Barracuda Networks Web Application Firewall 960 BWFI963A55 Leaflet

Product codes
BWFI963A55
Page of 2
MODEL
BARRA
CUD
WEB APPLIC
ATION FIRE
W
ALL
Copyright © 2010 Barracuda Networks Inc.  •  3175 S. Winchester Blvd., Campbell, CA  95008  •  1-888-ANTI-SPAM (1-888-268-4772)  •  www.barracuda.com
Web Server
Barracuda Web Application Firewall
Network Firewall
Internet
Typical Deployment
TECHNICAL SPECIFICATIONS
Key Features
WEB APPLICATION SECURITY
• HTTP/HTTPS/FTP protocol 
   validation
• Protection against common attacks
    - SQL injection
    - OS command injection
    - Cross-site scripting
    - Cookie or forms tampering
• Form field meta data validation
• Adaptive security
• Web site cloaking
• Response control
    - Block client
    - Reset connection
    - Redirect
    - Custom response
• Outbound data theft protection
    - Credit card numbers
    - Social Security numbers
    - Custom pattern matching (regex)
• Granular policies to HTML elements
WEB APPLICATION SECURITY (cont.)
• AV for file uploads
• Protocol limit checks
• File upload control
• Brute force protection
• Session tracking
• Rate control
AUTHENTICATION AND 
AUTHORIZATION
• LDAP/RADIUS/local user database
• Client certificates
• Single Sign-On
• RSA SecurID
• CA SiteMinder
LOGGING, MONITORING AND 
REPORTING
• System log
• Web Firewall log
• Access log
• Audit log
• PCI reports
• Syslog/FTP support 
APPLICATION DELIVERY AND 
ACCELERATION
• High availability
• SSL offloading
• Load balancing
• Hardware SSL acceleration
• Caching
• Compression
• Content routing
XML FIREWALL
• XML DOS protection
• Schema / WSDL enforcement
• WS-I conformance checks
System Features
• Graphical user interface
• Role-based administration
• Secure remote administration
• Ethernet bypass (“fail open”)
• Shared policies
• Trusted host exemption
Hardware Features
CONNECTORS
• Ethernet
    - LAN port 
    - WAN port
    - Management port
• Serial port (DB-9) for console
POWER REQUIREMENTS
• AC Input Voltage - 110-240 V AC
• Frequency - 50 / 60 Hz
Support Options
ENERGIZE UPDATES SUBSCRIPTION
• Standard technical support
• Policy definitions
• Security updates 
• Attack definitions
INSTANT REPLACEMENT SERVICE
• Replacement unit shipped next 
   business day
• 24x7 Technical Support
Model CoMPArISoN                  
    Model 360 
  Model 460                  Model 660                    Model 860                 Model 960
CAPACITY*
Backend Servers Supported
Inbound Web Traffic
HARDWARE
Rackmount Chassis
Dimensions (in.)
Dimensions (cm.)
Weight (lbs. / kg.)
Front Ethernet Ports
Back Ethernet Ports
AC Input Current (Amps)
ECC Memory
FEATURES
HTTP/HTTPS/FTP Protocol Validation 
Protection Against Common Attacks
Form Field Metadata Validation
Web Site Cloaking
Response Control
Outbound Data Theft Protection
Granular Policies to HTML Elements
Protocol Limit Checks
File Upload Control
Logging, Monitoring and Reporting
High Availability
SSL Offloading
Authentication and Authorization
LDAP/RADIUS Integration
Load Balancing
Content Routing 
XML Firewall
1-5
25 Mbps
1U Mini
16.8 x 1.7 x 14
42.7 x 4.3 x 35.6
12 / 5.4
2 x 10/100
1 x 10/100
1.2
P
P
P
P
P
P
P
P
P
P
P
P
P
5-10
50 Mbps
1U Mini
16.8 x 1.7 x 14
42.7 x 4.3 x 35.6
12 / 5.4
2 x Gigabit
1 x 10/100
1.4
P
P
P
P
P
P
P
P
P
P
P
P
P

P
P
10-25
100 Mbps
1U Fullsize
16.8 x 1.7 x 22.6
42.7 x 4.3 x 57.4
26 / 11.8
2 x Gigabit
1 x Gigabit
1.8
P






P
P
P
P
P
P
P


P
P
25-150
600 Mbps
2U Fullsize
17.4 x 3.5 x 25.5
44.2 x 8.9 x 64.8
46 / 20.9
2 x Gigabit
1 x Gigabit
4.1
P






P
P
P
P
P
P
P


P
P
150-300
1 Gbps
2U Fullsize
17.4 x 3.5 x 25.5
44.2 x 8.9 x 64.8
52 / 23.6
2 x Gigabit
1 x Gigabit
5.4
P






P
P
P
P
P
P
P


P
P
US 13.0 
 
 
Specifications subject to change without notice.     
                     *Capacity depends on environment and selected options.