Barracuda Web Application Firewall for Amazon Web Service
Securing Applications and Data in Amazon Web Services
If you are currently working with another reseller you may not be eligible to receive any promotional items with your purchase. Please contact us before placing your order. BarraGuard.co.uk reserves the right to deny free promotional items on any purchase.
Click here to jump to more pricing!
Please Note: All prices displayed are Ex-VAT. 20% VAT is added during the checkout process.
Overview:
The Barracuda Web Application Firewall blocks application layer DDoS and other attack vectors directed at web-facing applications hosted in Amazon Web Services, while providing superior protection against data loss. It also has strong authentication and access control capabilities for restricting access to sensitive applications and data, along with the ability to autoscale inside your VPC.
Moving your IT Infrastructure to the Cloud? Running on Amazon Web Services?
Barracuda Networks is your partner for various kinds of deployments in Amazon Web Services. We understand your IT needs and provide best-of-breed solutions for firewalling, load balancing, web application security, and email security in the public cloud.
Barracuda Networks and Amazon Web Services
Today, many organizations are looking to the cloud to take advantage of the economic gains and operational efficiencies inherent to non-hardware-based solutions. While migrating to the cloud means companies need to adjust to new security threats, the ability to scale according to business needs means that AWS offers a powerful value proposition. The pay-as-you go model Amazon uses enables businesses of all sizes to access just the AWS services they need, and no more.
In the cloud, companies need security that can compensate for a broader attack surface and a new array of threat vectors. As Amazon seeks to provide more options for hybrid cloud and pay-as-you-go subscriptions, Barracuda’s security services have moved hand-in-hand with Amazon’s values. Not only is Barracuda committed to providing total threat protection to AWS customers, but we’re taking steps to emulate Amazon’s methodologies within our product offerings. Barracuda and Amazon work well together because we have the same end user in mind: A person Amazon calls the “whole stack professional” and Barracuda describes as a “mid-market IT professional who wears a lot of hats.”
Barracuda Web Application Firewall
The Barracuda Web Application Firewall blocks application layer DDoS and other attack vectors, directed at online applications hosted in Amazon Web Services, while providing superior protection against data loss. It also has strong authentication and access control capabilities for restricting access to sensitive applications and data.
The Barracuda Web Application Firewall virtual appliance for AWS is a scalable security solution that protects applications from targeted and automated attacks. Barracuda Web Application Firewall is ideal for organizations looking to protect web applications from data breaches, defacement, application layer DDoS and other attack vectors, directed at online applications hosted in AWS. Automatic updates provide defense against new threats as they appear. As new types of threats emerge, it will acquire new capabilities to block them. Barracuda Web Application Firewall has strong authentication and access control capabilities that ensure security and privacy by restricting access to sensitive applications or data to authorised users. Plus, it is affordable and easy to use. Companies of all sizes can enjoy total application security with no need to learn, configure, and manage complex technology.
Pre-built security templates and intuitive web-user interface provide immediate security without the need for time-consuming tuning.
The Barracuda Advantage
- Barracuda Central Operations Center keeps track of emerging threats
- State-of-the-art security utilizing full reverse-proxy architecture
- Malware protection for collaborative web applications
- Employs IP Reputation intelligence to defeat DDoS attacks
- Designed to make it easier for organizations to comply with regulations such as PCI DSS and HIPAA
- Cloud-based scan with Barracuda Vulnerability Manager
- Automatic vulnerability remediation
- Cloud-based scan with Barracuda Vulnerability Manager
- Automatic vulnerability remediation
Product Spotlight
- Comprehensive inbound attack protection including the OWASP Top 10
- Built-in caching, compression, and TCP pooling ensure security without performance impacts
- Identity-based user access control for web applications
- Ability to bootstrap and autoscale with automated and clustered deployments using CloudFormation templates
- Available on the AWS marketplace as a single AMI or as a CloudFormation template
- Integration with Cloudwatch, S3 and IAM Roles
- AWS Security Competency Certified
 |
Constant Protection from Evolving ThreatsThe Barracuda Web Application Firewall provides superior protection against data loss, DDoS, and all known application-layer attack modalities. Automatic updates provide defense against new threats as they appear. As new types of threats emerge, it will acquire new capabilities to block them. |
 |
Identity and Access ManagementThe Barracuda Web Application Firewall has strong authentication and access control capabilities that ensure security and privacy by restricting access to sensitive applications or data to authorised users. |
 |
Affordable and Easy to UsePre-built security templates and intuitive web interface provide immediate security without the need for time-consuming tuning or application learning. Integration with security vulnerability scanners and SIEM tools automates the assessment, monitoring, and mitigation process. |
Deployment:
The Barracuda Web Application Firewall provides proven application security and data loss prevention for your applications on Amazon Web Service (AWS), including:
- Detecting and blocking attacks including SQL injections, Cross-Site Scripting, malware uploads, and volumetric or application DDoS.
- Authentication and access control allowing organizations to exercise strong user control.
- Scanning of outbound traffic for sensitive data, with admin control of masking or blocking information to prevent data leakage.
- Built-in load balancing and session management, allowing organizations to manage multiple applications behind a single instance of the Barracuda Web Application Firewall.
The Barracuda Web Application Firewall on Amazon Web Services protects your applications in the cloud.
Deploy Barracuda Web Application Firewall on AWS
Take advantage of auto-scaling by deploying the Barracuda Web Application Firewall clusters in an auto-scaling group on AWS.
- Build a multi-tier redundant architecture that allows you to independently scale each tier based on your requirements.
- Automatically scale based on metrics or a schedule to meet business needs. (An example of metric based scaling is an increase in traffic load; an example of scheduled scaling is to meet a planned traffic increase during a sale or holiday.)
Model Comparison:
| Amazon Web Services | Level 1 | Level 5 | Level 10 | Level 15 |
|---|---|---|---|---|
| Capacity | ||||
| Container Size | M3.Medium | M3/M4.Large | M3/M4.XLarge | M3/M4.2XLarge |
| Virtual Cores | 1 | 2 | 4 | 8 |
| Throughput | 100 Mbps | 200 Mbps | 400 Mbps | 750 Mbps |
| HTTP Connections per Second | 5,000 | 7,000 | 10,000 | 14,000 |
| HTTPS Requests per Second | 5,000 | 7,000 | 10,000 | 14,000 |
| Features | ||||
| Response Control | ||||
| Advanced Threat Detection2 | ||||
| Outbound Data Theft Protection | ||||
| File Upload Control | ||||
| SSL Offloading | ||||
| Authentication and Authorization | ||||
| Vulnerability Scanner Integration | ||||
| Protection Against DDoS Attacks | ||||
| Web Scraping Protection | ||||
| Network Firewall | ||||
| Clustering | Config Sync | Config Sync | Config Sync | Config Sync |
| Caching and Compression | ||||
| LDAP/RADIUS/Kerberos/Local User DB Integration | ||||
| Load Balancing | ||||
| Content Routing | ||||
| Adaptive Profiling | ||||
| URL Encryption | ||||
| Antivirus for File Uploads | ||||
| XML Firewall | ||||
| JSON Security | ||||
| Premium Support1 | Optional | Optional | Optional | Optional |
1 Premium Support ensures that an organization's network is running at its peak performance by providing the highest level of 24x7 technical support for mission-critical environments.
2 Requires active Advanced Threat Detection subscription
Technical Specs
Web Application Security
- OWASP top 10 protection
- Protection against common attacks
- SQL injection
- Cross-site scripting
- Cookie or forms tampering - Form field meta-data validation
- Adaptive security
- Website cloaking
- Response control
- JSON payload inspection
- Web scraping protection
- Outbound data theft protection
- Credit card numbers
- Custom pattern matching (regex) - Granular policies to HTML elements
- Protocol limit checks
- File upload contro
DDoS Protection
- Barracuda IP Reputation Database
- Inegration with Barracuda NextGen Firewall to block malicious IPs
- Heuristic Fingerprinting
- CAPTCHA challenges
- Slow Client protection
- Layer 3 and Layer 7 Geo IP
- Anonymous Proxy
- ToR exit nodes
- Barracuda blacklist
Authentication & Authorization
- LDAP/RADIUS/Kerberos/ local user database
- SAML 2.0
- Client certificates
- Single Sign-On
- RSA SecurID
- SMS PASSCODE
Supported Web Protocols
- HTTP/S 0.9/1.0/1.1/2.0
- WebSocket
- FTP/S
- XML
- IPv4/IPv6
SIEM Integrations
- HPE ArcSight
- RSA enVision
- Splunk
- Symantec
- Custom
XML Firewall
- XML DOS protection
- Schema/WSDL enforcement
- WS-I conformance checks
Networking
- VLAN, NAT
- Network ACLs
- Advanced routing
AWS Integrations/Support for
- ELB / VPC
- CloudWatch
- CloudFormation / Bootstrapping
- Auto/Dynamic Scaling
- IAM/S3
- MIT Clustering Support
- Amazon Short Notification Service
Management Features
- Customizable role-based administration
- Vulnerability scanner integration
- Trusted host exception
- Adaptive profiling for learning
- Exception profiling for tuning
- Rest API
- Custom Templates
Logging, Monitoring & Reporting
- System log
- Web Firewall log
- Access log
- Audit log
- Network firewall log
- On-demand and scheduled reports
Centralized Management
- Monitor and configure multiple Barracuda products from a single interface
- Check health and run reports
- Assign roles with varied permissions
- Available from anywhere
Support Options
Barracuda Energize Updates
- Standard technical support
- Firmware and capability updates as required
- Automatic application definitions updates
Documentation:
Download the Barracuda Web Application Firewall for Amazon Web Services Data Sheet (.PDF)
Pricing Notes:
- All prices displayed are Ex-VAT. 20% VAT is added during the checkout process.
- Pricing and product availability subject to change without notice.