Barracuda Networks NG Firewall F280 BNGIF280A Prospecto

Los códigos de productos

BNGIF280A

Barracuda Networks • Barracuda NG Firewall: Scalable Security for the Enterprise

Barracuda Networks and the Barracuda Networks logo are registered trademarks of Barracuda Networks, Inc. in the United States. All other names are the property of their respective owners.

Technical Specs

Firewall

•  Stateful packet inspection and forwarding
•  Full user-identity awareness
•  Intrusion Detection and

Prevention System (IDS/IPS)

• Application control and granular

application enforcement

• Interception and decryption of SSL/

TLS encrypted applications

•  Denial of Service protection (DoS /DDoS)
•  Spoofing and flooding protection
•  ARP spoofing and trashing protection
•  DNS reputation filtering
•  TCP stream reassembly
•  Transparent proxying (TCP)
•  NAT (SNAT,DNAT), PAT
•  Dynamic rules / timer triggers
•  Single object-oriented rule set for

routing, bridging, and routed bridging

• Virtual rule test environment
• Antivirus and URL filtering right

in the firewall engine

User Identity Awareness

•  Terminal Server Agent
•  Domain Controller Agent
•  Authentication – supports x.509, NTLM,

RADIUS, RSA SecurID, LDAP/LDAPS,
Active Directory, TACACS+, SMS Passcode
(VPN), local authentication database

Intrusion Detection and Prevention

• Protection against exploits,

threats and vulnerabilities

• Packet anomaly and

fragmentation protection

• Advanced anti-evasion and

obfuscation techniques

• Automatic signature updates

Traffic Optimization

•  Link monitoring, aggregation, and failover
•  Dynamic path routing
•  Application-based provider selection
•  Traffic shaping and QoS
•  On-the-fly flow reprioritization
•  Stream and packet compression
•  Byte-level data deduplication
•  Protocol optimization (SMBv2)

Advanced Threat Detection

• Dynamic, on-demand analysis of

malware programs (sandboxing)

• Dynamic analysis of documents with

embedded exploits (PDF, Office, etc.)

• Detailed forensics for both, malware

binaries and web threats (exploits)

• Support for multiple operating

systems (Windows, Android, etc.)

• Flexible malware analysis in the cloud

VPN

•  Drag & drop VPN tunnel configuration
•  Secure site-to-site, client-to-site VPN
•  Supports AES-128/256, 3DES,

DES, null ciphers

•  Private CA or external PKI
•  IPsec VPN / SSL VPN
•  VPNC certified (basic interoperability)
•  Application-aware traffic routing
•  PPTP / L2TP (IPSec)
•  Network Access Control
•  iOS and Android mobile

device VPN support

High Availability

• Active-active (requires external

load balancer) or active-passive

•  Transparent failover without session loss
•  Network notification of failover
•  Encrypted HA communication

Central Management Options

• Barracuda NG Control Center

– Unlimited firewalls

– Support for multi-tenancy

– Multi-administrator support & RCS

Infrastructure Services

•  DHCP server, relay
•  SIP, HTTP, SSH, FTP proxies
•  SNMP and IPFIX support
•  DNS Cache
•  SMTP gateway and SPAM filter
•  Wi-Fi (802.11n) access point

on selected models

Protocol Support

•  IPv4, IPv6, ARP
•  BGP/OSPF/RIP
•  VoIP (H.323, SIP, SCCP [skinny])
•  RPC protocols (ONC-RPC, DCE-RPC)
•  802.1q VLAN

Support Options

Barracuda Energize Updates

•  Standard technical support
•  Firmware updates
•  IPS signature updates
•  Application control definition updates
•  Online web filter

Instant Replacement Service

• Replacement unit shipped

next business day

• 24/7 technical support
• Free hardware refresh every four years

Security Options

• Barracuda Advanced Threat Detection

(Model F200 and higher)

• Barracuda NG Web Security

(Model F100 and higher)

– Barracuda NG Web Filter

– Barracuda NG Malware Protection

• Barracuda NG SSL VPN and NAC

(Model F200 and higher)

– Clientless access

– Network Access Control validates

client security access

MODEL

COMPARISON

F10

F100

F101

F200

F201

F280

F300

F301

F380

F400

F600

F800

F900

F1000

SUBMODELS

STD

F20

C10

C20

F10

F20

E20 CCC CCF CCE CCC CCE

CFE

CE0

CE2

CFE

CAPACITY

Firewall Throughput

300 Mbps

300 Mbps 650 Mbps

1.6 Gbps

680 Mbps

3.8 Gbps

5.0 Gbps

16.3 Gbps

19.6 Gbps

22.2 Gbps

40 Gbps

VPN Throughput

85 Mbps

120 Mbps

310 Mbps

370 Mbps

750 Mbps

960 Mbps

2.3 Gbps

6.8 Gbps

7.6 Gbps

10 Gbps

IPS Throughput

60 Mbps

115 Mbps

450 Mbps

125 Mbps

1.1 Gbps

1.5 Gbps

3.9 Gbps

4.8 Gbps

5.4 Gbps

10 Gbps

Concurrent Sessions

2,000

8,000

35,000

100,000

70,000

200,000

310,000

2,000,000

2,500,000

2,800,000

4,000,000

New Session/s

1,000

1,500

2,500

9,000

2,500

9,500

16,000

110,000

150,000

160,000

200,000

HARDWARE

Form Factor

Desktop mini

Desktop

1U rack mount

2U rack mount

Dimensions (in)

9.4x6.5x1.2

14.7x7.5x2.0

10.7x7.7x1.7 16.9x13.0x1.7 16.8x14.5x1.7

16.8x17.7x1.7

17.4x20.4x1.7

17.4x26.0x3.5

16.9x24.6x3.4

Weight (lbs)

4.4

7.7

8.0

5.1

9.9

14.3

15.4

18.7

28.7

39.7

44.0

Copper Ethernet NICs

4x1

GbE

4x1

GbE

4x1

GbE

4x1

GbE

4x1 GbE+

4x1 10/100

8x1

GbE

8x1

GbE

8x1

GbE

12x1

GbE

8x1

GbE

8x1

GbE

20x1

GbE

12x1

GbE

12x1

GbE

24x1

GbE

16x1

GbE

8x1

GbE

16x1

GbE

32x1

GbE

16x1

GbE

1Gb Fiber SFP NICs

4x1

GbE

4x1

GbE

4x1

GbE

8x1

GbE

16x1

GbE

10Gb Fiber SFP+ NICs

2x10

GbE

4x10

GbE

4x10

GbE

4x10

GbE

4x10

GbE

8x10

GbE

8x10

GbE

Power Supply

Single (ext.)

Single

Dual

Single

Dual

3G USB Modem

Optional

FEATURES

Firewall

•

Application Control

•

IPS

•

Dynamic Path Routing

•

VPN

•

SSL Interception

•

WAN Optimization

•

Spam Filter

•

NG Web Security

Optional

NG SSL VPN and NAC

Optional

Advanced Threat
Detection

Optional

Measured with large packets (MTU1500)

VPN throughput using AES128 NOHASH

Requires Energize Updates subscription.

Requires Barracuda NG Web Security or Barracuda NG Malware Protection subscription.

Measured with 10GbE fiber ports

Internal dual hot swap power supply

Internal dual hot swap power supply optional. Specifications subject to change without notice.