Barracuda CloudGen Firewall

(DDoS) attacksDirectory traversal and probing and scanning attemptsBackdoor attacks, Trojans, rootkits, viruses, worms, and spywareBarracuda CloudGen Firewall provides advanced attack and threat protection features such as:Stream segmentation and packet anomaly protectionTCP split handshake protectionIP and RPC defragmentationFTP evasion protectionURL and HTML decodingAs a result, Barracuda CloudGen Firewall is able to identify and block advanced evasion attempts and obfuscation techniques that are used by attackers to circumvent and trick traditional intrusion prevention systems.As part of Barracuda Energize Updates subscription, automatic signature updates are delivered on a regular schedule or on an emergency basis to ensure that Barracuda CloudGen Firewall is constantly up-to-date. If the firewall unit is centrally managed, the updates are conveniently distributed by Barracuda Firewall Control Center. In today’s world of omnipresent botnets, one of the main tasks of perimeter protection is to ensure ongoing availability of the network for legitimate requests and to detect and repel malicious denial of service attacks. With TCP SYN Flood Protection, Barracuda CloudGen Firewall effectively functions as a generic TCP proxy, forwarding only legitimate TCP traffic to the inside of the network.Additionally, Barracuda CloudGen Firewall allows the definition of a rate limit that is applied to the maximum number of sessions per source address to be handled by the firewall. Packets arriving at a rate faster than allowed will simply be dropped. In a massive DDoS attack, the attackers may simply aim for saturating the link by transmitting vast numbers of UDP packets. The integrated environmental monitoring feature of Barracuda CloudGen Firewall diagnoses

Filter configurations, and so on. Barracuda Firewall Control Center collects all of these in a repository (global configuration node) linked to multiple Barracuda CloudGen Firewalls. Using repositories on the Firewall Control Center, an administrator can update thousands of firewalls with just a single change in the repository.Repositories still provide the flexibility to override specific settings on specific firewalls. For example, if one location uses a different DNS server than the others, you can create an explicit overwrite for just this setting on this single firewall. Barracuda Firewall Control Center provides centralized software updates for all centrally managed CloudGen Firewall units. Updates can be scheduled for a specific time and even just for specific subsets of remote CloudGen Firewall units. In case a software updates is not successful, it is automatically rolled back and reported. Just like on Barracuda CloudGen Firewall, Barracuda Firewall Control Center allows simultaneous login of multiple administrators in “writing mode”. This is useful in MSSP and multi-admin environments where there is a greater likelihood of administrators managing systems in teams. Once a change needs to be made, only the dedicated configuration node needs to be locked for changing by the admin actually performing the change. All other settings outside of this locked configuration node are still viewable and modifiable by other admins logged on to the system. Barracuda Firewall Control Center provides extensive role-based administration benefits. Administrators can be assigned specific roles such as: - MSSP Admin - Customer Admin - Log Viewer - Auditor - Content

Backbone. Every Barracuda CloudGen Firewall supports Azure vWAN, and Barracuda Firewall Control Center provides central orchestration, management, and maintenance.By combining Azure vWAN and CloudGen Firewall, you get:Fully automated rollout of branch-to-branch connectivityFully automated rollout of branch-to-Azure connectivityScalability to thousands of remote locationsActive-active IPsec VPN connections to Azure vWAN for uninterrupted connectivityAzure Office 365 local breakout policy integration for optimized application performanceOptimized routing and minimal latency for branch-to-branch and branch-to-Azure connectivityUnified network and security policy management across the company-wide WANAbout optimizing application traffic:Azure vWAN Office 365 policies let you specify what type of application traffic to route through your paid subscription and what application traffic to optimize for direct internet breakouts. Barracuda CloudGen Firewall integrates to the Office 365 policy service provided by Azure, detects if the traffic falls in the “optimize” category, and routes traffic directly to the nearest Office 365 access points dynamically provided by the service. This ensure Office 365 traffic is always sent to the Office 365 service with the best possible round-trip time, resulting in the best possible user experience. Secure VPN tunnels between Barracuda CloudGen Firewall appliances, regardless if in the cloud, across multiple clouds or on premises are created programmatically on demand via API or command line. This enables automation across the whole enterprise and automation of DevOps processes. To extend the SASE service at line speed to every site device and overcome limitations introduced by traditional SD-WAN technology based on shared uplinks like broadband, CloudGen Firewall features uplink optimization technology with Forward Error

Access to internal applications, favorites, and TINA VPN connections (which securely connect the device to your corporate network). This richer VPN connection supports mobile apps that connect back to the corporate network (like remote desktop apps).Designed to be completely self-configuring, CudaLaunch includes easy central management for large deployments and integrates with the powerful security features of Barracuda CloudGen Firewall. For IT administrators, the firewall provides one place to manage security policies for all types of remote access (CudaLaunch, SSL VPN, Barracuda Network Access Client, and standard IPsec). The end user experience is consistent across platforms and remote access types, making for ease of use and significantly lower support costs. The self-configuration and management of VPN connections eliminates the need to manually configure IPsec connections on Windows, macOS, iOS, and Android, making setup fast and easy.More information on CudaLaunch is available here.The app is available for free at:Mac App Store (macOS)Windows Store (Windows)(Also available as a standalone app that requires no installation; therefore, there are no local admin rights. This version is available on the Barracuda Cloud Control only for windows version.)App Stores (iOS)Google Play (Android)Please note that CudaLaunch requires Barracuda CloudGen Firewall firmware 6.1.1 and an active Advanced Remote Access subscription. Barracuda Secure Connector appliances are purpose-built ultra-compact edge devices for the Industrial Internet of Things and SoHo use cases. They are designed to provide edge compute capabilities and backhaul all traffic to CloudGen Firewall units (Appliance, Vx or Cloud) or dedicated Secure Access Controllers for scalability. CloudGen Firewall and