
Barracuda CloudGen Firewall Appliance F193
Next-Generation Firewalls for Distributed Enterprises with Advanced Threat Detection

List Price:
Our Price: $3,800.00
List Price:
Our Price: $2,660.00
List Price:
Our Price: $2,660.00
List Price:
Our Price: $672.60
Click here to jump to more pricing!
Barracuda CloudGen Firewall F-Series:
Operating industrial control systems (ICS) in a secure way and integrating operational technology (OT) adds new challenges to the current standard means of protection and security management.
Barracuda CloudGen Firewall rugged appliances are the perfect fit for special requirements in regards to usability and operating concepts for industrial and harsh environments.
Full next-generation security:
Barracuda CloudGen Firewall is designed and built from the ground up to provide comprehensive, next-generation firewall protection. Firewalling, IPS, dual antivirus and application control (including industrial protocols and subprotocols) take place directly in the data path.
More resource-intensive tasks like sandboxing —required for protecting against ransomware—are seamlessly integrated in the cloud. All CloudGen Firewall platforms and models provide the same level of security, maintaining maximum security for micro-segmentation for Operational Technology with local enforcement of highest security levels.
Security meets OT
ICS/OT security projects have to combine two operating concepts: while the individual firewall is part of hundreds to thousands of other similar firewalls that follow similar policies and ensure that all security components function in a traceable and controllable manner, the very same firewall is one of many different components of a system that has to be integrated into operation and maintenance concepts.
Secure remote access for OT
For operational technology protected by CloudGen Firewall, secure remote access capabilities make it extremely convenient to grant secure, temporary VPN access to sensitive parts of manufacturing assets for third-party-maintenance providers.
Benefits:
|
|
|
|
|
|
Features:
Security
Barracuda ATP offers Administrators granular, file-type-based control including automatic quarantine and block-listing features to maintain the highest level of protection for an organization’s network.
- SQL injections and arbitrary code executions
- Access control attempts and privilege escalations
- Cross-Site Scripting and buffer overflows
- Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks
- Directory traversal and probing and scanning attempts
- Backdoor attacks, Trojans, rootkits, viruses, worms, and spyware
Additionally, Barracuda CloudGen Firewall allows the definition of a rate limit that is applied to the maximum number of sessions per source address to be handled by the firewall. Packets arriving at a rate faster than allowed will simply be dropped. In a massive DDoS attack, the attackers may simply aim for saturating the link by transmitting vast numbers of UDP packets. The integrated environmental monitoring feature of Barracuda CloudGen Firewall diagnoses such conditions by link and target address monitoring. Once the response of a remote target address to regular ICMP probing fails, the system can be configured to activate different routes and uplinks (for example backup line, ISDN, xDSL). Using this feature, traffic will be unimpeded across unaffected lines and crucial site-to-site and site-to-Internet connectivity remains operational.
Connectivity & SD-WAN
- Endpoint-to-Endpoint (not network-to-network) connectivity
- NAT friendliness
- Multiple physical transport paths for a logical tunnel
- Multiple tunnels between two locations
- HTTPS and SOCKS4/5 proxy compatibility
- Dynamic Address Support
- Tunnel heartbeat monitoring
Barracuda CloudGen Firewall provides a large set of QoS techniques, such as traffic shaping, traffic prioritization, and bandwidth partitioning, which assigns a bandwidth limit to certain types of traffic. To select traffic for different priority classes, the available real-time traffic analysis can be used to identify whether network traffic was sent by business-critical applications or by potentially unwanted applications.
By implementing enterprise-grade WAN acceleration features such as data deduplication, traffic compression, and protocol optimization, Barracuda CloudGen Firewalls can significantly improve site-to-site WAN traffic and increase productivity by accelerating the delivery of business applications - at no extra charge. WAN traffic can be effectively compressed up to 95 percent, significantly reducing the bandwidth needed at remote locations while increasing network responsiveness.
Specifications:
Front View
Barracuda CloudGen Firewall F193A.R | |
---|---|
Throughput | |
Firewall1 | 2.1 Gbps |
SD-WAN2 | 320 Mbps |
IPS3 | 790 Mbps |
NGFW4 | 800 Mbps |
Threat protection5 | 700 Mbps |
Recommended no. of concurrent users | 75 - 150 |
Concurrent Sessions | 100,000 |
New Sessions per Second | 9,000 |
Hardware | |
Form Factor | Compact, DIN rail mount |
Dimensions (WxDxH; in) | 2.67 x 5.9 x 5.11 |
Dimensions (WxDxH; cm) | 6.8 x 15 x 13 |
Weight (lbs) | 3.1 |
Weight (kg) | 1.4 |
1 GbE Copper Ethernet NICs | 5x1 GbE |
1 GbE Fiber NICs (SFP) | 2x1 GbE |
10 GbE Fiber NICs (SFP+) | n/a |
40 GbE Fiber NICs (QSFP) | n/a |
Max Storage | 100 GB or better |
Power Supply | Phoenix 4-pin |
Integrated Wi-Fi Access Point | n/a |
Features | |
Firewall incl.IPS | |
Application Control | |
Dynamic Routing | |
App-Based Provider Selection | |
Remote access | |
SSL Interception | |
Secure SD-WAN | |
Web Filter | |
Zero-Touch Deployment | |
Advanced Threat Protection | Optional |
Malware Protection | Optional |
Advanced Remote Access | Optional |
Reporting with Firewall Insights | Optional |
1 Firewall throughput measured with large UDP packets (MTU1500), bidirectional across multiple ports, utilizing highest available port density
2 SD-WAN performance is based on 1415 Byte UDP packets, bidirectional using BreakingPoint traffic generator
3 IPS throughput is measured using large UDP packets (MTU1500) and across multiple ports, utilizing highest available port density.
4 NGFW throughput is measured with IPS, application control, and web filter enabled, based on BreakingPoint Realworld-IPS-Enterprise-Traffic-Mix, bidirectional across multiple ports, utilizing highest available port density
5 Threat protection throughput is measured with IPS, application control, web filter, antivirus, and SSL inspection enabled, based on BreakingPoint Realworld-IPS-Enterprise-Traffic-Mix, bidirectional across multiple ports.
Technical Specifications:
Firewall
- Stateful packet inspection and forwarding
- Full user-identity awareness
- IDS/IPS
- Application control and granular application enforcement
- Interception and decryption of SSL/TLS encrypted applications
- Antivirus and web filtering in single pass mode
- Email security
- SafeSearch enforcement
- Google Accounts Enforcement
- Denial of Service protection (DoS/DDoS)
- Spoofing and flooding protection
- ARP spoofing and trashing protection
- DNS reputation filtering
- NAT (SNAT, DNAT), PAT
- Dynamic rules / timer triggers
- Single object-oriented rule set for routing, bridging, and routed bridging
- Virtual rule test environment
- Network security orchestration with tufin SecureTrack
Protocol support
- IPv4, IPv6
- BGP/OSPF/RIP
- VoIP (H.323, SIP, SCCP [skinny])
- RPC protocols (ONC-RPC, DCE-RPC)
- 802.1q VLAN
- Industrial protocols and subprotocols (S7, S7+, IEC 60870-5- 104, IEC 61850, MODBUS, DNP3)
Intrusion detection and prevention
- Protection against exploits, threats and vulnerabilities
- Packet anomaly and fragmentation protection
- Advanced anti-evasion and obfuscation techniques
- Automatic signature updates
Infrastructure services
- DHCP server, relay
- SIP and HTTP proxies
- SNMP and IPFIX support
- JSON lifecycle automation API
- Auto VPN via API and script control
- Authoritative DNS server
- DNS server
- DNS cache
- Wi-Fi (802.11n) on selected models
- Built-in support for Azure Virtual WAN
Remote and Zero Trust Access
- Network access control
- iOS and Android mobile device support
- Two-factor authentication via timebased one-time passwords (TOTP), Radius, or RSA MFA (requires an active Advanced Remote Access subscription) for remote access clients
- Multi-factor authentication for browser-based remote access and CudaLaunch
- Barracuda CloudGen Access support - CloudGen Access Proxy service included with every CloudGen Firewall for quick ZeroTrust-Access rollout
Advanced threat protection
- Dynamic, on-demand analysis of malware programs (sandboxing)
- Dynamic analysis of documents with embedded exploits (PDF, Office, etc.)
- Detailed forensic analysis
- Botnet and spyware protection
- TypoSquatting and link protection for email
Central management options via Barracuda Firewall Control Center
- Administration for unlimited firewalls
- Support for multi-tenancy
- Multi-administrator support & RCS
- Zero-touch deployment
- Enterprise/MSP licensing
- Template & repository-based management
- REST API
High Availability
- Active-passive
- Transparent failover without session loss
- Encrypted HA communication
Self-Healing SD-WAN
- Drag & drop configuration
- Optimized direct internet uplink selection
- Internet uplink optimization (forward error correction)
- Simultaneous use of multiple uplinks (transports) per SD-WAN connection
- FIPS 140-2 certified cryptography
- On-demand direct connection creation between remote spoke locations based on application type
- Dynamic bandwidth detection
- Performance-based transport selection
- Application-aware traffic routing
- Adaptive session balancing across multiple uplinks
- Application-based provider selection
- Traffic shaping and QoS
- Built-in data deduplication
Barracuda Energize Updates
- Standard technical support
- Firmware updates
- IPS signature updates
- Application control definition updates
- Web filter updates
- Barracuda CloudGen Access support
Instant Replacement Service
- Replacement unit shipped next business day
- 24/7 technical support
- Free hardware refresh every four years
Barracuda Firewall Insights
Consolidates security, application flow, and connectivity information from hundreds or even thousands of firewalls on the extended wide area network – regardless of whether they are hardware, virtual, or cross-cloudbased deployments.
Malware Protection
Provides gateway-based protection against malware, viruses, spyware, and other unwanted programs inside SMTP/S, HTTP/S, and FTP/S traffic.
Advanced Threat Protection
Prevents from network breaches, identifies zero-day malware exploits, targeted attacks, advanced persistent threats and other advanced malware.
Advanced Remote Access
Provides a customizable and easy-touse browser-based remote access as well as sophisticated network access control (NAC) functionality and CudaLaunch support.
Documentation:
Download the Barracuda Networks CloudGen Firewall Data Sheet (PDF)
Download the Barracuda Networks CloudGen Firewall Product Overview (PDF)
Download the Barracuda Networks CloudGen Firewall Rugged Data Sheet (PDF)
Pricing Notes:
- Pricing and product availability subject to change without notice.
List Price:
Our Price: $3,800.00
List Price:
Our Price: $2,660.00
List Price:
Our Price: $2,660.00
List Price:
Our Price: $672.60
List Price:
Our Price: $752.40
List Price:
Our Price: $275.88
List Price:
Our Price: $672.60
List Price:
Our Price: $535.80
List Price:
Our Price: $820.80
List Price:
Our Price: $672.60
List Price:
Our Price: $376.20
List Price:
Our Price: $752.40
List Price:
Our Price: $672.60
List Price:
Our Price: $275.88
List Price:
Our Price: $535.80
List Price:
Our Price: $820.80
List Price:
Our Price: $1,330.00
List Price:
Our Price: $672.60
List Price:
Our Price: $142.50