Start with flexible, powerful WAF solutions.
Barracuda Web Application Firewall (WAF) solutions are available as appliances (hardware or virtual) that can be implemented on premises or hosted in the cloud, as a container and through an innovative SaaS solution that combines advanced functionality with ease of deployment and management. The Containerized Barracuda Web Application Firewall can be deployed and managed using the SaaS solution, providing the option to use either or both solutions based on your needs.
With both deployment models, you get complete application security, including protection for the OWASP Top 10 Web & API threats and many more vulnerabilities and automated threats, along with automatic detection and remediation. Compared to many competing solutions, Barracuda WAF solutions are remarkably simple to deploy, configure, and manage, with capabilities like the Machine Learning-based Auto Configuration Engine.
Gain application threat intelligence.
Real-time attacks need real-time responses. Barracuda Active Threat Intelligence collects threat data from a large, worldwide network of sensors and customer traffic. This data is processed using Machine Learning in near real-time and pushed out to connected units immediately, allowing for rapid detection of new threats and attackers.
Barracuda Active Threat Intelligence contains multiple components. Barracuda Vulnerability Manager and Remediation Service provide scanning and remediation capabilities. Barracuda Advanced Threat Protection is a cloud-sandbox that scans and identifies Advanced Persistent Threats in file uploads. Barracuda Active Threat Intelligence also holds the cloud Machine Learning layer for Advanced Bot Protection and the Auto Configuration Engine. Auto Configuration Engine is a service that reviews all your application traffic from connected units and provides application-specific configuration recommendations, reducing time and effort associated with admin overhead.
Stop today’s most advanced, malicious bots.
Hackers are creating sophisticated bots that can mimic human app users to carry out devastating attacks.
The challenge is not only to distinguish between legitimate and malicious bots, but also to sort real human users from the most advanced bots.
Barracuda Advanced Bot Protection uses artificial intelligence and machine learning in the cloud to continually improve its ability to spot and block bad bots and human-mimicking “low and slow” bots—while allowing legitimate human and bot traffic to proceed with minimal impact.
Don’t let DDoS attacks bring your business to its knees.
Distributed Denial-of-Service (DDoS) attacks continue to be a serious threat to businesses of all kinds. By making your apps unusable or inaccessible for legitimate users, they can effectively shut down your business operations for a prolonged period of time, which can be immensely costly.
Barracuda application security solutions include powerful, full-spectrum DDoS protection. Covering Layer-3 to Layer-7 traffic, and blocking both volumetric and application-based DDoS attacks, this capability ensures that your business-critical applications remain available, accessible, and effective, without the interruptions that DDoS attacks seek to create.
Protect against dangerous supply chain attacks.
Attackers exploit third-party scripts to perform client-side digital skimming attacks, such as Magecart, to steal PII and financial data directly from the browser. These attacks are difficult to detect because these scripts are loaded directly by the browser and attackers are using sophisticated techniques to avoid detection with scanners and similar defensive methods.
Barracuda Web Application Firewall offers Client-Side Protection, a feature that automates the CSP and SRI configuration, reducing admin overheads and configuration errors. In addition to these capabilities, the Barracuda Active Threat Intelligence layer provides visualization and reporting for these configurations, providing admins with deeper visibility into the usage of these scripts.
Make sure API attacks don’t get a chance.
Modern applications are increasingly more interconnected, exposing more and more APIs to hacking attacks. Barracuda application security solutions provide protection for your entire attack surface, including REST and mobile applications, to help ensure that APIs are protected.
XML protection secures REST and WSDL interfaces against schema and WSDL poisoning. JSON protection scans payloads to ensure that only legitimate requests are allowed through. Interactive applications using AJAX are also protected.
Control who can see what.
In addition to defending against a variety of cyber threats, it is also critical to ensure that only authorized personnel can access your application backends and data.
Barracuda application security keeps data from falling into the wrong hands by integrating with AD, LDAP, and RADIUS, giving you granular control over which users and groups can access what data.
Barracuda WAF solutions can secure all the services that rely on AD FS. SAML support provides a seamless single-sign-on (SSO) experience across on-prem and cloud applications.
Two-factor authentication further enhances security and integrates with popular services such as RSA SecureID, SMS PASSCODE, Duo, and others.