Barracuda Web Site Firewall Deployment

Standard Deployment Configuration:

The Barracuda Web Site Firewall is designed to easily fit into any existing data center environment and to rapidly secure and accelerate new and existing Web applications. Barracuda Networks offers the most flexible array of Barracuda Web Site Firewall deployment options, including both Bridge-path and Route-path.

Bridge-path:

Bridge-path, the recommended mode of implementation for most customers with existing Web application traffic, enables simple and fast deployment without requiring any IP address changes on either the front- or back-end Web servers or network devices. The bridge is transparent, so no user traffic is disrupted.

Route-path:

Route-path provides the highest degree of protection for a Web application infrastructure by acting as a full reverse proxy for all Web application traffic. As a reverse proxy, Route-path allows only predefined traffic that adheres to security policies. Additionally, the reverse proxy controls the only route to the back-end network, so traffic cannot flow to any server unless specifically forwarded by the proxy. This is the most flexible deployment mode because it facilitates the content-based traffic management functions of the Barracuda Web Site Firewall.

Fault Tolerant Barracuda Web Site Firewall Environment:

Some organizations may need only a single Barracuda Web Site Firewall. When inline in Bridge-path mode, the Barracuda Web Site Firewall’s Ethernet Hard Bypass ensures reliable application delivery. For Web applications with stringent security requirements, the Barracuda Web Site Firewall may be installed in a redundant pair configuration, providing real-time application state replication so that security and user sessions will not be compromised during a failover event.

Configuration and Policy Administration:

Configuration of the Barracuda Web Site Firewall is accomplished through a secure Web-based interface, featuring a comprehensive online help system.

Initial application definition is made simple through comprehensive default security policies that also allow the administrator to specify more fine-grain rules. Features such as automatic rule creation from log entries enable administrators to easily maintain security policies even as applications change.

Reporting:

The Barracuda Web Site Firewall's administrative tools feature statistical reporting that allow you to visualize both overall Web traffic levels as well as the levels of traffic filtered for either policy or security reasons.

The Barracuda Web Site Firewall basic status page provides a quick snapshot of statistics on common attacks, subscription status, performance statistics, as well as hourly and daily attacks and bandwidth usage.