Comprehensive Security for Critical Applications With hundreds of lines of code to check - and vulnerabilities often subtle and hard to find - a serious data breach is often the first sign that a web application has problems. Having secured thousands of production applications against more than 11 billion attacks since 2008, the Barracuda Web Application Firewall is the ideal solution for organizations looking to protect web applications from data breaches and defacement. With the Barracuda Web Application Firewall, administrators do not need to wait for clean code or even know how an application works to secure their applications. Organizations can ensure robust security with a Barracuda Web Application Firewall hardware or virtual appliance, deployed either on-premises or in the cloud. Provides Constant Protection from Evolving Threats The Barracuda Web Application Firewall provides superior protection against data loss, application-layer DDoS, and known and previously unknown zero day application-layer attack modalities. As new types of threats emerge, the Barracuda Web Application Firewall will acquire new capabilities to block them. These definitions are automatically updated and will “virtually patch� automatically on units in the field, ensuring the highest security posture for critical applications at all times. This greatly reduces the time between vulnerability disclosure and vulnerability patching. Granular Identity and Access Management The Barracuda Web Application Firewall has strong authentication and access control capabilities that ensure security and privacy by restricting access to sensitive applications or data to authorized users. Integrated Identity Access and Management pre-authenticates on the perimeter before access is allowed to critical web applications. User Access Control can be offloaded from multiple applications on a single consolidated device. Detailed audit logging provides clear visibility into user activity across all protected applications. Intuitive Administration & Management With over 90% of customers deploying active protection in less than a week, the Barracuda Web Application Firewall is designed to provide instant security. Integrations with best-of-breed security tools ensure easily deployments that into existing environments while providing granular logging, alerting, and reporting for management, compliance, or early warning detection. It can be deployed in High Availability clusters to provide redundancy and seamless failover capabilities in response to outages thereby ensuring maximum application uptime. Scalable Security for Public & Private Clouds Today, cloud computing has become a “must-have� to a majority of the enterprise IT community, for reasons ranging from economic gains to technology benefits. But one of the major concerns carrying over from traditional IT�data and application security�has not changed, and requires the same diligence in the cloud as with on-premises solutions. Fortunately, the Barracuda Web Application Firewall can be readily plugged into private cloud environments as well as third-party cloud platforms like Microsoft Windows Azure or Amazon Web Services. The Barracuda Advantage - State-of-the-art security utilizing full reverse-proxy architecture. - Malware protection for collaborative web applications . - Employs IP Reputation intelligence to defeat DDoS attacks. - No user-based or module-based licensing. - Designed to make it easier for organizations to comply with regulations such as PCI DSS and HIPAA. Product Spotlight - Comprehensive inbound attack protection including the OWASP Top 10. - Built-in caching, compression, and TCP pooling ensure security without performance impacts. - Identity-based user access control for web applications. - Built-in data loss prevention. - ICSA certified. Product Spotlight - Comprehensive inbound attack protection including the OWASP Top 10. - Built-in caching, compression, and TCP pooling ensure security without performance impacts. - Identity-based user access control for web applications. - Built-in data loss prevention. - ICSA certified. Identity and Access Management The Barracuda Web Application Firewall has strong authentication and access control capabilities that ensure security and privacy by restricting access to sensitive applications or data to authorized users. Affordable and Easy to Use Pre-built security templates and intuitive web interface provide immediate security without the need for time-consuming tuning or application learning. Integration with security vulnerability scanners and SIEM tools automates the assessment, monitoring, and mitigation process. Web Application Security - OWASP top 10 protection. - Protection against common attacks: SQL injection, Cross-site scripting, Cookie or forms tampering. - Form field meta-data validation. - Adaptive security. - Website cloaking. - Response control. - Outbound data theft protection: Credit card numbers, Custom pattern matching (regex). - Granular policies to HTML elements. - Protocol limit checks. - File upload control. - Geo IP location: Anonymous Prox. DDoS Protection - Barracuda IP Reputation Database. - Heuristic Fingerprinting. - CAPTCHA challenges. - Slow Client protection. Supported Web Protocols - HTTP/S 0.9/1.0/1.1. - FTP/S. - XML. - IPv4/IPv6. Authentication & Authorization - LDAP/RADIUS/local user database. - Client certificates. - Single Sign-On. - RSA SecurID. - CA SiteMinder. - SMS Passcode. Logging, Monitoring & Reporting - System log. - Web Firewall log. - Access log. - Audit log. SIEM Integrations - ArcSight. - RSA enVision. - Splunk. - Symantec. - Custom. Application Delivery & Acceleration - High availability. - SSL offloading. - Load balancing. - Content routing. XML Firewall - XML DOS protection. - Schema/WSDL enforcement. - WS-I conformance checks. Networking - VLAN, NAT. - Network ACLs. Hardware Options - FIPS 140-2 HSM Model Available. - Optional Ethernet Bypass. Management Features - Customizable role-based administration. - Vulnerability scanner integration. - Trusted host exception.