barracuda Networks does credit early termination of subscriptions using these daily rates.

Barracuda NextGen Firewall F - Hardware AppliancesPRODUCT EMEA / INTERNATIONAL NORTH AMERICA

F10 Barracuda NextGen Firewall Model F10 BNGIF10a BNGF10a

Energize Updates (1Y, 3Y, 5Y) BNGIF10a-e1,3,5 BNGF10a-e1,3,5

Instant Replacement (1Y, 3Y, 5Y) BNGIF10a-h1,3,5 BNGF10a-h1,3,5

Warranty Extension (1Y, 3Y) BNGIF10a-we1,3 BNGF10a-we1,3

Premium Support (1Y, 3Y, 5Y) BNGIF10a-p1,3,5 BNGF10a-p1,3,5

Cold Spare F10 BNGIF10a-c BNGF10a-c






Advanced Threat Detection (1Y, 3Y, 5Y) BNGIF18a-a1,3,5 BNGF18a-a1,3,5

Web Security (1Y, 3Y, 5Y) BNGIF18a-w1,3,5 BNGF18a-w1,3,5

NextGen Web Filter (1Y, 3Y, 5Y) BNGIF18a-u1,3,5 BNGF18a-u1,3,5

Malware Protection (1Y, 3Y, 5Y) BNGIF18a-m1,3,5 BNGF18a-m1,3,5



Energize Updates (1Y, 3Y, 5Y) BNGIF80a-e1,3,5 BNGIF80a-e1,3,5

Instant Replacement (1Y, 3Y, 5Y) BNGIF80a-h1,3,5 BNGIF80a-h1,3,5

Warranty Extension (1Y, 3Y) BNGIF80a-we1,3 BNGIF80a-we1,3

Premium Support (1Y, 3Y, 5Y) BNGIF80a-p1,3,5 BNGIF80a-p1,3,5


Web Security (1Y, 3Y, 5Y) 1 BNGIF80a-w1,3,5 BNGIF80a-w1,3,5

NextGen Web Filter (1Y, 3Y, 5Y) BNGIF80a-u1,3,5 BNGIF80a-u1,3,5

Malware Protection (1Y, 3Y, 5Y) BNGIF80a-m1,3,5 BNGIF80a-m1,3,5

Cold Spare F80 BNGIF80a-c BNGIF80a-c

1 Bundles NextGen Web Filter and Malware Protection subscription

Barracuda NextGen Firewall F | Ordering Information 53

PRODUCT EMEA / INTERNATIONAL NORTH AMERICA

F180

Barracuda NextGen Firewall Model F180 BNGIF180a BNGF180a






Web Security (1Y, 3Y, 5Y) 1 BNGIF180a-w1,3,5 BNGF180a-w1,3,5



Basic Remote Access (1Y, 3Y, 5Y) BNGIF180a-vb1,3,5 BNGF180a-vb1,3,5

Premium Remote Access (1Y, 3Y, 5Y) BNGIF180a-vp1,3,5 BNGF180a-vp1,3,5


F280

Barracuda NextGen Firewall Model F280 BNGIF280a BNGF280a






Web Security (1Y, 3Y, 5Y) 1 BNGIF280a-w1,3,5 BNGF280a-w1,3,5



Basic Remote Access (1Y, 3Y, 5Y) BNGIF280a-vb1,3,5 BNGF280a-vb1,3,5

Premium Remote Access (1Y, 3Y, 5Y) BNGIF280a-vp1,3,5 BNGF280a-vp1,3,5


F380

Barracuda NextGen Firewall Model F380 BNGIF380a. BNGF380a.

Energize Updates (1Y, 3Y, 5Y) BNGIF380a.-e1,3,5 BNGF380a.-e1,3,5

Instant Replacement (1Y, 3Y, 5Y) BNGIF380a.-h1,3,5 BNGF380a.-h1,3,5

Extended Warranty (1Y, 3Y) BNGIF380a.-we1,3 BNGF380a.-we1,3

Premium Support (1Y, 3Y, 5Y) BNGIF380a.-p1,3,5 BNGF380a.-p1,3,5

Advanced Threat Detection (1Y, 3Y, 5Y) BNGIF380a.-a1,3,5 BNGF380a.-a1,3,5

Web Security (1Y, 3Y, 5Y) 1 BNGIF380a.-w1,3,5 BNGF380a.-w1,3,5

NextGen Web Filter (1Y, 3Y, 5Y) BNGIF380a.-u1,3,5 BNGF380a.-u1,3,5

Malware Protection (1Y, 3Y, 5Y) BNGIF380a.-m1,3,5 BNGF380a.-m1,3,5

Basic Remote Access (1Y, 3Y, 5Y) BNGIF380a.-vb1,3,5 BNGF380a.-vb1,3,5

Premium Remote Access (1Y, 3Y, 5Y) BNGIF380a.-vp1,3,5 BNGF380a.-vp1,3,5

Cold Spare F380 BNGIF380a.-c BNGF380a.-c




F400

Barracuda NextGen Firewall Model F400 BNGIF400a. 2 BNGF400a. 2











Spare Power Supply 2 BNGIRPS1a BNGIRPS1a


F600





Premium Support (1Y, 3Y, 5Y) BNGIF600a.<model>-p1,3,5 BNGF600a.-p1,3,5







Spare Power Supply 3 BNGIRPS1a BNGRPS1a


F800







Web Security (1Y, 3Y, 5Y) BNGIF800a.-w1,3,5 BNGF800a.-w1,3,5

NextGen Web Filter (1Y, 3Y, 5Y) 1 BNGIF800a.-u1,3,5 BNGF800a.-u1,3,5





1 Bundles NextGen Web Filter and Malware Protection subscription2 Available F400 models: standard and .F20 sub model3 Available sub-models with dual power supply: F400.F20, F600.C20, F600.F20, F600.E20

4 Available F600 models: C10, C20, F10, F20, E20; please see page 81 for details5 Available F800 models: standard and .CCC, .CCF, .CCE sub models; please see page 82 for details



F900













F100

0 Barracuda NextGen Firewall Model F1000 BNGIF1000a. 7 BNGF1000a. 7











Maintenance Kit 8 BPNGIKITF1000 BPNGKITF1000


Barracuda NextGen Firewall F - Hardware OptionsPRODUCT EMEA / INTERNATIONAL NORTH AMERICARail kit for F380-F600 BPNGIRAC-02 BPNGRAC-02

Rail kit for F1000 BPNGRAC-04 BPNGRAC-04

L-shape rack mount bracket (2x) for F18 and F80 BPIRAC-02 BPRAC-02

Spare power supply unit for F400 and F600 sub-models with dual power suplly

BNGIRPS1a BNGRPS1a

Maintenance Kit for F1000 (including two fans and one power supply unit)

BPNGIKITF1000 BPNGKITF1000

1 Bundles NextGen Web Filter and Malware Protection subscription6 Available F900 models: standard and .CCC, .CCE, and .CFE

sub models; please see page 83 for details

7 Available F1000 models: standard and .CE0, .CE2, and .CFE sub models, please see page 84 for details

8 Kit consists of two fans and one power supply


Barracuda NextGen Firewall F - Virtual AppliancesPRODUCT EMEA / INTERNATIONAL NORTH AMERICABarracuda NextGen Firewall VF25, VF50, VF100, VF250, VF500, VF1000, VF2000, VF4000, VF8000

BNGIVF25a,….BNGIVF8000a BNGVF25a,….BNGVF8000a

Energize Updates (1Y, 3Y, 5Y)BNGIVF<user>-e<subscription duration>, e.g. BNGIVF25a-e1

BNGVF<user>-e<subscription duration>, e.g. BNGVF25a-e1

Premium Support (1Y, 3Y, 5Y)BNGIVF<user>-p<subscription duration>, e.g. BNGIVF25a-p1

BNGVF<user>-p<subscription duration>, e.g. BNGVF25a-p1

Web Security (1Y, 3Y, 5Y) 1 BNGIVF<user>-w<subscription duration>, e.g. BNGIVF25a-w1

BNGVF<user>-w<subscription duration>, e.g. BNGVF25a-w1

NextGen Web Filter (1Y, 3Y, 5Y)BNGIVF<user>-u<subscription duration>, e.g. BNGIVF25a-u3

BNGVF<user>-u<subscription duration>, e.g. BNGVF25a-u3

Malware Protection (1Y, 3Y, 5Y)BNGIVF<user>-m<subscription duration>, e.g. BNGIVF25a-m1

BNGVF<user>-m<subscription duration>, e.g. BNGVF25a-m1

Basic Remote Access (1Y, 3Y, 5Y)BNGIVF<user>-s<subscription duration>, e.g. BNGIVF25a-vb1

BNGVF<user>-s<subscription duration>, e.g. BNGVF25a-vb1

Premium Remote Access (1Y, 3Y, 5Y)BNGIVF<user>-s<subscription duration>, e.g. BNGIVF25a-vp1

BNGVF<user>-s<subscription duration>, e.g. BNGVF25a-vp1

Barracuda NextGen Control Center - Hardware AppliancesPRODUCT EMEA / INTERNATIONAL NORTH AMERICA

C400

Barracuda NextGen Control Center C400 - Standard Edition BNCIC400a BNCC400a

Energize Updates (1Y, 3Y, 5Y) BNCIC400a-e1,3,5 BNCC400a-e1,3,5

Instant Replacement (1Y, 3Y, 5Y) BNCIC400a-h1,3,5 BNCC400a-h1,3,5

Extended Warranty (1Y, 3Y) BNCIC400a-we1,3 BNCC400a-we1,3

Premium Support (1Y, 3Y, 5Y) BNCIC400a-p1,3,5 BNCC400a-p1,3,5

Barracuda NextGen Control Center Cold Spare C400 BNCIC400a-c BNCC400a-c

C610

Barracuda NextGen Control Center C610 - Enterprise Edition BNCIC610a BNCC610a

Energize Updates (1Y, 3Y, 5Y) BNCIC610a-e1,3,5 BNCC610a-e1,3,5

Instant Replacement (1Y, 3Y, 5Y) BNCIC610a-h1,3,5 BNCC610a-h1,3,5

Extended Warranty (1Y, 3Y) BNCIC610a-we1,3 BNCC610a-we1,3

Premium Support (1Y, 3Y, 5Y) BNCIC610a-p1,3,5 BNCC610a-p1,3,5

Barracuda NextGen Control Center Cold Spare C610 BNCIC400a-c BNCC400a-c

Barracuda NextGen Control Center - Virtual AppliancesPRODUCT EMEA / INTERNATIONAL NORTH AMERICA

VC4

00

Barracuda NextGen Control Center VC400 - Standard Edition BNCIVC400a BNCVC400a

Energize Updates (1Y, 3Y, 5Y) BNCIVC400a-e1,3,5 BNCVC400a-e1,3,5

Premium Support (1Y, 3Y, 5Y) BNCIVC400a-p1,3,5 BNCVC400a-p1,3,5

VC6

10

Barracuda NextGen Control Center VC610 - Enterprise Edition BNCIVC610a BNCVC610a

Energize Updates (1Y, 3Y, 5Y) BNCIVC610a-e1,3,5 BNCVC610a-e1,3,5

Premium Support (1Y, 3Y, 5Y) BNCIVC610a-p1,3,5 BNCVC610a-p1,3,5

VC8

20

Barracuda NextGen Control Center VC820 - Global Edition BCCIVC820a BCCVC820a

Energize Updates (1Y, 3Y, 5Y) BCCIVC820a-e1,3,5 BCCVC820a-e1,3,5

Premium Support (1Y, 3Y, 5Y) BCCIVC820a-p1,3,5 BCCVC820a-p1,3,5

Additional Tenant (Range) for Barracuda NextGen Control Center VC820 (monthly)

BNCI-b1 BNC-b1



Barracuda NextGen Firewall F - Amazon Web Services (AWS)PRODUCT EMEA / INTERNATIONAL NORTH AMERICA

Acc

ount

Lv

l 2

Barracuda NextGen Firewall for Amazon Web Service Account Level 2 BNGICAW002a BNGCAW002a

Advanced Threat Detection (1Y, 3Y, 5Y) BNGICAW002a-a1,3,5 BNGCAW002a-a1,3,5

Malware Protection (1Y, 3Y, 5Y) BNGICAW002a-m1,3,5 BNGCAW002a-m1,3,5

Premium Remote Access (1Y, 3Y, 5Y) 1 BNGICAW002a-vp1,3,5 BNGCAW002a-vp1,3,5

Acc

ount

Lv

l 4





Acc

ount

Lv

l 6





Premium Support (1Y, 3Y, 5Y) BNGICAW006a-p1,3,5 BNGCAW006a-p1,3,5

Acc

ount

Lv

l 8





Premium Support (1Y, 3Y, 5Y) BNGICAW008a-p1,3,5 BNGCAW008a-p1,3,5

Barracuda NextGen Firewall F - Microsoft AzurePRODUCT EMEA / INTERNATIONAL NORTH AMERICA

Acc

ount

Lv

l 2

Barracuda NextGen Firewall for Microsoft Azure Account Level 2 BNGICAZ002a BNGCAZ002a

Advanced Threat Detection (1Y, 3Y, 5Y) BNGICAZ002a-a1,3,5 BNGCAZ002a-a1,3,5

Malware Protection (1Y, 3Y, 5Y) BNGICAZ002a-m1,3,5 BNGCAZ002a-m1,3,5

Premium Remote Access (1Y, 3Y, 5Y) 1 BNGICAZ002a-vp1,3,5 BNGCAZ002a-vp1,3,5

Acc

ount

Lv

l 4

Barracuda NextGen Firewall for Microsoft Azure Account Level 4 BNGICAZ004a BNGICAZ004a


Malware Protection (1Y, 3Y, 5Y) BNGICAZ004a-m1,3,5 BNGICAZ004a-m1,3,5


Acc

ount

Lv

l 6





Premium Support (1Y, 3Y, 5Y) BNGICAZ006a-p1,3,5 BNGCAZ006a-p1,3,5

Acc

ount

Lv

l 8





Premium Support (1Y, 3Y, 5Y) BNGICAZ008a-p1,3,5 BNGCAZ008a-p1,3,5

1 Basic Remote Access subscription in included in the Energize Update subscription.

58 Notes

Notes 59

© Barracuda Networks Inc. Specifications subject to change without notice, All other brands and names are the property of their respective owners. All logos, brand names, campaign statements, and product images contained herein are copyright and may not be

reprinted and/or reproduced, in whole or in art, without express written permission by Barracuda Networks Marketing.

© Barracuda Networks, Inc. Specifications subject to change without notice. All other brands and names are the property of their respective owners. All logos, brand names, campaign statements, and product images contained herein are copyright and may not be used and/or

reproduced, in whole or in part, without express written permission by Barracuda Networks Marketing.

Version 2.3Barracuda Networks, Inc.

barracuda.com

Documents

Barracuda NG Firewall 5.4.x - Product Overview · 2016-04-04 · CONTENTS About the Company 3 References 4 Barracuda NextGen Firewall F 5 Application & Identity-Aware Protection for