Barracuda NG Firewall

The Barracuda NG Firewall is a family of hardware and virtual appliances designed to protect network infrastructure, improve site-to-site connectivity and simplify administration of network operations. Beyond its powerful network firewall and VPN technologies, the Barracuda NG Firewall integrates a comprehensive set of next generation firewall technologies, including Layer 7 application control, intrusion prevention, Web filtering, anti-virus, antispam and network access control.

Central Management Across the Enterprise

With hardware models available for branch offices up to headquarters and data centers, and a corresponding offering of virtual appliances, the Barracuda NG Firewall is designed for deployment across the entire enterprise. Through the Barracuda NG Control Center, administrators can manage security, content and traffic management policies from a single interface. Centralized management of security and content policy provides a number of benefits, including:

• Consistent security posture and policy enforcement across the enterprise
• Real-time accounting and reporting across multiple gateways
• Comprehensive history and rollback of configuration and policy changes across the network
• Centralized version control of anti-spam, anti-virus, content filtering and Network Access Control updates

The Barracuda NG Firewall features intelligent site-to-site traffic management capabilities that optimize both availability and performance of the Wide Area Network. Administrators can control application-level routing and prioritization of traffic across multiple links, tunnels and traffic conditions. Supported link types include dedicated lines, xDSL, 3G wireless mobile networks, and any other link types presented as a copper or optical Ethernet link.

Stops Threats and Reduces Administrative Overhead

The Barracuda NG Firewall is an application-aware firewall designed to mitigate threats, enforce policies and optimize traffic flow - resulting in ultra reliable WAN links. Centralized management provides visibility of the entire network, reducing administrative overhead.

Model Specifications

If you would like to speak to someone about which model is right for your organization, please do not hesitate to contact us.

Model Comparison	F10	F100	F200	F300
CAPACITY*
Firewall throughput (Gbps)*	0.15	0.15	0.35	0.35
VPN throughput (Mbps)**	80	80	269	269
Concurrent sessions	8,000	8,000	70,000	70,000
Web Security recommended users	-	10	50-100	50-100
Hardware
Form factor	Desktop mini	Desktop	Desktop	1U rack mount
Dimensions (in.)	1.2x9.4x6.1	2.0x14.2x7.5	2.0x14.2x7.5	1.8x16.9x13
Dimensions (cm.)	3.0x24.0x15.6	5.0x36.0x19.0	5.0x36.0x19.0	4.5x43.0x33.0
Weight (lbs. /kg.)	4.4/2.0	7.7/3.5	7.9/3.6	9.9/4.5
Copper Ethernet NICs	4x10/100	4x10/100	4x10/100	4x10/100
1Gb Fiber SFP NICs (std / max)	-	-	-	-
10Gb Fiber SFP+ NICs (std/max)	-	-	-	-
Max Power Draw (Amps)	1.6	1.6	1.6	1.6
Power supply	Single, external	Single, external	Single, external	Single, external
Integrated Wi-Fi access point	-	F101	F201	F301
3G USB Modem	Optional	Optional	Optional	Optional
Features
Firewall
IPS
IPsec VPN
Traffic Intelligence
Layer 7 Application Profiling
Spam Filter
NG Web Filter		Optional	Optional	Optional
NG Malware Protection		Optional	Optional	Optional
NG SSL VPN and NAC			Optional	Optional
NG Secure Web Proxy
Pricing Links	F10	F100	F200	F300
	Pricing	Pricing	Pricing	Pricing

Model Comparison	F400	F600	F800	F900
CAPACITY*	F400	F600	F800	F900
Firewall throughput (Gbps)*	1.3	4.5	11.0	20.0
VPN throughput (Mbps)**	427	487	1,437	2,886
Concurrent sessions	300,000	300,000	500,000	1,000,000
Web Security recommended users	100	250	1000	2000
HARDWARE
Form factor	1U rack mount	1U rack mount	1U rack mount	2U rack mount
Dimensions (in.)	1.7x16.8x14	1.7x16.8x15.6	1.7x17.0x20.5	3.5x17.4x26.0
Dimensions (cm.)	4.3x42.7x35.6	4.4x42.6x39.6	4.4x43.1x52.0	8.8x44.2x66.0
Weight (lbs. /kg.)	12/5.4	18.7/8.5	28.6/13	39.6/18
Copper Ethernet NICs	6x 1GbE + 1x 10/100	10x1GbE	8/16x1GbE	0/24x1GbE+1 10/100
1Gb Fiber SFP NICs (std / max)	-	-	0/4	0/12
10Gb Fiber SFP+ NICs (std/max)	-	-	0/2	0/6
Max Power Draw (Amps)	1.4	5	5	5
Power supply	Single, internal	Single, internal	Single, internal	Single, internal
Integrated Wi-Fi access point	-	-	-	-
3G USB Modem	Optional	Optional	Optional	Optional
Features
Firewall
IPS
IPsec VPN
Traffic Intelligence
Layer 7 Application Profiling
Spam Filter
NG Web Filter	Optional	Optional	Optional	Optional
NG Malware Protection	Optional	Optional	Optional	Optional
NG SSL VPN and NAC	Optional	Optional	Optional	Optional
NG Secure Web Proxy	-	Optional	Optional	Optional
Pricing Links	F10	F100	F200	F300
	Pricing	Pricing	Pricing	Pricing

• US 1.0- * Firewall performance tested with large packets
• ** VPN Throughput using AES128, NOHASH
• *** Recommended Users depends on environment and selected options. Specifications subject to change without notice.
• Virtual appliance models are also available in 25, 50, 100, 250, 500 and 1000 user levels. Contact us for details

The Barracuda NG Firewall is a family of hardware and virtual appliances designed to service next generation firewall capabilities to all office locations of enterprise networks. This includes very small remote locations, teleworkers' home offices, branch offices, headquarters and datacenters.

Firewall / VPN Features

Firewall

• Stateful packet forwarding
• Transparent proxying (TCP)
• NAT (src,dst,nets), NAPT, PAT
• Object-oriented rule sets
• Dynamic rules / timer triggers
• Virtual rule test environment
• Jumbo frame support

Traffic Management

• Link monitoring and aggregation
• Policy routing
• Traffic shaping
• On-the-fly flow reprioritization

Infrastructure Services

• DHCP server, relay
• HTTP, SSH, FTP proxies
• SMTP gateway and spam filter
• Authentication - supports x.509, NTLM, RADIUS, RSA SecurID, LDAP/LDAPS, Active Directory, TACACS

PROTOCOL SUPPORT

• IPv4, ARP, IPv6 (2011)
• VoIP (H.323, SIP, SCCP [skinny])
• RPC protocols (ONC-RPC, DCE-RPC)
• 802.1q VLAN
• IPinIP and GRE tunnels
• OSPF/RIP router
• SNMP agent

VPN

• PPTP / L2TP (IPSec)
• Supports AES-128/256, 3DES, DES, Null ciphers
• Private CA or external PKI
• IPsec VPN clients for Windows, Mac, Linux
• Application-aware traffic intelligence across sites

High Availability

• Active-active? or active-passive
• Network notification of failover
• Transparent failover without session loss
• Encrypted HA communication>

Security Options

• Barracuda NG Web Security
  • Barracuda NG Web Filter
  • Barracuda NG Malware Protection
• Barracuda NG Secure Web Proxy
  • (HTTPS traffic inspection option)
• Barracuda NG SSL VPN and NAC
  • Clientless access from Web browsers
  • Network Access Control validates client security access

Central Management Options

Barracuda NT Control Center

• Standard Edition
  • 1 configuration grouping
  • Unlimited firewalls
• Enterprise Edition (1 tenant)
  • Single tenant
  • Unlimited configuration groupings
  • Unlimited firewalls
• Global Edition (multi-tenant)
  • Support for 5 tenants included
  • Unlimited configuration groupings
  • Unlimited firewalls
  • Additional tenant licenses available

Support Options

Energize Updates

• Standard technical support
• Firmware updates
• Layer 7 application definitions for control of more than 800 applications

Instant Replacement Service

• Replacement unit shipped next business day
• 24x7 technical support

Configuration

To centralize management across many different firewalls and remote access users, the Barracuda NG Control Center enables administrators to configure security and network access policies, control firmware, updaterevisions, and manage user settings. Template-based configuration and globally available security objects enable efficient configuration across thousands of locations.

The Barracuda NG Control Center supports multiple administrators simultaneously - even within the same configuration tree. Highly customizable administrative roles can be defined to delegate administrative capabilities for specific departments or locations.

Troubleshooting

All Barracuda NG Control Center and Barracuda NG Firewall appliances come with extensive network connectivity troubleshooting and visualization tools. Even for large networks it typically only takes a few mouse clicks to analyze and remediate a problem in the central auditlog or history screen.

Statistics, logging and reporting

All Barracuda NG Firewall appliances include extensive logging and reporting capabilities. If multiple Barracuda NG Firewall appliances are managed via the Barracuda NG Control Center, logs, events and status information can be collated by the Barracuda NG Control Center.

Deployment Configurations

The Barracuda NG Firewall offers comprehensive protection of distributed networks through a combination of hardware and virtual appliances at each office location and comprehensive VPN access options for remote users.

To centralize management across many different firewalls and remote access users, the Barracuda NG Control Center enables administrators to configure security and network access policies, control firmware update revisions, and manage user settings. Template-based configuration and globally available security objects enable efficient configuration across thousands of locations.

Click to enlarge

Barracuda NG Firewall appliances are available for locations of all sizes, ranging from the very small remote location to the headquarters or even data center.

For on the go users, the Barracuda NG Network Access Clients provide secure and convenient VPN access to the network. For internet kiosks or home computers where client software deployment is not appropriate, the Barracuda NG SSL VPN & NAC option provides secure access to vital network resources from any Web browser.

NG Firewall Documentation

DataSheets

NG Firewall Admin Guide NG Firewall Quick Start Guide Purewire Quick Start Guide

Guides:

Case Studies: