Powerful, Enterprise-Class, Web Content Filtering Solution

The Barracuda Web Filter combines preventative, reactive, and proactive measures to form a complete content filtering and web-security solution. The Barracuda Web Filter:

• Blocks access to websites based on domain, URL pattern, or content category
• Blocks downloads based on file types
• Blocks application access to the Internet, including IM, music services, software update utilities, etc.
• Integrates with "Safe Search" filters built into popular image search engines
• Provides an integrated gateway and desktop spyware protection

Click to view larger

Designed for the enterprise, the Barracuda Web Filter enables organizations to set up custom policies for particular users and groups across customizable time ranges. The Barracuda Web Filter integrates with popular LDAP directory servers, such as Microsoft Active Directory, for both authentication and group membership information on which to apply custom policies.

NEW "Soft" Blocking

With "soft" blocking capabilities, administrators have the power to monitor and warn users who are not complying with their organization's Internet usage policies. In addition, Barracuda Web Filter version 3.1 includes more comprehensive reporting functions.

Web Filter Soft Blocking in Firmware 3.1

NEW WCCP

Web Cache Communication Protocol (WCCP) is a Cisco-developed content-routing protocol that provides a mechanism to redirect traffic flows in real-time. It has built-in load balancing, scaling, fault tolerance, and service-assurance (failsafe) mechanisms.

No Software and No Modifications Required

With no software to install and no modifications required to your network, the Barracuda Web Filter is easy to install. It has an intuitive user interface for maintenance and monitoring, making it a virtually maintenance-free solution. Even system updates are made automatically by Barracuda Central, an advanced technology center where engineers work continuously to provide the most effective methods to combat the ever changing spyware variants.

Updates are performed hourly so that your Web Filter can block the ever changing virus and spyware variants.

3 Modes of Deployment

1. Inline – Simple and complete – transparent proxy – no config required on the client. Can block Malware protocols.
2. Forward Proxy – HTTP filtering only – but out of the Data Path. Need to tell the clients to use the Barracuda as proxy.
3. NEW! WCCP – Requires a Router or Switch that supports WCCP but can proxy to multiple BWF. Load balancing and failover and scalability. Similar to Forward Proxy but the config is on the Swich and not the client.

Barracuda Web Filter CIPA Compliance

The Barracuda Web Filter, previously known as the Barracuda Spyware Firewall, has been deployed by many schools and libraries as part of their overall policies to comply with CIPA, the Children's Internet Protection Act.

CIPA Requirements

1. Schools and libraries subject to CIPA may not receive the discounts offered by the E-Rate program unless they certify that they have an Internet safety policy and technology protection measures in place. An Internet safety policy must include technology protection measures to block or filter Internet access to pictures that:
   • (a) are obscene
   • (b) are child pornography, or
   • (c) are harmful to minors, for computers that are accessed by minors.
2. Schools subject to CIPA are required to adopt and enforce a policy to monitor online activities of minors; and
3. Schools and libraries subject to CIPA are required to adopt and implement a policy addressing:
   • (a) access by minors to inappropriate matter on the Internet
   • (b) the safety and security of minors when using electronic mail, chat rooms, and other forms of direct electronic communications
   • (c) unauthorized access, including so-called “hacking,” and other unlawful activities by minors online
   • (d) unauthorized disclosure, use, and dissemination of personal information regarding minors
   • (e) restricting minors’ access to materials harmful to them.

Schools and libraries are required to certify that they have their safety policies and technology in place before receiving E-rate funding.

Source: FCC - "Children’s Internet Protection Act" - http://www.fcc.gov/cgb/consumerfacts/cipa.html

Barracuda Enables CIPA Compliance

The Barracuda Web Filter is ideally suited to help public schools and libraries enforce CIPA policies in an easy and cost effective manner. Used in combination with the Barracuda Spam & Virus Firewall, to manage email use, and the Barracuda IM Firewall, for managing instant messaging traffic, the Barracuda Family of products can enable CIPA compliance for nearly all facets of a network.

CIPA Requirement*	Barracuda Networks Technology
1(a)(b)(c), 3(a)(c)(e)	Content filtering database of millions of URLs broken into 58 categories for targeted content filter policies.
1(a)(b)(c), 3(a)(e)	Safe Search features to block the media caches of popular search engines
2	Identification of where threats are coming from, both externally and internally
1(a)(b)(c), 3(a)(c)(e)	URL block and allow lists
1(c), 2, 3(a)(c)(e)	File type blocking
3(c)(d)	Prevention of keystroke logging and personal information theft
1(a)(b)(c), 3(a)(d)(e)	Monitoring of Web traffic for virus and spyware downloads
1(a)(b)(c), 3(a)(d)(e)	Inspection of network traffic for spyware infection activity
3(b)	Instant Message blocking
3(c)(e)	Client Lockdown features to prevent system hacking and hijacking
3(c)(e)	Examination of inbound and outbound spyware and Web surfing activity
3(c)(e)	Prevention of new spyware infections
3(c)(e)	Clean up of detected infections from Windows desktop computers through the Barracuda Spyware Removal Tool
1(a)(b)(c), 3(a)(e)	Blocking applications which can be dangerous to the minors
3(c)(e)	Blocking hacked, hijacked, or otherwise compromised systems
*corresponds to the numbers/sections in the “What CIPA Requires” section of this document

Model Specifications

There are 6 models of the Barracuda Web Filter currently available. The entry level model handles 5 Mb/sec of throughput. The largest model to date handles over 200 Mb/sec throughput with 200 GB of Web Caching.

Download Barracuda Web Filter Datasheet

If you would like to speak to someone about which model is right for your organization, please do not hesitate to contact us.

Specification	Model 210	Model 310	Model 410	Model 610	Model 810	Model 910
Throughput (Mb/Sec)	5	10	20	50	200	300
Web Cache	-	10GB	50GB	100GB	200GB	300GB
Concurrent Users	25-100	50-200	150-500	450-1500	1,000-3,000	2,500-4,500
Active TCP Connections	50-400	400-800	800- 2,000	2,000- 6,000	6,000- 10,000	10,000- 15,000
Hardware	210	310	410	610	810	910
Rackmount Chassis	1U Mini	1U Mini	1U Mini	1U Fullsize	2U Fullsize	2U Fullsize
Dimensions (inches)	16.7 x 1.7 x 14	16.7 x 1.7 x 14	16.7 x 1.7 x 14	16.8 x 1.7 x 22.5	16.8 x 3.5 x 25.5	16.8 x 3.5 x 25.5
Dimensions (cm)	42.4 x 4.3 x 35.6	42.4 x 4.3 x 35.6	42.4 x 4.3 x 35.6	42.7 x 4.3 x 57.4	44.2 x 8.9 x 64.8	44.2 x 8.9 x 64.8
Weight (lbs)	12	12	12	26	46	52
Weight (kg)	5.4	5.4	5.4	11.8	20.9	23.6
Ethernet	1x 10/100	1x 10/100	1x 10/100	2x Gigabit	2x Gigabit	2x Gigabit
Ethernet Passthrough**	1x 10/100	1x 10/100	1x 10/100	1x Gigabit	1x Gigabit	1x Gigabit
AC Input Current (A)	1.0	1.2	1.4	1.8	4.1	5.4
Redundant Disk Array (RAID)				Hot Swap	Hot Swap	Hot Swap
Redundant Power Supply					Hot Swap	Hot Swap
ECC Memory
Features	210	310	410	610	810	910
Hardened and Secure OS
Content Filtering
Application Control
Advanced Policy Creation
Network Threat Protection
Spyware Removal
Additional Summary Reports
Syslog
Ethernet Bypass Hardware
SNMP / API
Linked Management
WCCP
Pricing Links	210	310	410	610	810	910
	Pricing	Pricing	Pricing	Pricing	Pricing	Pricing
Note: The capacity depends on environment and selected options. **Each ethernet passthrough has two ethernet jacks.

Key Features

The Barracuda Web Filter is a complete content filtering and application blocking solution designed to enforce acceptable Internet usage policies by blocking access to objectionable content and unauthorized Internet applications. At the same time, the Barracuda Web Filter includes award-winning protection against Internet threats.

Although the web has proven to be a powerful tool for organizations, analysts estimate that 70% of browsing to pornography sites happens during normal business hours and about 30-40% of overall Internet usage in the workplace is not related to business.

Websites that target businesses may provide secure business environments, but an increasing number of Web sites and Internet applications targeting personal usage are hosts to spyware, viruses, and other Internet threats. Clearly, unauthorized personal web browsing not only poses a threat to productivity but also to the security of your network.

Comprehensive Content Filtering

Combining multiple techniques, the Barracuda Web Filter includes URL filtering, URL rewriting, and MIME type blocking to provide powerful control over policies covering Web site usage. Capabilities include:

• URL Filtering by Content Category
  You can define policies that restrict or allow Web sites based on their categorization. The Barracuda Web Filter includes definitions for 57 content categories, including pornography, violence, hacking, sports, news, dating, and chat sites.
• URL filtering by Domain Name or URL Pattern
  You can customize your content filtering policy to restrict certain Web sites, or look for specific patterns in Web site addresses. Advanced administrators can specify URL patterns to block using the very powerful UNIX regular expression (regexp) syntax.
• Image Safe Search Integration (URL Rewriting)
  The Barracuda Web Filter takes advantage of the "safe search" content filtering capabilities built into image search engines, such as Google, Yahoo, and MSN. If enabled, the Barracuda Web Filter Image Safe Search feature rewrites URLs for these image search engines to include the URL parameters that restrict display of objectionable content in cached image search results.
• File Type Blocking
  You can define policies to restrict downloading of files over the Web based on their MIME types. For example, to block downloads of executables, you can block MIME type application/octet-stream.

These controls can be combined to govern Internet usage to increase productivity, reduce exposure to offensive material, and to prevent visits to sites that could compromise security.

Internet Application Blocking

The Barracuda Web Filter also enables you to enforce policies governing usage of applications that access the Internet, unlike pure HTTP proxy solutions. Features include:

• Instant Messaging (IM) Blocking
  The Barracuda Web Filter enables you to set policy governing usage of public IM clients, including AIM, ICQ, Yahoo! Messenger, and MSN Messenger, and ICQ. These public IM clients can not only provide means for unmonitored communications, but their security vulnerabilities are often the target of those in the hacking community. Blocking public IM communications outright is one strategy to secure information flow and increase network security.
• Application Blocking
  In addition to IM applications, the Barracuda Web Filter includes policies for popular applications that access the Internet, including Internet music applications, software updaters, and popular browser toolbars.
• IP & Port Blocking
  You can customize your own IP blocking policies based on any combination of source or destination network IP address ranges and ports. One common usage of this feature is to prevent compromised machines from accessing the Internet.

The combination of Web and other Internet application blocking techniques enables you to define and implement complete Internet usage policies for your organization.

Advanced Policy Creation

Supporting extremely granular applications of policies (time-based policies) by user, group, or IP address range, the Barracuda Web Filter allows you to create rules that apply to different constituencies in your organization. Features include:

• Default Guest & User Policies
  For rapid deployment, the Barracuda Web Filter comes preconfigured with default guest (unauthenticated user) and known user (authenticated user) policies. You can easily customize default policies for content filtering and application blocking with simple easy-to-use Web forms.
• User & Group Policy Exceptions
  You can customize policies by defining exceptions on top of the default policies. Policy exceptions can apply to content filtering and application blocking rules, and they can apply to specific users, groups, or network IP address ranges. For example, you can set a default policy to block Web access to job sites but create an exception for the Human Resources group to allow them.
• Integration with LDAP Directory Servers
  The Barracuda Web Filter integrates with popular LDAP directory servers, including Microsoft Active Directory, IBM Lotus Domino Directory, and Novell eDirectory. This integration provides the Barracuda Web Filter with real-time access to user and group membership managed by the directory server. You can define policies that apply to LDAP users and groups.
• Integration with Windows Domain Controllers
  Included with the Barracuda Web Filter is the Barracuda DC Agent, software that can be installed on your Windows Domain Controller. This software provides the Barracuda Web Filter with the username logged at each IP address, and it enables proper application of policy without requiring any user intervention and without a separate login.
• Local users and groups
  For sites that do not use directory servers or who wish to define policies for users and groups not managed by the directory server, the Barracuda Web Filter supports the creation of local users and groups on which to apply policy.
• Network IP address groups
  You can define policies that only apply to certain network IP address ranges or subnets.
• Time-based Policy Exceptions
  You can define policy exceptions for both content filtering and application blocking based on time-of-day. For example, you can set a default policy to block access to sports sites but to allow browsing during non-working hours.

The Barracuda Web Filter was designed with ease of deployment in mind. With default policies, even organizations new to Web filtering can get started quickly.

Organizations with more advanced filtering requirements can take advantage of advanced policy exceptions and integration with enterprise infrastructure.

Integrated Spyware and Virus Protection

The Barracuda Web Filter includes best-of-breed spyware and virus protection leveraging its heritage as a leading anti-spyware solution. Capabilities include:

• Blocking access to known spyware sites
  As a first line of defense against spyware, the Web Filter blocks access to sites known to host spyware.
• Blocking Spyware Downloads
  The Barracuda Web Filter blocks spyware installed without the user's knowledge or consent - also known as drive-by installs or downloads - as well as any installations from known spyware Web sites.
• Integrated Anti-virus Protection
  In addition to blocking spyware, the Barracuda Web Filter provides complete virus protection for all downloads. By utilizing dual layer virus blocking, decompression of archives and file-type blocking, the anti-virus engine in the Barracuda Web Filter further protects your network from crippling threats.
• Detection and Blocking of Spyware Activity
  The Barracuda Web Filter secures the organization by detecting spyware access to the Internet, blocking it, and notifying the administrator.
• Spyware/Malware Removal
  The Web Filter includes the Barracuda Spyware Removal Tool, an ActiveX download that removes identified threats from Windows computers.

By combining anti-virus and anti-spyware at the gateway with desktop spyware removal, the Barracuda Web Filter offers a unique approach to providing universal network protection from malware in a simple, easy-to-use appliance.

Simplified and Centralized Administration

Featuring an easy-to-use web interface, the Barracuda Web Filter allows for easy and cost effective administration of the appliance. It allows you to control, manage, and define corporate spyware and web security policies from a central location.

• Barracuda Energize Updates
  A team of security engineers at Barracuda Central continuously monitors the Internet for trends in spyware and virus attacks. As they detect trends, updates are created for the Barracuda Web Filter. The Barracuda Web Filter is then automatically updated with new spyware Web sites, spyware rules, spyware algorithms, and virus definitions. These updates require zero administration and ensure that your network has comprehensive and accurate protection even as the spyware methods of distribution change.
• Logs and Graphical Reports
  System administrators can view logs or generate graphical reports to provide visibility within the organization. The Barracuda Web Filter can provide information on infected clients, downloaded spyware and viruses, top blocked spyware Web sites, and more.
• No Per User Charges
  Barracuda Web Filter pricing is simple. Each of the Barracuda Web Filters is designed to handle an approximate number of users. The Barracuda Web Filter includes a robust feature set at one fixed price with no per user charges. This means the system administrator no longer has to worry about keeping track of new accounts.

Web Filter Administration

Administration and configuration of the Barracuda Web Filter is accomplished through a simple Web interface that is built into the system. There is no software to install and no CDs or floppies to lose.

Statistics Reporting

The Barracuda Web Filter's administrative tools feature state-of-the-art, statistical reporting that give you a visual overview of the web traffic levels as well as filtered traffic for both policy and security reasons.

Deployment Configurations

The Standard Barracuda Web Filter deployment configuration consists of simply placing the appliance on your network between your Internet Firewall and your LAN and assigning a new IP address accordingly based on your network.

Multiple Network Environments

Multiple Barracuda Web Filters may be deployed to protect multiple subnets. Simply deploy the Barracuda Web Filter in front of the subnet router and assign a new IP address.

Web Filter Documentation

DataSheets

• Web Filter Datasheet
• Web Filter Technology

Guides

• Administrator's Guide
• Quickstart Guide
• Syslog and the Web Filter
• Web Filter 3.1 Firmware

White Papers

• Providing Safe Web Access in Educational Institutions
• Sizing Your Web Filter
• Feature Insights & Advantages
• Web Filtering Improves ROI
• Web Filter Activity Reports
• Achieving CIPA Compliance

Web Filter Web Admin Screenshots

The following screenshots illustrate the Web administration interface of the Barracuda Web Filter.

Barracuda Spam Firewall Users Screenshots
Basic > Status Displays the current status of the appliance including statistics on overall Web traffic, attempted policy violations, blocked spyware downloads, blocked virus downloads, and infected clients.
Basic > Log Provides an entry for each Web request by user, whether it was allowed or blocked, and details about attempted policy violations or network security threats.
Basic > IP Configuration Controls the settings for IP, DNS and Domain configuration.
Basic > Administration Change Password, Time Zone and Administrator IP Range.
Basic > Virus Enable virus engine.
Basic > Reporting Generate or schedule reports to be sent via email.
Basic > Infection Activity Breakdown of spyware protocol activity by host.
Block / Accept > Domains Create a filter on domain names to either allow or block matching requests.
Block / Accept > Patterns Create a filter on URL patterns (regular expressions) to either allow or block matching requests.
Block / Accept > Content Filter Create policy by allowing or blocking pre-installed content categories containing millions of URLs.
Block / Accept > Applications Create policy by allowing or blocking applications that access the Internet, including Instant Messaging (IM), Internet media players, and software updaters.
Block / Accept > Block Messages Customize the messages displayed to users when their Web requests are blocked. Set policy to automatically redirect infected clients to the Barracuda Spyware Removal Tool, an ActiveX control that removes spyware from Windows computers.
Block / Accept > MIME Blocking Create a filter to block file downloads over the Web by MIME type.
Block / Accept > Exempt Ips Define clients, servers, or subnets to exempt from filtering.
Block / Accept > Blocked Ips Create custom blocking IP rules based on network IP address, netmask, and port.
Block / Accept > Exceptions Create policy exceptions based on user, group, IP subnet, or time range.
Block / Accept > Browse Test Test policies that apply for a particular user, IP address, and time.
Users / Groups > Account View Display list of users known the Barracuda Web Filter.
Users / Groups > New Users Create local users on which to apply policy when using LDAP users is not appropriate.
Users / Groups > Groups Create local groups on which to apply policy when using LDAP groups is not appropriate.
Users / Groups > IP Create local groups based on subnet on which to apply policy.
Users / Groups > External Directory Services Configure integration with LDAP directory servers for user and group information. The Barracuda Web Filter users LDAP directory information to authenticate users and to apply policy.
Users / Groups > Configuration Configure user session duration and integration with Windows Domain Controllers to automatically map client IP address to username without requiring a separate login.
Advanced > Backup Backup/Restore configuration.
Advanced > Energize Updates Sets content filtering and virus definition update intervals.
Advanced > Firmware Update Provides firmware download options.
Advanced > Syslog Sets syslog server connection.
Advanced > Linked Mangement Cluster two or more Barracuda Web Filter units to share configuration.
Advanced > Troubleshooting Provides support diagnostics and network connectivity tests for troubleshooting.
Advanced > Caching Enable content cache to improve Web Filter performance.
Advanced > Task Manager Display list of background tasks such as running firmware downloads.