Barracuda CloudGen Firewall F Vx

Scalable Security for the Enterprise

Download PDF

Overview

Enterprise networks grow larger and more complex every day - and more critical to key business operations. The Barracuda NextGen Firewall F-Series Vx is an essential tool to optimize performance, security, and availability of today's dispersed enterprise SD-WANs.

The Barracuda Advantage

Effective WAN Management

  • Application-based traffic prioritization across the WAN
  • Intelligent uplink balancing
  • Intelligent traffic reprioritization on uplink loss

Enterprise Readiness

  • Industry-leading centralized management
  • WAN optimization
  • Global WAN monitoring with Barracuda Earth

Scalable Security

  • Cloud Enablement and secure WAN Virtualization
  • Drag-and-drop VPN graphical tunnel interface

Product Spotlight

  • Powerful next-generation network firewall
  • Advanced Threat Protection (incl. sandboxing)
  • Built-in web security and IDS/IPS
  • Dynamic mesh site-to-site VPN
  • Client-to-Site VPN via browser (SSL VPN), mobile apps and desktop VPN clients
  • Full application visibility and granular control
  • Intelligent traffic regulation including application-based provider selection
  • Tightly integrated Quality of Service (QoS) and link balancing
  • Centralized management of all functionality
  • Template-based and role-based configuration
  • Available for VMware, XenServer, KVM, and Hyper-V

Integrated Next-Generation Security

The Barracuda CloudGen Firewall F-Series Vx is designed and built from the ground up to provide comprehensive, next-generation firewall capabilities. Based on application visibility, user-identity awareness, intrusion prevention, and centralized management, the F-Series Vx is the ideal solution for today’s dynamic enterprises as it is fully compatible with VMware, XenServer, KVM, and Hyper-V virtualization.

True Enterprise Readiness

The Barracuda NextGen Firewall F-Series Vx meets the enterprise requirements for massive scalability and efficient management across dispersed networks. Integrated WAN optimization and centralized management enable organizations to increase system availability while keeping administrative time and operation costs low.

Regaining Control of User Activity

The Barracuda CloudGen Firewall F-Series Vx restores control to networks made opaque and unmanageable by mobile devices at work, Web 2.0 applications, increasing dispersion, and the growing integration and dependence on cloudbased resources. It extends security coverage beyond network boundaries, and makes it easy to monitor and regulate everything the network and its users are doing.

The Barracuda NextGen Firewall F-Series' dashboard provides real-time information and summaries of what is going on in an organization's network
"Barracuda NextGen Firewalls are the perfect solution for central management, especially when it comes to distributed environments like ours. Performance problems? Not anymore!"

- Alexander Maute, Director IT Infrastructure, Eissmann Group Automotive

Technical Specs

Technical Specs

Firewall

  • Stateful packet inspection and forwarding
  • Full user-identity awareness
  • IDS/IPS
  • Application control and granular enforcement
  • Interception and decryption of SSL/TLS encrypted apps
  • Antivirus and web filtering in single pass mode
  • Email security
  • SafeSearch enforcement
  • Google Accounts Enforcement
  • Denial of Service protection (DoS/DDoS)
  • Spoofing and flooding protection
  • ARP spoofing and trashing protection
  • DNS reputation filtering
  • NAT (SNAT, DNAT), PAT
  • Dynamic rules / timer triggers
  • Single object-oriented rule set for routing, bridging, and routed bridging
  • Virtual rule test environment

Hypervisor Support

  • VMware
  • Hyper-V
  • XenServer
  • KVM

High Availability

  • Active-active (requires external load balancer) or active-passive
  • Transparent failover without session loss
  • Encrypted HA communication

Intrusion Detection & Prevention

  • Protection against exploits, threats and vulnerabilities
  • Packet anomaly and fragmentation protection
  • Advanced anti-evasion and obfuscation techniques
  • Automatic signature updates

Advanced Threat Protection

  • Dynamic, on-demand analysis of malware programs (sandboxing)
  • Dynamic analysis of documents with embedded exploits (PDF, Office, etc.)
  • Detailed forensic analysis
  • Botnet and spyware protection
  • TypoSquatting and link protection for email

Central Management Options via Barracuda NextGen Control Center

  • Administration for unlimited number of firewalls
  • Support for multi-tenancy
  • Multi-administrator support & RCS
  • Enterprise/MSP-friendly licensing
  • Template & repository-based management
  • REST API

VPN

  • Drag & drop VPN tunnel configuration
  • Network Access Control
  • iOS and Android mobile device VPN support
  • Multi-factor authentication for SSL VPN and CudaLaunch

Protocol Support

  • IPv4, IPv6, ARP
  • BGP/OSPF/RIP
  • VoIP (H.323, SIP, SCCP [skinny])
  • RPC protocols (ONC-RPC, DCE-RPC)
  • 802.1q VLAN

Traffic Intelligence & SD-WAN

  • Simultaneous use of multiple uplinks (transports) per VPN tunnel
  • FIPS 140-2 certified cryptography
  • Auto-VPN tunnel creation between remote spoke locations based on application type
  • Dynamic bandwidth detection
  • Performance-based transport selection
  • Adaptive session balancing across multiple uplinks
  • Traffic Replication (forward error correction)
  • Application-based provider selection
  • Application-aware traffic routing (VPN)
  • Traffic shaping and QoS
  • Built-in data deduplication

Infrastructure Services

  • DHCP server, relay
  • SIP, HTTP, SSH, FTP proxies
  • SNMP and IPFIX support
  • DNS Cache

Editions & Options

Editions

VF10

  • Capacity
  • 10 Number of IPs
  • 1 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall incl.IPS
  • Application Control
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter
  • Advanced Threat and Malware Protection bundle
  • Advanced Remote Access

VF25

  • Capacity
  • 25 Number of IPs
  • 2 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall incl.IPS
  • Application Control
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter
  • Advanced Threat and Malware Protection bundle Optional
  • Advanced Remote Access Optional

VF50

  • Capacity
  • 50 Number of IPs
  • 2 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall incl.IPS
  • Application Control
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter
  • Advanced Threat and Malware Protection bundle Optional
  • Advanced Remote Access Optional

VF100

  • Capacity
  • 100 Number of IPs
  • 2 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall incl.IPS
  • Application Control
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter
  • Advanced Threat and Malware Protection bundle Optional
  • Advanced Remote Access Optional

VF250

  • Capacity
  • 250 Number of IPs
  • 2 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall incl.IPS
  • Application Control
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter
  • Advanced Threat and Malware Protection bundle Optional
  • Advanced Remote Access Optional

VF500

  • Capacity
  • 500 Number of IPs
  • 2 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall incl.IPS
  • Application Control
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter
  • Advanced Threat and Malware Protection bundle Optional
  • Advanced Remote Access Optional

VF1000

  • Capacity
  • Unlimited Number of IPs
  • 2 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall incl.IPS
  • Application Control
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter
  • Advanced Threat and Malware Protection bundle Optional
  • Advanced Remote Access Optional

VF2000

  • Capacity
  • Unlimited Number of IPs
  • 4 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall incl.IPS
  • Application Control
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter
  • Advanced Threat and Malware Protection bundle Optional
  • Advanced Remote Access Optional

VF4000

  • Capacity
  • Unlimited Number of IPs
  • 8 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall incl.IPS
  • Application Control
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter
  • Advanced Threat and Malware Protection bundle Optional
  • Advanced Remote Access Optional

VF8000

  • Capacity
  • Unlimited Number of IPs
  • 16 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall incl.IPS
  • Application Control
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter
  • Advanced Threat and Malware Protection bundle Optional
  • Advanced Remote Access Optional

Support Options

Barracuda Energize Updates

  • Standard technical support
  • Firmware updates
  • IPS signature updates
  • Application control definition updates
  • Web filter updates

Security Options

  • Advanced Threat Protection prevents from network breaches, identifies zero-day malware exploits, targeted attacks, advanced persistent threats and other advanced malware.
  • Malware Protection provides gateway-based protection against malware, viruses, spyware, and other unwanted programs inside SMTP/S, HTTP/S, and FTP traffic.
  • Advanced Remote Access provides a customizable and easy-to-use portal-based SSL VPN as well as sophisticated Network Access Control (NAC) functionality and CudaLaunch support.