Barracuda NG Control Center VC610

Overview:

The Barracuda NG Firewall is a family of hardware and virtual appliances designed to protect network infrastructure, improve site-to-site connectivity and simplify administration of network operations. Beyond its powerful network firewall and VPN technologies, the Barracuda NG Firewall integrates a comprehensive set of next generation firewall technologies, including Layer 7 application profiling, intrusion prevention, Web filtering, anti-virus, anti-spam and network access control.

Central Management Across the Enterprise

With hardware models ranging from the micro branch office up to the large headquarters and datacenters, and a corresponding offering of virtual appliances, the Barracuda NG Firewall is designed for deployment across the entire enterprise. Through the Barracuda NG Control Center, administrators can manage security, content and traffic management policies from a single interface. Centralized management of security and content policy provides a number of benefits, including:

• Consistent security posture and policy enforcement across the enterprise
• Real-time accounting and reporting across multiple gateways
• Comprehensive history and rollback of configuration and policy changes across the network
• Centralized version control of anti-spam, anti-virus, Web filter and network access control updates

Intelligent Traffic Management

The Barracuda NG Firewall features intelligent site-to-site traffic management capabilities that optimize both availability and performance of the wide area network. Administrators can control application-level routing and prioritization of traffic across multiple links, tunnels and traffic conditions. Supported link types include dedicated lines, xDSL, 3G wireless mobile networks, and any other link types presented as a copper or optical Ethernet link.

Stops Threats and Reduces Administrative Overhead

The Barracuda NG Firewall is an application-aware firewall solution designed to mitigate threats, enforce policies and optimize traffic flow - resulting in ultra reliable WAN links. As an added benefit, centralized management provides visibility of the entire network, reducing administrative overhead and in line costs.

Features:

The Barracuda NG Firewall is a family of hardware and virtual appliances designed to service next generation firewall capabilities to all office locations of enterprise networks. This includes very small remote locations, teleworkers’ home offices, branch offices, headquarters and datacenters.

Integrated content security
Barracuda NG Firewall integrates a comprehensive set of next generation firewall technologies, including Web filtering, malware protection, intrusion prevention, anti-spam protection and Layer 7 application profiling.

Network access control
Barracuda NG Firewalls include licenses for an unlimited number of IPSec site-to-site connections and IPSec clients through the Barracuda NG VPN Client. The Barracuda NG Firewall SSL VPN and NAC option adds a customizable and easy-to-use Web portal-based SSL VPN as well as sophisticated network access control (NAC) functionality. NAC allows enforcement of minimum Windows client security prerequisites before being allowed access to the network or access to a quarantine network. Security posture can be specified according to available Windows patch level, availability of anti-virus and/or anti-spyware and user ID. The Barracuda NG Network Access Client also adds support for 802.1x port based security for 802.1x enabled routers and switches.

Optimization of intelligent traffic flow across the WAN
The Barracuda NG Firewall provides application-aware traffic management and prioritization across the WAN, featuring adaptive routing based on network traffic conditions and link status. In addition, through Barracuda NG Control Center, administrators can efficiently monitor VPN tunnels and firewall status.

Industry Leading Centralized Management Capabilities
To centralize management across many different firewalls and remote access users, the Barracuda NG Control Center enables administrators to configure security and network access policies, control firmware update revisions, and manage user settings. Template-based configuration and globally available security objects enable efficient configuration across thousands of locations. The Barracuda NG Control Center supports multiple administrators simultaneously - even within the same configuration tree. Highly customizable administrative roles can be defined to delegate administrative capabilities for specific departments or locations.

Roles-based Administration and Multi-Tenancy
The Barracuda NG Control Center is offered at three levels - Standard Edition, Enterprise Edition and Global Edition. All Barracuda NG Control Center levels enable administration of an unlimited number of Barracuda NG Firewall platforms. The Standard Edition allows for a single configuration group. The Enterprise Edition allows for an unlimited number of configuration groups for a single enterprise / tenant or “range.” The Global Edition is designed for service providers who service multiple tenants and allows for separate and secluded configuration trees for each “range.”

Quick Troubleshooting for Network Administrators
All Barracuda NG Control Center and Barracuda NG Firewall appliances come with extensive network connectivity troubleshooting and visualization tools. Even for large networks it typically only takes a few mouse clicks to analyze and remediate a problem in the central audit log or access cache screen.

Firewall
The Barracuda NG Firewall integrates stateful packet filtering and Layer 7 Application Profiling. The stateful packet filtering firewall ensures that the network and the system itself is protected against classic TCP Layer 2 to Layer 4 attacks.

Layer 7 Application Profiling
Next generation firewalls utilizing Layer 7 application profiling can identify and enforce policy on more sophisticated applications, which may hide their traffic inside otherwise “safe” port/protocols such as HTTP. Skype and peer-to-peer (P2P) applications are particularly notorious for requiring Layer 7 application profiling for policy enforcement. The Barracuda NG Firewall integrates Layer 7 application profiling into its core firewall functions, enabling enforcement of policy based on user ID, security posture, location and time of day. Policy actions can include blocking, allowing, throttling, or even enabling or disabling of specific application features.

VPN
The Barracuda NG Firewall includes a client-to-site as well as site-to-site virtual private network (VPN) service to allow safe, encrypted communication over the Internet. Every Barracuda NG Firewall model includes an unlimited number of VPN client licenses.

Transparent TCP Proxy
The Barracuda NG Firewall includes a TCP proxy to effectively open TCP packets, inspect and rebuild TCP network traffic.

NAT / PAT/ IP Masquerading
The Barracuda NG Firewall includes the ability to modify network address information in datagram (IP) packet headers for the purpose of remapping a given address space into another. This feature is most often used to hide internal IP addresses from the outside network.

Intrusion Prevention System (IPS)
The Barracuda NG Firewall monitors network and system activities for malicious or suspicious behavior and can react in real-time to block or prevent those activities. When an attack is detected, the Barracuda NG Firewall can drop the offending packets while still allowing all other traffic to pass.

SFP Fiber Interfaces (Models F800 and F900)
Barracuda NG Firewall F800 and F900 models are available with optional small form factor pluggable (SFP) network ports. Also known as Mini-GBIC, these network ports allow connecting the Barracuda NG Firewall to one or multiple 1 Gigabit fiber optic or copper networks.

SFP+ Fiber Interfaces (Models F800 and F900)
Barracuda NG Firewall F800 and F900 models are available with optional small form factor pluggable plus (SFP+) network ports. These network ports allow connecting the Barracuda NG Firewall to one or multiple 10 Gigabit fiber optic networks.

Wi-Fi Access Point (Models F101, F103, F201, F203, F301, F303)
Barracuda NG Firewall models F101, F103, F201, F203, F301 and F303 are equipped with a built in Wi-Fi access point to establish a wireless local area network according to IEEE 802.11 standards b and g with bandwidth of up to 108 Mbps.

XDSL / ADSL 2+ (Models F102, F103, F202, F303, F302, F303)
Barracuda NG Firewall models F102, F103, F202, F203, F302 and F303 are equipped with a built in ADSL 2+ modem to enable WAN connectivity and fast data transmission over copper telephone lines (POTS). Depending on the region deployed, the maximum downlink rate is 24 Mbps; maximum uplink rate is 3.58 Mbps.

3G USB Modem
All Barracuda NG Firewall models are equipped with high speed USB 2.0 ports. The firmware supports the use of 3G Wireless technology; also know as UTMS, HSDPA or HSUPA, for the Barracuda Networks supplied 3G USB Stick.

Barracuda NG Web Filter (Models F100 and higher)
The Barracuda NG Web Filter is a subscription option for Barracuda NG Firewall models F100 and above that enforces Internet usage policies by blocking access to Web sites and Internet applications that are not related to business. The Barracuda NG Web Filter content category database contains more than 100 million Web sites in 62 categories.

Barracuda NG Malware Protection (Models F100 and higher)
The Barracuda NG Malware Protection subscription option for Barracuda NG Firewall models F100 and higher provides gateway-based protection against malware, viruses, spyware, Dialers and other unwanted programs inside SMTP, HTTP, POP3 and FTP traffic.

Barracuda NG Web Security (Models F100 and higher)
The Barracuda NG Web Security subscription option for Barracuda NG Firewall models F100 and higher offers complete Web security and consists of a bundle of the Barracuda NG Web Filter and Barracuda NG Malware Protection.

Barracuda NG Secure Web Proxy (Models F600 and higher)
Subscription option for Barracuda NG Firewall models F600 and higher. The NG Secure Web Proxy option enables HTTPS traffic inspection to enable NG Malware Protection and NF Web Filter inside otherwise encrypted HTTPS traffic.

Barracuda SSL VPN and NAC (Models F200 and higher)
The Barracuda SSL VPN & NAC subscription is available for Barracuda NG Firewall models F200 and higher. The Barracuda NG SSL VPN enables secure, clientless remote access to internal network resources from almost any Web browser.

Network Access Control (NAC) restricts access to the network based on identity, security posture, presence of operating system patches, anti-virus and anti-spyware solutions. Barracuda NG SSL VPN and NAC supports NAC enforcement via IEEE 802.1X compatible routers and switches.

Model Comparison:

There are eleven hardware models of the Barracuda NG Firewall that can handle up to 21 Gbps of firewall and 4 Gbps of VPN throughput. All models are centrally manageable through the Barracuda NG Control Center.

• Model F10 - F300
• Model F400 - F900
• NG Control Center Models

Model Comparison	F10	F100	F200	F300
CAPACITY*
Firewall throughput (Mbps)*	150	150	350	350
VPN throughput (Mbps)***	85	85	160	160
IPS throughput (Mbps)*	-	33	84	84
Concurrent sessions	8,000	8,000	70,000	70,000
New Session/s	1,300	1,500	2,500	2,500
Web Security recommended users	-	5-10	50	50
HARDWARE
Form factor	Desktop mini	Desktop	Desktop	1U rack mount
Dimensions (in.)	1.2x9.4x6.1	2.0x14.2x7.5	2.0x14.2x7.5	1.8x16.9x13
Dimensions (cm.)	3.0x24.0x15.6	5.0x36.0x19.0	5.0x36.0x19.0	4.5x43.0x33.0
Weight (lbs./kg.)	4.4/2.0	7.7/3.5	7.9/3.6	9.9/4.5
Interfaces (std / max)	4x10/100	4x10/100	4x10/100	4x10/100
1Gb Fiber SFP NICs (std / max)	-	-	-	-
10Gb Fiber SFP+ NICs (std/max)	-	-	-	-
Max Power Draw (Amps)	1.6	1.6	1.6	1.6
Power Supply	Single, external	Single, external	Single, external	Single, external
Integrated Wi-Fi access point	-	F101	F201	F301
3G USB Modem	Optional	Optional	Optional	Optional
FEATURES
Firewall
IPsec VPN
Traffic Intelligence
Layer 7 Application Control
IPS
Barracuda Web Filter
WAN Compression
Spam Filter
NG Web Filter		Optional	Optional	Optional
NG Malware Protection		Optional	Optional	Optional
NG SSL VPN and NAC			Optional	Optional
NG Secure Web Proxy

* Firewall performance measured with large packets (MTU1500)
** Firewall performance measured with large packets (MTU9000)
*** VPN Throughput using AES128, NOHASH

Model Comparison	F400	F600	F800	F900
CAPACITY*
Firewall throughput (Gbps)*	1.8*	4.7*	9.2**	21.0**
VPN throughput (Mbps)***	430	950	1,450	3,780
IPS throughput (Mbps)*	486	1,316	2,852	4,650
Concurrent sessions	300,000	300,000	500,000	1,000,000
New Session/s	7,000	16,000	35,000	100,000
Web Security recommended users	100	250	1,000	2,000
HARDWARE
Form factor	1U rack mount	1U rack mount	1U rack mount	2U rack mount
Dimensions (in.)	1.7x16.8x14	1.7x16.8x15.6	1.7x17.0x20.5	3.5x17.4x26.0
Dimensions (cm.)	4.3x42.7x35.6	4.4x42.6x39.6	4.4x43.1x52.0	8.8x44.2x66.0
Weight (lbs./kg.)	12/5.4	18.7/8.5	28.6/13	39.6/18
Interfaces (std / max)	6x 1GbE + 1x 10/100	10x10/100/100	8/16 10/100/1000	0/24 10/100/1000 +1 MGMT 10/100
1Gb Fiber SFP NICs (std / max)	0/4	0/4	0/4	0/12
10Gb Fiber SFP+ NICs (std/max)	-	-	0/2	0/6
Max Power Draw (Amps)	1.6	1.6	5	5
Power Supply	Single, internal	Single, internal	Single, internal	Single, internal
Integrated Wi-Fi access point	-	-	-	-
3G USB Modem	Optional	Optional	Optional	Optional
FEATURES
Firewall
IPsec VPN
Traffic Intelligence
Layer 7 Application Control
IPS
Barracuda Web Filter
WAN compression
Spam Filter
NG Web Filter	Optional	Optional	Optional	Optional
NG Malware Protection	Optional	Optional	Optional	Optional
NG SSL VPN and NAC	Optional	Optional	Optional	Optional
NG Secure Web Proxy	-	Optional	Optional	Optional

* Firewall performance measured with large packets (MTU1500)
** Firewall performance measured with large packets (MTU9000)
*** VPN Throughput using AES128, NOHASH

Virtual appliance models are also available in 25, 50, 100, 250, 500 and 1000 user levels.

Barracuda NG Control Center Models

Model Comparison	Standard Edition		Enterprise Edition		Global Edition
Available models	C400	VC400 (Virtual Appliance)	C610	VC610 (Virtual Appliance)	VC820 (Virtual Appliance)
Maximum managed Gateways (recommended)	Unlimited (20)	Unlimited (20)	Unlimited (200)	-	Unlimited (depending on HW)
Multiy-tenancy	-	-	Yes, by way of configuration groupings	Yes, by way of configuration groupings	Yes, includes support for 5 tenants
Configuration Groupings	1	-	Unlimited	Unlimited	Unlimited
Hardware
Chassis	1U Full Size	-	2U Full Size	-	-
Network Interfaces	2 x Gigabit	-	2 x Gigabit	-	-
Redundant Disk Array (RAID)	-	-	RAID 5	-	-
Dimensions (in)	16.8x1.7x22.6	-	17.4x3.5x25.5	-	-
Dimensions (cm)	42.7x4.3x57.4	-	44.2x8.9x64.8	-	-
Weight (lbs/kg)	26/11.8	-	46/20.9	-	-
AC Input Current (Amps)	1.8	-	4.1	-	-
FEATURES
Multi-Administrator Support
Role-based Administration
Revision Control System
Central Statistics
Central Syslog Host / Relay
Firewall Audit Information Collector / Viewer
NG Access Monitor
Barracuda NG Earth	-	-
PKI Service	-	-
High Availability support	optional	optional	optional	optional	HA license included
Additonal Range for multi-tenancy	-	-	-	-	optional

Deployment:

The Barracuda NG Firewall offers comprehensive protection of distributed networks through a combination of hardware and virtual appliances at each office location and comprehensive VPN access options for remote users.

To centralize management across many different firewalls and remote access users, the Barracuda NG Control Center enables administrators to configure security and network access policies, control firmware update revisions, and manage user settings. Template-based configuration and globally available security objects enable efficient configuration across thousands of locations.

Barracuda NG Firewall appliances are available for locations of all sizes, ranging from the very small remote location to the headquarters or even data center.

For on the go users, the Barracuda NG Network Access Clients provide secure and convenient VPN access to the network. For internet kiosks or home computers where client software deployment is not appropriate, the Barracuda NG SSL VPN & NAC option provides secure access to vital network resources from any Web browser.

Administration:

 

Configuration

To centralize management across many different firewalls and remote access users, the Barracuda NG Control Center enables administrators to configure security and network access policies, control firmware, update revisions, and manage user settings. Template-based configuration and globally available security objects enable efficient configuration across thousands of locations.

The Barracuda NG Control Center supports multiple administrators simultaneously - even within the same configuration tree. Highly customizable administrative roles can be defined to delegate administrative capabilities for specific departments or locations.

Troubleshooting

All Barracuda NG Control Center and Barracuda NG Firewall appliances come with extensive network connectivity troubleshooting and visualization tools. Even for large networks it typically only takes a few mouse clicks to analyze and remediate a problem in the central audit log or access cache screen.

Statistics, logging and reporting

All Barracuda NG Firewall appliances include extensive logging and reporting capabilities. If multiple Barracuda NG Firewall appliances are managed via the Barracuda NG Control Center, logs, events and status information can be collated by the Barracuda NG Control Center.

Screenshots:

The following screenshots illustrate the graphical user interface of the Barracuda NG Firewall.

Barracuda NG Firewall FAQ:

What is a Next Generation Firewall?

Next generation firewalls are the successors of traditional firewall and unified threat management (UTM) devices. Traditional firewalls generally perform packet forwarding and blocking functions and often incorporate packet inspection techniques. UTM devices usually add content security functions but typically fail to tightly integrate those functions tightly with network management, network access and WAN connectivity capabilities of enterprise-class firewalls.

To protect networks in the presence of social media and other Web 2.0 applications, a next generation firewall infrastructure intelligently combines network security, content security, Layer 7 application profiling and network access control to detect application-specific attacks, enforce application-aware inbound and outbound access policies, and perform application-aware traffic routing and prioritization across the wide area network (WAN).

Based on over a decade of R&D and real-world deployments in over 1,000 of the most demanding enterprise customer environments, the Barracuda NG Firewall is the most advanced next generation firewall on the market today.

Why do I need a Next Generation Firewall?

Absent application awareness, existing firewall and UTM solutions will generally prove ineffective at dealing with a growing category of current and emerging threats. Even when best-of-breed point solutions can be utilized to provide protection along all threat vectors, such as email, Web, remote access, and IM, operational costs can typically be reduced through consolidation.

Beyond threat protection, application-awareness can dramatically improve traffic prioritization and routing decisions over site-to-site connections, resulting in cost reductions of MPLS, leased line, bandwidth, or 3G data charges associated with maintaining reliable WANs.

Through the Barracuda NG Control Center, the Barracuda NG Firewall delivers next generation firewall features with industry-leading centralized management, capable of scaling to thousands of firewalls with very little administrative overhead.

What are the major capabilities of the Barracuda NG Firewall?

The Barracuda NG Firewall is a next generation firewall and VPN that provides:

• Integrated content security and network access control
• Optimization of intelligent traffic flow across the WAN
• Industry-leading centralized management capabilities

Integrated content security and network access control:

Barracuda NG Firewall integrates a comprehensive set of next generation firewall technologies, including Web filtering, malware protection, intrusion prevention, anti-spam protection and Layer 7 application profiling.

Barracuda NG Firewalls include licenses for an unlimited number of IPSec site-to-site connections and IPSec clients through the Barracuda NG VPN Client. The Barracuda NG Firewall SSL VPN and NAC option adds a customizable and easy-to-use Web portal-based SSL VPN as well as sophisticated network access control (NAC) functionality. NAC allows enforcement of minimum Windows client security prerequisites before being allowed access to the network or access to a quarantine network. Security posture can be specified according to available Windows patch level, availability of anti-virus and/or anti-spyware and user ID. The Barracuda NG Network Access Client also adds support for 802.1x port based security for 802.1x enabled routers and switches.

Optimization of intelligent traffic flow across the WAN:

The Barracuda NG Firewall provides application-aware traffic management and prioritization across the WAN, featuring adaptive routing based on network traffic conditions and link status. In addition, through Barracuda NG Control Center, administrators can efficiently monitor VPN tunnels and firewall status.

Industry Leading Centralized Management Capabilities:

To centralize management across many different firewalls and remote access users, the Barracuda NG Control Center enables administrators to configure security and network access policies, control firmware update revisions, and manage user settings. Template-based configuration and globally available security objects enable efficient configuration across thousands of locations.

The Barracuda NG Control Center supports multiple administrators simultaneously - even within the same configuration tree. Highly customizable administrative roles can be defined to delegate administrative capabilities for specific departments or locations.

What are the differences in levels between the Barracuda NG Control Center editions?

The Barracuda NG Control Center is offered at three levels - Standard Edition, Enterprise Edition and Global Edition. All Barracuda NG Control Center levels enable administration of an unlimited number of Barracuda NG Firewall platforms. The Standard Edition allows for a single configuration group. The Enterprise Edition allows for an unlimited number of configuration groups for a single enterprise / tenant or “range.” The Global Edition is designed for service providers who service multiple tenants and allows for separate and secluded configuration trees for each “range.”

What application proxies are included?

The Barracuda Networks NG Firewalls include application layer proxies for HTTP, HTTPS (optional), FTP, SSH as well as a generic TCP and SOCKS proxy.

What is Layer 7 application profiling?

Application identification techniques in traditional firewalls typically rely on layer 3 (destination IP address) or layer 4 (TCP port / protocol) definitions.

Next generation firewalls utilizing Layer 7 application profiling can identify and enforce policy on more sophisticated applications which may hide their traffic inside otherwise “safe” port/protocols such as HTTP. Skype and peer-to-peer (P2P) applications are particularly notorious for requiring Layer 7 application profiling for policy enforcement.

The Barracuda NG Firewall integrates Layer 7 application profiling into its core firewall functions, enabling enforcement of policy based on user ID, security policy, location, and time of day. Policy actions can include blocking, allowing, throttling, or even enabling or disabling of specific application features.

What user authentication methods are supported?

The Barracuda NG Firewall can authenticate users and enforce user-aware policy using Active Directory, NTLM, MC CHAP, RADIUS, RSA SecurID, LDAP/LDAPS, TACACS+, and x.509 certificates.

Does the Barracuda NG Firewall help my organization troubleshoot network problems?

All Barracuda NG Control Center and Barracuda NG Firewall appliances come with extensive network connectivity troubleshooting and visualization tools. Even for large networks it typically only takes a few mouse clicks to analyze and remediate a problem in the central audit log or access cache screen.

What if I am not looking to replace my entire firewall infrastructure?

In addition to the Barracuda NG Firewall, Barracuda Networks offers a set of best-of-breed point solutions to address your needs if you are not looking yet to replace your entire firewall infrastructure. Relevant point solutions include:

• Email security: Barracuda Spam & Virus Firewall
• Web filtering: Barracuda Web Filter or Barracuda Purewire Web Security Service
• Layer 7 application profiling: Barracuda Web Filter
• SSL VPN: Barracuda SSL VPN
• Site-to-site IPSec VPN: Barracuda Link Balancer
• Link load balancing: Barracuda Link Balancer

What appliance models are recommended for my organization?

The Barracuda NG Firewall is a family of hardware and virtual appliances designed to service next generation firewall capabilities to all office locations of enterprise networks. This includes very small remote locations, home offices, branch offices, headquarters and data centers. Typically, Barracuda NG Firewall models are sized based on firewall throughput, VPN throughput, concurrent connections, and the features selected. For more information, please contact your Barracuda Networks systems engineer.

Does the Barracuda NG Firewall involve per user fees for VPN client or SSL VPN client usage?

No. The Barracuda NG Firewall models include a license to an unlimited number of Barracuda NG VPN clients. With the purchase of the Barracuda SSL VPN and NAC option, there is no licensed limit to the number of Barracuda NG Network Access clients or Barracuda NG SSL VPN users.

What is the pricing?

The Barracuda NG Firewall comes in seven base hardware configurations, ranging from very small office to data center locations. Entry level pricing for the Barracuda NG Firewall F10 starts at $599.

What is included in the Energize Updates subscription for the Barracuda NG Firewall?

Energize Updates from Barracuda Central deliver updates on the extensive library of definitions for intrusion prevention and Layer 7 application profiling. In addition, Energize Updates subscriptions also provide access to Basic Support, Firmware Maintenance and optional participation in the Barracuda Early Release Firmware program.

Is there a warranty?

There is a one year warranty against manufacturing defects in the USA and Canada.

When will the Barracuda NG Firewall be available?

The Barracuda NG Firewall is available immediately for sale in North America with the ability to ship to remote customer locations across the world. Please contact your Barracuda Networks sales representative for more information.

What if I have more questions about the Barracuda NG Firewall?

For additional assistance or for a product demonstration of the Barracuda NG Firewall, please contact us.

Documentation:

Download the Barracuda Networks NG Firewall Data Sheet (PDF)