Website Security

Vulnerability Protection

Utilizing advanced technology, the Barracuda Web Application Firewall defense against all threats which focuses application weaknesses: SQL injections, OS command injections, cross-site scripting and others.

API Security

Multi-Protocol Support
Compliance Certification

Anti-Virus and Malware Protection

Seamless integration with Barracuda Advanced Threat Protection (BATP) to provide security against advanced threats.

URL Encryption

Web application end users interact and navigate the site using only encrypted URLs, which are decrypted by the Web Application Firewall WAF. Encrypt URLs before they are sent to clients, and ensure the original URLs or the directory structure are never exposed externally to prying eyes.

Rate Control

This feature lets administrators specify and limit the access of the user for specified time periods in order to defend applications against DoS attacks and brute force attacks.

XML Firewall

This feature defense XML –Based Web applications against schema and WSDL poisoning, highly-nested elements, recursive passing and other XML based threats.

Cloaking

This feature constraints server banners and error messages. It avoids HTTP return codes, headers and backend IP addresses from exposure in response messages to help attackers.

Data Loss Prevention

This feature secures the confidential data and analyzes all outbound web traffic to ensure that no sensitive data is lost like credit card and social security numbers. This feature is very efficient for data loss and Distributed Denial of Service DDos prevention.

Adaptive Profiling

This feature allows administrators to make the samples of web traffic and generate a rough white list in order to provide zero-hour defense against threats and attacks. This adaptive profiling generates positive profile for fastest available threat response.

Client IP Reputation

Through IP reputation potential access from unknown and specific region proxies can be constrained.

Identity and Access Management

Barracuda web application firewall provides features for strong IAM starting from simple application authentication and authorization to full-featured Single Sign-On (SSO). This multipurpose identity and access management features are standard in all Barracuda web application firewalls.

LDAP and RADIUS Authentication

The product fully incorporates Active Directory, eDirectory and other RADIUS or LDAP compatible authentication services.

Single Sign-On

The administrators can use the firewall as SSO portal by its own or with third party products without any change in IP addresses, sources codes or infrastructure.

Two factor Authentication

The product carry out client authentication and hardware tokens such as RSA SecurID to give well built user authentication

Access Control

Rough policies can be set up by administrators granting access to specific users or individuals which web application or resources they can use.

Application Security and Delivery acceleration

The product ensures the reliability of web applications and incorporates strong features for the acceleration of these applications. In order to get these performance benefits the incorporated features are necessary otherwise other various costly solutions would be needed. Following features will let you know why this product is the leading one in the industry.

SSL Offloading

In order to accelerate web application processing, the Barracuda Web Application Firewall offloads SSL processing from backend web servers so that the server can be free.

Load Balancing

For the avoidance of overcrowding the load balancer routes the web traffic between backend servers to protect latency. It wires layer 4 and 7 cookie persistence and layer 7 content toggling using content cues.

Content caching

To lower the requests to back-end web servers preserve server and connection resources, the product caches continuous requested web content.

Data Compression

The product compresses data to minimize response time. This feature is highly useful for smartphones and tablets.

Connection Pooling

For optimum server performance the Barracuda Web Applicaton Firewall automatically pools front end connection to single back end connection to minimize overhead cost which can affect performance.

Appliance Clustering

To make sure High availability performance and overcome failures Barracuda web application firewall can be grouped or clustered in active/ passive or active/ active pairs.

Web Server High Availability

For the high availability performance of web applications, the feature of load balancer gives failover between web servers.

Monitoring and Reporting

The product gives a quick view to administrators who install, manage and defense mission important applications.

Dashboard

An instinctive web UI gives quickly visible attack statistics, system performance, and traffic resource usage and other information useful for troubleshooting and supervision.

Logging

The product manages a comprehensive set of web firewall, access, audit and system logs. These logs can be provided to third party for further analysis.

Reports

The product has already built reports which are customized about attacks, traffic statistics and compliance with PCI-DSS. These reports can be automatically delivered via pre-scheduled emails.

Syslog Reports

For central, deep analysis and continuous storage, the product forwards syslog servers.

Application Access Control

The product has access policy enforcement on a single point. It includes user authentication, access control policy for assets and application threat protection.

LDAP and RADIUS Authentication

The product incorporates with Active directories and other LDAP compatible directories as well as RADIUS servers for verification and authentication.

Two Factor Authentications

For users authorization, the product uses two factor authentication using client certificates and hardware tokens.

Single Sign On portal

The product provides simple frontend and backend applications, by mixing authentication with web addresses translation and cookie-session management.

Website Access Control

The feature gives the control authentication and authorize which users have access to specific portions of website.

Flexible Deployment Configurations

Route Path

This feature gives the finest defense for the web application infrastructures being a substitute full turnaround proxy for all web application traffic. Full turnaround proxy is the great industry accepted practice. It is intrinsically more defensive than bridge mode set ups.

One Armed Proxy

If a switch is given from only WAN port the Barracuda Web Application Firewall can be installed in one-armed proxy which requires unit be setup off that switch. This setup generates one more way for traffic to reach the servers without any interruption in the flow via network. The data which needs to be analyzed and supervised is routed via Barracuda Web Application Firewall.
One-armed proxy setups are utilized during the preliminary phases when administrators want to authenticate the solution without any change in the network settings. One more way to utilize the one armed proxy solution is to occupy the appliance’s integrated load balancer for HTTP/HTTPS traffic, whereas letting SMTP and other traffic pass straighly to the server.

Bridge Path

This installment is suggested for administrators who are already supervising web-application traffic. It allows quick setup without any changes in IP addresses on frontend and backend web servers and network devices. Bridge is translucent therefore users are not interrupted.

High Availability

It is always beneficial to carry out the inline or series wise appliances in a high availability group, this product can be installed in surplus pairs that supports application layer state for full failover. When set up as a separate appliance in series bridge-path mode, the appliance’s Ethernet hard bypass makes sure trustworthy application security and delivery.

Configuration and Policy Administration

By using incorporated online help on instinctive and Safe Web UI of Barracuda Web Application Firewall, administrators can rapidly configure the product.
Efficient default security policies rationalize the preliminary setup and they can be rapidly customizes as well.
Supervision is more rationalized via features like automatic rule creation from log entries which let the administrators straightforwardly control security policies even as application changes.

Role Based Administration

In order to provide complete right to the administrators, the tasks of administration can be assigned to the administrators with their own specific login account & assigned role via role-based administration.
External LDAP or a local database can be managed to have an identification of administrators and their actions can be logged for audit and observance.

Monitoring and Reporting

The Barracuda web application Firewall’s dashboard displays numerical graphs which coats web traffic, web attacks, use of resources and services numeric.
This web appliance gives widespread alternates for reporting purposes including PCI reports, persistent reports can be automated to be sent via emails in addition with dashboard and logging alternatives.