Barracuda NextGen Firewall F Vx

Scalable Security for the Enterprise

Download PDF

Overview

Enterprise networks grow larger and more complex every day - and more critical to key business operations. The Barracuda NextGen Firewall F-Series Vx is an essential tool to optimize performance, security, and availability of today's dispersed enterprise SD-WANs.

The Barracuda Advantage

Effective WAN Management

  • Application-based traffic prioritization across the WAN
  • Intelligent uplink balancing
  • Intelligent traffic reprioritization on uplink loss

Enterprise Readiness

  • Industry-leading centralized management
  • WAN optimization
  • Global WAN monitoring with Barracuda Earth

Scalable Security

  • Cloud Enablement and secure WAN Virtualization
  • Drag-and-drop VPN graphical tunnel interface

Product Spotlight

  • Powerful next-generation network firewall
  • Advanced Threat Protection (incl. sandboxing)
  • Built-in web security and IDS/IPS
  • Dynamic mesh site-to-site VPN
  • Client-to-Site VPN via browser (SSL VPN), mobile apps and desktop VPN clients
  • Full application visibility and granular control
  • Intelligent traffic regulation including application-based provider selection
  • Tightly integrated Quality of Service (QoS) and link balancing
  • Centralized management of all functionality
  • Template-based and role-based configuration
  • Available for VMware, XenServer, KVM, and Hyper-V

Integrated Next-Generation Security

The Barracuda NextGen Firewall F-Series Vx is designed and built from the ground up to provide comprehensive, next-generation firewall capabilities. Based on application visibility, user-identity awareness, intrusion prevention, and centralized management, the F-Series Vx is the ideal solution for today’s dynamic enterprises as it is fully compatible with VMware, XenServer, KVM, and Hyper-V virtualization.

True Enterprise Readiness

The Barracuda NextGen Firewall F-Series Vx meets the enterprise requirements for massive scalability and efficient management across dispersed networks. Integrated WAN optimization and centralized management enable organizations to increase system availability while keeping administrative time and operation costs low.

Regaining Control of User Activity

The Barracuda NextGen Firewall F-Series Vx restores control to networks made opaque and unmanageable by mobile devices at work, Web 2.0 applications, increasing dispersion, and the growing integration and dependence on cloudbased resources. It extends security coverage beyond network boundaries, and makes it easy to monitor and regulate everything the network and its users are doing.

The Barracuda NextGen Firewall F-Series' dashboard provides real-time information and summaries of what is going on in an organization's network
"Recently I tried one of these dedicated products to protect of advanced persistent threats. After one month of extensive monitoring it turned out that our Barracuda NextGen Firewall F protects our infrastructure so well, that we can continue to focus on actual business problems. Having chosen the right firewall still saves us money and time every day."

- Chief Information Officer, Union of Turkish Bar Associations

Technical Specs

Technical Specs

Firewall

  • Stateful packet inspection and forwarding
  • Full user-identity awareness
  • Intrusion Detection and Prevention System (IDS/IPS)
  • Application control and granular application enforcement
  • Interception and decryption of SSL/TLS encrypted applications
  • Antivirus and web filtering in single pass mode
  • SafeSearch enforcement
  • Google Accounts Enforcement
  • Denial of Service protection (DoS/DDoS)
  • Spoofing and flooding protection
  • ARP spoofing and trashing protection
  • DNS reputation filtering
  • TCP stream reassembly
  • Transparent proxying (TCP)
  • NAT (SNAT, DNAT), PAT
  • Dynamic rules / timer triggers
  • Single object-oriented rule set for routing, bridging, and routed bridging
  • Virtual rule test environment

Hypervisor Support

  • VMware
  • Hyper-V
  • XenServer
  • KVM

User Identity Awareness

  • Terminal Server Agent
  • Domain Controller Agent
  • Authentication – supports x.509, NTLM, RADIUS, RSA SecurID, LDAP/LDAPS, Active Directory, TACACS+, SMS Passcode (VPN), local authentication database

Intrusion Detection & Prevention

  • Protection against exploits, threats and vulnerabilities
  • Packet anomaly and fragmentation protection
  • Advanced anti-evasion and obfuscation techniques
  • Automatic signature updates

Traffic Optimization

  • Link monitoring, aggregation, and failover
  • Dynamic routing
  • Application-based provider selection
  • Traffic shaping and QoS
  • On-the-fly flow reprioritization
  • Stream and packet compression
  • Byte-level data deduplication
  • Protocol optimization (SMBv2)

Advanced Threat Protection

  • Dynamic, on-demand analysis of malware programs (sandboxing)
  • Dynamic analysis of documents with embedded exploits (PDF, Office, etc.)
  • Detailed forensics for both, malware binaries and web threats (exploits)
  • Support for multiple operating systems (Windows, Android, etc.)
  • Botnet and Spyware Protection
  • Flexible malware analysis in the cloud

VPN

  • Drag & drop VPN tunnel configuration
  • Secure site-to-site, client-to-site VPN
  • Dynamic mesh site-to-site VPN
  • Supports AES-128/256, 3DES, DES, Blowfish, CAST, null ciphers
  • Private CA or external PKI
  • VPNC certified (basic interoperability)
  • Application-aware traffic routing
  • IPsec VPN / SSL VPN / TINA VPN/ L2TP / PPTP
  • Network Access Contro
  • iOS and Android mobile device VPN support

High Availability

  • Active-active (requires external load balancer) or active-passive
  • Transparent failover without session loss
  • Network notification of failover
  • Encrypted HA communication

Central Management Options

  • Barracuda NextGen Control Center
    • Unlimited firewalls
    • Support for multi-tenancy
    • Multi-administrator support & RCS

Infrastructure Services

  • DHCP server, relay
  • SIP, HTTP, SSH, FTP proxies
  • SNMP and IPFIX support
  • DNS Cache
  • SMTP gateway and SPAM filter

Protocol Support

  • IPv4, IPv6, ARP
  • BGP/OSPF/RIP
  • VoIP (H.323, SIP, SCCP [skinny])
  • RPC protocols (ONC-RPC, DCE-RPC)
  • 802.1q VLAN

Editions & Options

Editions

VF10

  • Capacity
  • 10 Number of IPs
  • 1 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall
  • Application Control
  • IPS
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter
  • Advanced Threat Protection
  • Advanced Remote Access

VF25

  • Capacity
  • 25 Number of IPs
  • 2 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall
  • Application Control
  • IPS
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter Optional
  • Advanced Threat Protection Optional
  • Advanced Remote Access Optional

VF50

  • Capacity
  • 50 Number of IPs
  • 2 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall
  • Application Control
  • IPS
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter Optional
  • Advanced Threat Protection Optional
  • Advanced Remote Access Optional

VF100

  • Capacity
  • 100 Number of IPs
  • 2 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall
  • Application Control
  • IPS
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter Optional
  • Advanced Threat Protection Optional
  • Advanced Remote Access Optional

VF250

  • Capacity
  • 250 Number of IPs
  • 2 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall
  • Application Control
  • IPS
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter Optional
  • Advanced Threat Protection Optional
  • Advanced Remote Access Optional

VF500

  • Capacity
  • 500 Number of IPs
  • 2 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall
  • Application Control
  • IPS
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter Optional
  • Advanced Threat Protection Optional
  • Advanced Remote Access Optional

VF1000

  • Capacity
  • Unlimited Number of IPs
  • 2 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall
  • Application Control
  • IPS
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter Optional
  • Advanced Threat Protection Optional
  • Advanced Remote Access Optional

VF2000

  • Capacity
  • Unlimited Number of IPs
  • 4 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall
  • Application Control
  • IPS
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter Optional
  • Advanced Threat Protection Optional
  • Advanced Remote Access Optional

VF4000

  • Capacity
  • Unlimited Number of IPs
  • 8 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall
  • Application Control
  • IPS
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter Optional
  • Advanced Threat Protection Optional
  • Advanced Remote Access Optional

VF8000

  • Capacity
  • Unlimited Number of IPs
  • 16 Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall
  • Application Control
  • IPS
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter Optional
  • Advanced Threat Protection Optional
  • Advanced Remote Access Optional

SAC 400

  • Capacity
  • Number of IPs
  • Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall
  • Application Control
  • IPS
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter
  • Advanced Threat Protection
  • Advanced Remote Access

SAC 610

  • Capacity
  • Number of IPs
  • Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall
  • Application Control
  • IPS
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter
  • Advanced Threat Protection
  • Advanced Remote Access

SAC 820

  • Capacity
  • Number of IPs
  • Number of CPU Cores Allowed

+ Show more - Show less

  • Features

  • Firewall
  • Application Control
  • IPS
  • Dynamic Routing
  • App-Based Provider Selection
  • Client-to-Site and Site-to-Site VPN (unlimited)
  • SSL Interception
  • SD-WAN
  • Web Filter
  • Advanced Threat Protection
  • Advanced Remote Access

Support Options

Barracuda Energize Updates

  • Standard technical support
  • Firmware updates
  • IPS signature updates
  • Application control definition updates
  • Web filter updates

Security Options

  • Advanced Threat Protection
  • Malware Protection
  • Advanced Remote Access subscription provides remote access via the CudaLaunch App for Windows, macOS, iOS, and Android devices