Barracuda Web Application Firewall Vx is a virtual appliance providing complete and powerful security for Web applications and Web sites. It offers every capability needed to deliver, secure and manage enterprise Web applications from a single appliance through an intuitive, real-time user interface.

• Single point of protection for inbound and outbound traffic for all Web applications
• Protects Web sites and Web applications against application layer attacks
• Delivers best practices security right out of the box
• Monitors traffic and provides reports about attackers and attack attempts

Comprehensive Website Protection

The Barracuda Web Application Firewall provides award-winning protection from all common attacks on Web applications, including SQL injections, cross-site scripting attacks, session tampering and buffer overflows. Barracuda Web Application Firewall is designed to combat all attack types that have been categorized as significant threats, including:

• Injection flaws
• Cross Site Scripting (XSS)
• Cross Site Request Forgery (CSRF)
• Application denial of service
• Cookie/session tampering
• Session hijacking
• Site reconnaissance
• Malicious probes/crawlers
• Information leakage
• Viruses
• XML-based attacks

Application Access Control

The Barracuda Web Application Firewall implements a single point for policy enforcement and control, which includes authentication to ensure that users are known, access control policy for resources and protection against data leakage. Capabilities include:

• LDAP and RADIUS integration. For authentication and authorization, the Barracuda Web Application Firewall integrates with common authentication services, including Active Directory and other LDAP-compatible directories as well as RADIUS servers.
• Two-Factor Authentication. To verify a user's identity, the Barracuda Web Application Firewall supports two factor authentication using client certificates or hardware tokens.
• Simple Single Sign-On (SSO) portal. By combining built-in authentication and authorization capabilities with Web address translation and cookie session management features, administrators utilize the Barracuda Web Application Firewall to present a simple front-end portal to back-end applications without requiring changes to source code, IP addressing or the server infrastructure.
• Website Access Control. Barracuda Web Application Firewalls provides access control capabilities to limit access to authenticated and authorized users. Customers can set granular policies to manage which users have access to what portions of your website.

High Availability & Application Acceleration

The Barracuda Web Application Firewall can be deployment in High Availability clusters to ensure website availability. It also has load balancing and traffic acceleration capabilities that increase the performance and scalability of web applications.

• High Availability clustering
• L4/L7 Load Balancing
• SSL Offloading
• SSL Acceleration
• Caching
• Compression
• TCP pooling

Barracuda Web Application Firewall Vx

Edition Comparison	BWF 360Vx	BWF 460Vx	BWF 660Vx
Backend Servers Supported	1-5	5-10	10-25
Inbound Web Traffic	25 Mbps	50 Mbps	100 Mbps
Number of CPU Cores Allowed	2	3	4
HTTP Transactions/sec	3,000	6,000	9,000
SSL Transactions/sec	2,000	4,000	6,000
HTTP/HTTPS/FTP Protocol Validation
Protection Against Common Attacks
Form Field Meta Data Validation
Web Site Cloaking
Response Control
Outbound Data Theft Protection
Granular Policies to HTML Elements
Protocol Limit Checks
File Upload Control
Logging, Monitoring and Reporting
High Availability
SSL Offloading
Authentication and Authorization
LDAP/RADIUS Integration
Load Balancing
Content Routing
RSA SecurID
CA SiteMinder
XML Firewall
Adaptive Profiling
Anti Virus checks for file uploads