Barracuda NextGen Firewall X

Cloud-Connected, Easy-to-Use Next-Generation Firewall

Next-generation visibility and control for today's modern networks the Barracuda NextGen Firewall X-Series provide full application control, user awareness, and content security that's so easy to use, it's even manageable from the cloud.

NGX

The Barracuda Advantage

  • Easy-to-use, web-based administration
  • Affordable, all-inclusive pricing
  • Unlimited users and protected IPs per Firewall
  • Unlimited remote connectivity VPN clients included
  • Cloud-based centralized management
  • Flexible web Filtering options (on-box, cloud, Barracuda Web Filter integration)

Product Spotlight

  • Granular control over thousands of applications
  • Full user-awareness
  • Stateful Firewall and IPS network perimeter protection
  • Advanced Threat Detection
  • Optimized Internet connectivity via multiple providers
  • True application-based provider selection
  • Application control and content security inspection on encrypted web traffic

Next-Generation Firewall (API)

The Barracuda NextGen Firewall X-Series uses application visibility and user-identity awareness to enable enforcement of granular access policies. Define policies based on any combination of application, user or group ID, time, and other criteria. Policies can even respond to specific application behaviors or features - for example, allowing all employees to use Skype voice, but allowing only executives to use Skype video, except after business hours.

Content Security

With the Barracuda NextGen Firewall X-Series, the content security functionality is not simply bolted on top of the network stack, it's deeply integrated into the Firewall engine. As an option, antivirus and web filtering may even be offloaded to the Barracuda Web Security Service cloud, freeing further CPU cycles for network scalability. With the optionally available Advanced Threat Detection the X-Series also offers protection against advanced malware and zero day exploits that routinely bypass traditional signature-based IPS and antivirus engines.

Affordable and Easy to Use

The Barracuda NextGen Firewall X-Series is the first next-generation Firewall to combine application control, user awareness, network Firewall, and content security with the elasticity of the cloud. Unmatched ease of use means there's no need for additional IT staff or special training, and with the Barracuda NextGen Firewall X affordable, all-inclusive pricing, you can rest assured that there won't be any surprise costs down the road.

Technical Specs

Firewall

  • Stateful packet forwarding
  • Full user-identity awareness
  • Intrusion Prevention (IPS)
  • Application Control and enforcement (incl. subtypes)
  • SafeSearch Enforcement
  • Google Accounts Enforcement
  • DoS/DDoS denial of service protection
  • Transparent DNAT forward
  • NAT, PAT
  • Object-oriented rulesets
  • Dynamic rules/timer triggers
  • User/group-based firewall rules
  • High Availability
  • ARP security
  • Bridging
  • Jumbo frame support

User Identity Awareness

  • Terminal Server Agent
  • Domain Controller Agent
  • Full user and group membership awareness
  • Authentication via captive portal
  • Authentication - supports NTLM, RADIUS, LDAP/LDAPS, Active Directory, local authentication
  • Authentication browser for AD and LDAP servers

Infrastructure Services

  • DHCP server
  • HTTP proxy
  • SIP proxy
  • DNS cache
  • Authoritative DNS
  • SNMP support

Traffic Optimization

  • Uplink monitoring and aggregation
  • Policy routing
  • Application-based provider selection
  • Traffic shaping and Quality of Service
  • 7 predeffined shaping bands
  • Health checks for staticlinks / routes via ICMP

VPN

  • Unlimited Site-to-Site VPN licensing
  • Unlimited Client-to-Site VPN licensing
  • Unlimited SSL VPN
  • VPNC certified (basic interoperability)
  • Supports IPsec, PPTP
  • Supports AES-128/256, 3DES, DES, null ciphers
  • VPN clients available for Windows, Mac, Linux
  • iOS and Android mobile device VPN support

Wi-Fi (on selected models)

  • Wi-Fi (802.11n) access point
  • Up to three independent wireless networks
  • Click-through Wi-Fi portal web page for guest access

Advanced Threat Detection

  • Dynamic, on-demand analysis of malware programs (sandboxing)
  • Dynamic analysis of documents with embedded exploits (PDF, Office, etc.)
  • Detailed forensics for both, malware binaries and web threats (exploits)
  • Support for multiple operating systems (Windows, Android, etc.)
  • Flexible malware analysis in the cloud

Support Options

Security Options

  • "Web Security" provides category- based web filtering (both online or on-box) and virus protection (online or on-box)
  • "Advanced Threat Detection" provides file-type-based protection against advanced malware and cloud-based sandboxing
  • "Premium Remote Access" provides unlimited remote access via the CudaLaunch app available for Windows, macOS, iOS, and Android devices

Barracuda Energize Updates

  • Firmware updates
  • IPS signature updates
  • Application control updates
  • Standard technical support

Instant Replacement Service

  • Replacement unit shipped next business day
  • 24/7 technical support
  • Hardware refresh every four years

MODEL COMPARISON

MODEL COMPARISON X50 X100 X200 X300 X400 X600
Capacity
Maximum Firewall Throughput * 800 1.000 1.900 2.100 4.000 6.000
VPN Throughput (Mb/sec)** 50 100 200 300 600 800
IPS & Application Control Throughput (Mb/sec) 100 300 400 650 2000 3000
Max. Concurrent Sessions 8.000 8.000 60.000 120.000 300.000 500.000
Max. new session/sec 2.000 2.000 8.000 12.000 15.000 20.000
Max. Recommended AppDetect Users 50 100 200 300 500 1.000
Max. Recommended AppDetect & IPS Users 25 50 100 150 250 500
Max. Recommended AppDetect & IPS & Web Security Users 15 25 50 100 200 400
Hardware
Form Factor Desktop Desktop Desktop 1U 1U 1U
Dimensions (cm) 27.5x 16.3x 4.6 27.5x 16.3x 4.6 27.5x 16.3x 4.6 37.8x 16.3x 4.6 42.8x 40.4x 4.6 42.8x 40.4x 4.6
1 GbE Ethernet NIC 4x 4x 4x 6x 8x 8x
Power Supply 1 external 1 external 1 external 1 external 1 external 1 external
Integrated Wi-Fi AP X51 X101 X201 - - -
Features
Firewall check check check check check check
IPsec VPN check check check check check check
Application Control & Monitoring check check check check check check
Intrusion Prevention (IPS) check check check check check check
High Availability check check check check check check
SSL interception check check check check check check
DHCP server check check check check check check
DNS cache check check check check check check
Authoritative DNS check check check check check check
SIP Proxy check check check check check check
Automatic Uplink Failover & Uplink Balancing check check check check check check
Application-based Provider Selection check check check check check check
Traffic Management & Optimization check check check check check check
SafeSearch enforcement check check check check check check
SSL VPN check check check check check check
Web Security (web filtering, antivirus) Optional Optional Optional Optional Optional Optional
Advanced Threat Detection Optional Optional Optional Optional Optional Optional
Premium Remote Access Optional Optional Optional Optional Optional Optional
Centrally Manageable Cloud-based Cloud-based Cloud-based Cloud-based Cloud-based Cloud-based

* Measured with UDP; large packets
** Measured with AES; MD5

 
 
Copyright © 2004-2020 SafeSoft Kft. All Rights Reserved.