Features & Benefits of Barracuda Web Application Firewall

Traditionally, system administrators lock down host computers through a network firewall in order to ensure network security. While a typical network firewall can help restrict traffic to HTTP and HTTPS, as this traffic can contain command exploits leveraging vulnerabilities in the Web application itself. These exploits can result in data leakage, site defacement and other attacks by hackers that compromise both the privacy and integrity of vital data. Businesses of all sizes that operate their own Web applications should ensure that their Web sites are protected against application vulnerabilities.

The Barracuda Web Application Firewall provides complete protection of Web applications and is designed to enforce policies for both internal and external data security standards, such as Payment Card Industry Data Security Standard (PCI DSS). At the same time the Barracuda Web Application Firewall 460 and higher models feature a comprehensive set of application delivery capabilities designed to improve the performance, scalability and manageability of today’s most demanding data center infrastructures.

The Barracuda Web Application Firewall proxies all of your Web site traffic, providing complete protection in front of your Web sites. Capabilities include:

The Barracuda Web Application Firewall implements a single point for policy enforcement and control, which includes authentication to ensure that users are known, access control policy for resources and protection against data leakage. Capabilities include:

In addition to the comprehensive security benefits of the Barracuda Web Application Firewall, there are also additional operational capabilities available in the Barracuda Web Application Firewall. Capabilities include:

The Barracuda Web Application Firewall features advanced capabilities to provide immediate feedback to the operations team that deploy, manage and secure mission critical applications. Capabilities include:

Barracuda Web Application Firewall Demo Video

Model Comparison of Barracuda Web Application Firewall

Model Comparison	Model 360	Model 460	Model 660	Model 860	Model 960
CAPACITY*
Backend Servers Supported	1-5	5-10	10-25	25-150	150-300
Inbound Web Traffic	25 Mbps	50 Mbps	100 Mbps	600 Mbps	1 Gbps
HTTP Transactions/sec	3,000	6,000	10,000	25,000	55,000
SSL Transactions/sec	2,000	4,000	6,000	12,000	20,000
HARDWARE
Rackmount Chassis	1U Mini	1U Mini	1U Full Size	2U Full Size	2U Full Size
Dimensions (in.)	16.8x1.7x14	16.8x1.7x14	16.8x1.7x22.6	17.4x3.5x25.5	17.4x3.5x25.5
Dimensions (cm.)	42.7x4.3x35.6	42.7x4.3x35.6	42.7x4.3x57.4	44.2x8.9x64.8	44.2x8.9x64.8
Weight (lbs. /kg.)	12/5.4	12/5.4	26/11.8	46/20.9	52/23.6
Front Ethernet Ports	2x10/100	2xGigabit	2xGigabit	2xGigabit	2xGigabit
Back Ethernet Ports	1x10/100	1x10/100	1xGigabit	1xGigabit	1xGigabit
AC Input Current (Amps)	1.2	1.4	1.8	4.1	5.4
ECC Memory
Redundant Power Supply
FEATURES
HTTP/HTTPS/FTP Protocol Validation
Protection Against Common Attacks
Form Field Meta Data Validation
Web Site Cloaking
Response Control
Outbound Data Theft Protection
Granular Policies to HTML Elements
Protocol Limit Checks
File Upload Control
Logging, Monitoring and Reporting
High Availability
SSL Offloading
Authentication and Authorization
LDAP/RADIUS Integration
RSA SecurID
CA SiteMinder
Load Balancing
Content Routing
XML Firewall

Barracuda Web Application Firewall FAQs

• What does the Barracuda Web Application Firewall do?
  
• Why do I need a Web Application Firewall?
  
• What are the major capabilities and benefits of the Barracuda Web Application Firewall?
  
• How does the Barracuda Web Application Firewall detect and mitigate threats?
  
• Can the Barracuda Web Application Firewall help my company comply with the Payment Card Industry Data Security Standard (PCI DSS)?
  
• What logging, monitoring and reporting features are available with the Barracuda Web Application Firewall?
  
• Will the Barracuda Web Application Firewall fit into my existing network environment?
  
• How do I know which Barracuda Web Application Firewall model is best suited to my needs?
  
• What if I have more questions about the Barracuda Web Application Firewall?
  

What does the Barracuda Web Application Firewall do?

The Barracuda Web Application Firewall protects your Web site from attackers leveraging protocol or application vulnerabilities to instigate unauthorized access, data theft, denial of service (DoS), or defacement of your Web site.

The Barracuda Web Application Firewall provides complete protection of Web applications and is designed to enforce policies for both internal and external data security standards, such as the Payment Card Industry Data Security Standard (PCI DSS). At the same time, the Barracuda Web Application Firewall features a number of traffic management capabilities designed to improve the performance, scalability and manageability of today’s most demanding data center infrastructures.

Why do I need a Web Application Firewall?

Businesses of all sizes that operate their own Web applications should deploy a powerful Web Application Firewall to protect their Web sites from application vulnerabilities.

Traditionally, security has been considered a network issue, where system administrators lock down host computers through a network firewall. While a typical network firewall can help restrict traffic to HTTP and HTTPS, this traffic can contain command exploits leveraging vulnerabilities in the Web application itself. Without the Barracuda Web Application Firewall acting as an application firewall, a hacker’s attack can result in unauthorized access, data leakage, site defacement and/or other attacks that compromise both the privacy and integrity of vital data.

What are the major capabilities and benefits of the Barracuda Web Application Firewall?

The major capabilities and benefits of the Barracuda Web Application Firewall include:

• Comprehensive Web Site Protection: The Barracuda Web Application Firewall proxies all Web traffic, providing complete protection in front of your Web sites. Web site protection capabilities include: HTTP protocol compliance, protection against common/high-visibility attacks, protection against attacks based on session state, online form field validation, outbound data theft protection, Web site cloaking, anti-Web crawling and application denial of service (DoS) protection, as well as fine-grain controls.
• Application Access Control: The Barracuda Web Application Firewall provides PKI support to provide certificate verification and prevents cookie tampering to ensure hidden or read-only form fields are not changed by the user.
• Application Delivery and Acceleration: In addition to the security and access control benefits of Barracuda Web Application Firewall, there are also additional operational capabilities. Capabilities include SSL offloading, SSL acceleration, load balancing and high availability.
• Logging, Monitoring and Reporting: The Barracuda Web Application Firewall features advanced capabilities to provide immediate feedback to operations teams that deploy, manage and secure mission critical applications. Besides a system log, Web firewall log, traditional Web log and audit log, the Barracuda Web Application Firewall also provides specific reports relevant to PCI compliance.

How does the Barracuda Web Application Firewall detect and mitigate threats?

The Barracuda Web Application Firewall provide award-winning protection from all common attacks on Web applications, including SQL injections, cross-site scripting attacks, session tampering and buffer overflows. As a full proxy, the Barracuda Web Application Firewall provides comprehensive inbound and outbound protection. By inspecting request traffic, the Barracuda Web Application Firewall can block inbound attacks and cloak Web sites from hackers, while response traffic inspection prevents sensitive data leakage, such as credit card or Social Security numbers.

In addition, the Barracuda Web Application Firewall secures applications from unauthorized user access a full PKI integration for use with client certificates.

Can the Barracuda Web Application Firewall help my company comply with the Payment Card Industry Data Security Standard (PCI DSS)?

Yes, the Barracuda Web Application Firewall assists organizations that store, process and/or transmit credit card numbers to comply with the Payment Card Industry - Data Security Standard (PCI DSS) requirements.

As major credit card companies are increasing pressure on merchants to comply with the PCI DSS, many e-commerce businesses are seeking solutions to meet requirement 6.6 of PCI DSS calling for either detailed custom application code reviews or installation of a Web Application Firewall by June 30, 2008. Failure to comply with these security standards may result in fines, restrictions or permanent expulsion from card acceptance programs. Through multiple advanced features, the Barracuda Web Application Firewall can help organizations easily become PCI DSS compliant.

What logging, monitoring and reporting features are available with the Barracuda Web Application Firewall?

Logging monitoring and reporting capabilities of Barracuda Web Application Firewall include:

• Comprehensive logging. The Barracuda Web Application Firewall maintains a rich set of logs on the appliance, including system activity, Web Firewall activity, Web services activity, network firewall activity and traditional Web logs.
• PCI reports. The Barracuda Web Application Firewall provides a quick snapshot of application attacks defined in the PCI DSS Section 6.5, including unvalidated input, broken access control, cross-site scripting and so on.
• Syslog support. The Barracuda Web Application Firewall forwards logs to a syslog server for centralized and persistent storage or analysis by a third party tool.

Will the Barracuda Web Application Firewall fit into my existing network environment?

Yes, the Barracuda Web Application Firewall is designed to easily fit into any existing data center environment and to rapidly secure and accelerate new and existing Web applications. Barracuda Networks offers the most flexible array of Barracuda Web Application Firewall deployment options, including both Bridge-path and Route-path.

How do I know which Barracuda Web Application Firewall model is best suited to my needs?

A regional Barracuda Networks sales representative can evaluate your network environment and Web usage needs to help determine which model(s) is the best fit for your company.

What if I have more questions about the Barracuda Web Application Firewall?

For additional assistance or for a product demonstration of the Barracuda Web Application Firewall, please contact barracudastore at 866.892.5081 (Toll-Free)