Barracuda CloudGen Firewall: Next-Generation Security for Modern Networks

Barracuda CloudGen Firewall delivers comprehensive security for today’s distributed networks. Available as hardware appliances, virtual firewalls, and cloud-based solutions, it protects your network infrastructure with advanced threat prevention capabilities.

From Next-Generation to Cloud Generation Security

Barracuda CloudGen Firewalls combine robust firewall technology with next-generation features like Layer 7 application profiling, intrusion prevention (IPS), web filtering, malware protection, anti-spam, and granular network access control. They also incorporate resilient VPN technology with intelligent traffic management and WAN optimization to reduce costs and improve connectivity.

Ideal for multi-site enterprises, managed service providers (MSPs), and organizations with complex networks, CloudGen Firewalls offer scalable centralized management that simplifies administration and policy enforcement.

Security for the Cloud Era

As workloads move to the cloud, attack surfaces expand. Barracuda CloudGen Firewalls are purpose-built to protect these dispersed environments, providing consistent security across your entire infrastructure.

Advanced Threat Protection

Organizations face increasingly sophisticated threats like zero-day malware and advanced persistent threats (APTs) that bypass traditional security measures. Barracuda Advanced Threat Protection identifies and blocks these new threats without impacting network performance.

Secure SD-WAN

Barracuda CloudGen Firewalls integrate full next-generation security with powerful network optimization and management features, including zero-touch deployment (ZTD), dynamic bandwidth measurement, application-specific routing, and WAN optimization. This enables:

• Improved internet performance through traffic balancing across multiple uplinks
• Cost savings by replacing expensive MPLS connections with VPNs over broadband
• Support for up to 24 physical uplinks for highly redundant VPN tunnels
• Direct internet breakouts for optimized cloud application access (e.g., Office 365)
• Granular policy controls to guarantee access to critical applications
• Increased bandwidth through traffic compression and data deduplication
• Enhanced connection quality with auto-creation of VPN tunnels in hub-and-spoke architectures

Cut MPLS Costs with Bandwidth Optimization

For offices using SaaS applications, Barracuda CloudGen Firewall can reduce WAN costs by enabling direct internet breakouts for optimized cloud accessibility. SD-WAN maintains a fully meshed VPN, offering a cost-effective alternative to traditional backhauling.

Features

Security

Advanced Threat Protection

Unlike solutions that only notify administrators *after* a breach, Barracuda Advanced Threat Protection (ATP) uses full system emulation and a constantly updated cryptographic hash database to identify malware behavior in a virtual sandbox. This provides granular control with automatic quarantine and blacklisting features.

Botnet and Spyware Protection

Barracuda’s Botnet and Spyware Protection blocks access to malicious sites, detects infected clients using DNS Sinkholing technology, and can automatically isolate compromised systems.

Intrusion Detection and Prevention (IDS/IPS)

The CloudGen Firewall provides comprehensive real-time protection against network threats, vulnerabilities, exploits, and exposures. It prevents attacks such as SQL injections, cross-site scripting, denial of service (DoS), and more. Advanced features include stream segmentation, packet anomaly detection, and URL decoding.

Denial of Service (DoS) and Distributed Denial of Service (DDoS) Protection

Barracuda CloudGen Firewall effectively mitigates DoS/DDoS attacks by functioning as a TCP proxy and limiting the number of sessions per source address. Environmental monitoring detects link saturation, automatically rerouting traffic to available uplinks.

Malware Protection

The firewall scans web content (HTTP/HTTPS), email (SMTP/POP3), and file transfers (FTP) using dual antivirus engines with regular signature updates and advanced heuristics.

SSL Interception

Barracuda CloudGen Firewall applies security inspection to SSL-encrypted traffic using a trusted man-in-the-middle approach, with customizable exemptions for local networks or specific domains.

Stateful Deep Packet Inspection Firewall

The core of the firewall examines both headers and data packets, discarding malformed packets and enforcing defined firewall rules.

Single Pass Architecture

Security inspection is performed in a single pass, maximizing performance without requiring separate proxies.

Connectivity & SD-WAN

Adaptive Bandwidth Protection

The firewall automatically shifts non-critical traffic to secondary links if the primary uplink lacks sufficient bandwidth for business-critical applications like VoIP.

Application-Based Routing

Dynamically assign bandwidth and routing based on application, user, location, and content. Prioritize critical applications while optimizing network efficiency.

Secure SD-WAN

Barracuda CloudGen Firewall delivers a complete SD-WAN solution with advanced security features, zero-touch deployment (ZTD), and WAN optimization capabilities.

Dynamic Bandwidth & Latency Detection

Real-time monitoring of bandwidth and latency allows the firewall to select the optimal uplink for each application.

Traffic Duplication

Simultaneous transmission of packets through multiple VPN transports ensures minimal packet loss and instant failover.

TINA VPN

Barracuda’s Transport Independent Network Architecture (TINA) enhances IPsec connections with TCP, UDP, and ESP support for improved performance and reliability.

Site-to-Site Connectivity

Create secure site-to-site VPN connections between on-premises firewalls and public cloud environments like AWS and Azure.

Intelligent Network Perimeters

Application Control

Deep Packet Inspection (DPI) and behavioral analysis reliably identify thousands of applications, enabling granular control based on user, location, and time of day.

User Identity Awareness

Integrate with Active Directory, LDAP, RADIUS, and other identity providers to enforce user-aware policies.

Web Filtering

Gain visibility into online activity and block access to unwanted websites and content categories.

Remote Access

BYOD (Bring Your Own Device) Security

Secure BYOD environments with network access control, LAN segmentation, and health checks.

Central Management

Barracuda Firewall Control Center provides centralized management of all CloudGen Firewall functions, simplifying administration and reducing costs.