Barracuda Firewall The Next-Generation Firewall for Everyone Version 6.5 | September 2014

Challenge: Port-Based Firewalls Loss of network control Application driven malware Block UDP traffic Block FTP traffic Allow HTTP Mimic Web Browsing HTTP Live Streaming Port Hopping Older stateful packet-filtering firewall technology was developed to secure network perimeter access at a port/session level. Stateful firewalls provide adequate security for traffic that use standard ports such as HTTP and FTP. Newer HTTP applications are specifically developed to circumvent older firewall technology by Port-Hopping and streaming via HTTP. YouTube streams video HTTP Skype streams video chat via HTTP DropBox allows transfer of possible secure files via HTTPS Application-driven malware also rampant today and downloadable via HTTP/HTTPS ports. The inability of older stateful port-based firewalls to police today’s web-based applications and sites can result in loss of expensive bandwidth, intellectual property, and confidential information.

Need for a Next-Generation Firewall Evolving threat landscape Need to protect against multi-vector attacks Need a firewall that secures today’s changing network boundary Cloud-based applications Need to control bandwidth and prioritize mission-critical applications Need to understand and secure applications based on behavior Increasing mobility Need to consistently protect on and off-network users Increasing network complexity Need to ensure redundancy for Internet connectivity Need to provide remote user access to corporate resources

Barracuda Firewall Best-in-Class Next-Generation Firewall High-Performance Architecture Granular Application Control and bandwidth management Link Aggregation and Failover IDS/IPS URL Filtering and Anti-Malware on-box or cloud-based Integrated site-to-site, client-based, and SSL-VPN Free cloud-based central management No per-user fee

Key Benefits Secure the Perimeter Complete Application Visibility Improve Uptime Cloud-Scaled Performance Remote Connectivity

Secure the Perimeter

Secure the Perimeter Prevents Internet hackers from infiltrating the network Real-time protection against multi-vector attacks Firewall blocks unauthorized access from hackers IDS/IPS identifies and blocks malicious network activity User-aware firewall rule policies Powerful management interface and alerts

Consistent User Interface

Powerful Firewall Rule Creation Granular criteria Source/destination Application/signature Time/day User/group Powerful action choices NAT Link selection/balancing Traffic shaping Deep packet inspection

Application Visibility

Complete Application Visibility Protect against cloud-based security threats Secure network traffic at the application layer Enterprise-class application detection for mid-market customers Create granular user-access policies to control applications Database of over 1200 cloud-based applications Control bandwidth intensive applications Facebook Netflix Twitter

Improve Uptime

Dynamic Link Management ISP 1 60% of HTTP ISP 2 20% of HTTP ISP 3 20% of HTTP The Barracuda Firewall’s Dynamic Link-Management features provide the ability to streamline customer traffic. Link-Balancing is customers to balance their network traffic over multiple links and maximize the bandwidth of their redundant Internet connections. Automated Failover provides assurance that a customer’s business doesn’t suffer if their Internet service provider goes down. The Barracuda Firewall automatically re-routes traffic if one of the Internet links fails. Also, the Barracuda Firewall supports multiple load-balancing algorithms including Round-Robin, Weighted, and Fallback.

Cloud-Scaled Performance

Barracuda Web-Security Service Cloud-based URL filtering and malware scanning Offloads services from firewall resulting in better performance Extends lifespan of hardware Lowers costs on expensive hardware upgrades Barracuda Cloud Control Free cloud-based central management Remote firewall administration and reporting for Web-Security Service

Cloud-Scaled Content Security URL filter, malware scanning, reporting Predictable computing on-premises Elastic computing in the cloud Massive scalability Avoid frequent refresh or upgrades

Centralized Management Barracuda Cloud Control Manage multiple Barracuda products from one portal Central global policy management Consolidated reports Mobile Application for remote control Free !

Secure Site-to-Site/Remote User Connectivity IPsec Site -to- Site VPN SSL VPN Client-to-Site VPN IPsec, PPTP, SSL Internal Corporate Resources The Barracuda Firewall supports multiple VPN capabilities, allowing for both remote user connectivity and businesses that need to connect multiple sites. With SSL VPN, the Barracuda Firewall grants users a secure tunnel to access internal corporate resources. Site-to-Site VPN lets multiple locations connect over a secure tunnel with each other over the Internet. A site-to-site VPN allows a company to extend their resources to employees at remote locations. Client-based VPN uses a Windows or Mac-based desktop client to connect remote users to corporate resources through a secure tunnel. The Barracuda Firewall client supports IPsec and PPTP based clients. Last, Client-to-Site VPN allows remote users’ access to internal corporate resources. The Barracuda Firewall provides client access for IPsec, PPTP, and SSL VPN’s. All VPN models are available without licensing fees. SSL VPN*: BFW X200 and higher

Barracuda Advantage Low TCO Award-winning support All-inclusive pricing No per-user/per-feature fees Award-winning support No phone trees Region-based support Instant Replacement Program Next business day replacement Free hardware refresh every 4 years

Barracuda Federated Security Servers Deployment Options: Web Filter Appliance NG Firewall Spam Firewall Cloud Computer WAF Virtual SSL VPN Cloud-Scaled Central Management Mobile Device

Customers

Comprehensive Portfolio Security Storage Barracuda Web Security Barracuda SSL VPN Barracuda Backup Barracuda Web Application Firewall Barracuda Message Archiver Barracuda Email Security Barracuda NG Firewall Barracuda Load Balancer ADC Barracuda Copy Barracuda Firewall Barracuda Link Balancer Barracuda SignNow

Next Steps

The last firewall you will ever buy Moving Forward Talk to us Ask for a demo Free 30-day evaluation The last firewall you will ever buy