Barracuda NG Firewall ™ The Next Generation Firewall for Distributed Environments

Why today’s Firewalls and UTMs are broken Visibility No visibility into user behavior No control over applications Manageability No centralized management No centralized deployment Intelligence No network optimization No traffic prioritization Security No Network Access Control No IDS/IPS No Secure Remote Access From a visibility standpoint, “What are my employees doing with my bandwidth?” From a cost standpoint, “How can I reduce my Internet bill?” From a management standpoint, “Why does it take 5 guys to manage 30 firewalls?” From a connectivity standpoint, “How can I provide secure remote access to my users?”

Introducing the Barracuda NG Firewall Powerful network firewall Robust Layer 7 application control Intelligent traffic management Comprehensive IDS/IPS Centrally manage all functionality

The Evolution of the Firewall WAN optimization Centralized management Scalability Remote network access Application control Identity awareness Ports, packets, protocols Anti-virus scanning Traditional Firewall Next Generation Firewall Barracuda NG Firewall

Know what your users are doing User Authentication/Awareness Create policies based on user, group or OU affiliation Generate user reports for forensics User Identification Tony Marketing John Sales Mary Engineering

Intelligently Regulate Network Traffic Real-Time Application Control Identify and block malicious applications Instantly regulate application bandwidth usage New Application signatures are automatically updated

Cloud-based Web Security Transparent Integration with Web Security Flex Malicious content never touches the network Simplified capacity planning Centralized management and hosted reporting Web Security for locations of all sizes Content Filtering Malware Detection Reporting Identity Awareness Policy Enforcement

Optimize Bandwidth Usage and Link Availability MPLS (Critical) Application Based Routing Barracuda NG Firewall T1 (Business) DSL (Leisure) (Unwanted)

Enable Business Continuity Dynamic Traffic Prioritization Internet 50% Email 50% DSL Headquarters Branch Office MPLS VoIP first then Business 100% VoIP first then Business 70% Internet 10% Email 20% 3G VoIP first then Business 80% Internet 5% Email 15%

Increase Network Throughput WAN Optimization Data compression TCP flow optimization Protocol acceleration Data deduplication Headquarters Branch Office

Centrally Manage the Corporate Network Barracuda NG Control Center Global management and configuration Firewall policy User access policy VPN policy Network routing Template-based configuration Roles-based administration Multi-tenancy Centralized upgrades

Connect Sites Easily and Securely Graphical Tunnel Interface (GTI) Reduces management time Easy to use Templates Hub and Spoke Fully meshed

Globally Monitor your WAN Barracuda NG Earth

Improve your Security Posture State-of-the-art inline IDS/IPS Real-time update of signatures Included with Energize Updates Network Access Client Customizable web-based SSL VPN Sophisticated Network Access Control (NAC) May be managed from Barracuda Control Center 100% score from NSS Labs Firewall Enforcement Application Control Identity Awareness IPS Evasion Protection We achieved 100% scores for Firewall enforcement, Application control, Identity awareness (including DC agent), and IPS evasion protection. Esp. the latter is remarkable because it is an even better quality indicator than coverage. Several evasion techniques can be used to trick an IPS – we got them all detected.

Appliance and Virtual Form Factors Scalable Solutions Appliance and Virtual Form Factors No per user fees POS SOHO Small remote office Remote Small / medium HQ Large Large HQ and datacenters Performance F10 F10x F600 F400 F300 F20x F800 F900 1 Gbps 10Gbps

Barracuda NG Firewall Advantage The Barracuda NG Firewall Understand what users are doing on your network Improve your security posture Cloud-based web security Intelligently regulate network traffic Optimize bandwidth usage and link availability Increase network throughput Centrally manage the corporate network Globally monitor your WAN Reduce associated management costs