DATASHEET

Barracuda
Web Application Firewall
Protect applications and data from advanced threats.

Barracuda Web Application Firewall blocks an ever-expanding list of

sophisticated web-based intrusions and attacks that target the applications
hosted on web servers and the sensitive or confidential data to which they
have access. Placed between the Internet and web servers, Barracuda Web
Application Firewall scans all inbound web traffic to block attacks, and scans
outbound traffic to provide highly effective data loss prevention.

Barracuda Web Application Firewall simplifies application security so you can

focus on your business. Its comprehensive feature set, versatile deployment
options, and ease of use lets you automate many application security tasks,
whether your web infrastructure lives on-site, in a virtualized environment, or
in the cloud.

Get nonstop protection Simplify identity and Make advanced web

from evolving threats access management app security easy
Barracuda Web Application Firewall Barracuda Web Application Firewall has Pre-built security templates and
provides superior protection against data strong authentication and access control intuitive web interface provide
loss, DDoS, and all known and unknown capabilities that ensure security and immediate security without the need for
(zero-day) attack vectors. Automatic privacy by restricting access to sensitive time-consuming tuning or application
updates provide defense against new applications or data to authorized users. learning. Integration with security
threats as they appear. As new types vulnerability scanners and SIEM tools
of threats emerge, it acquires new automates the assessment, monitoring,
capabilities to block them. and mitigation process.

Barracuda Networks • DATASHEET • Barracuda Web Application Firewall APPLICATION AND CLOUD SECURITY
Technical specs
FEATURES 360 460 660 86X SERIES 96X SERIES 106X SERIES

WEB APPLICATION SECURITY

OWASP Top 10 Web Application Security
✓ ✓ ✓ ✓ ✓ ✓
Risks Protection
Geo-IP and IP Reputation (including
✓ ✓ ✓ ✓ ✓ ✓
public proxies and Tor Nodes)
Smart Signatures ✓ ✓ ✓ ✓ ✓ ✓
Outbound Data Theft Protection (Credit
✓ ✓ ✓ ✓ ✓ ✓
Cards, SSN etc.)
Adaptive Profiling - - ✓ ✓ ✓ ✓
Exception Heuristics ✓ ✓ ✓ ✓ ✓ ✓
Auto-Configuration Engine (Requires
✓ ✓ ✓ ✓ ✓ ✓
ABP Subscription)
File Upload Control ✓ ✓ ✓ ✓ ✓ ✓
File Upload Security (Anti-Virus and
Advanced Threat Protection) (ATP - - ✓ ✓ ✓ ✓
requires subscription)
Website Cloaking ✓ ✓ ✓ ✓ ✓ ✓
Protocol Checks for HTTP and
✓ ✓ ✓ ✓ ✓ ✓
HTTPS traffic
Granular per URL/parameter policies ✓ ✓ ✓ ✓ ✓ ✓
Rate Control - - ✓ ✓ ✓ ✓
Client-Side Protection (Requires
✓ ✓ ✓ ✓ ✓ ✓
ABP License)
API PROTECTION
Protection against OWASP Top 10 API
Partial Partial ✓ ✓ ✓ ✓
Security Risks
API Security (JSON) ✓ ✓ ✓ ✓ ✓ ✓
API Security (XML) - - ✓ ✓ ✓ ✓
API Discovery (JSON) ✓ ✓ ✓ ✓ ✓ ✓
API Discovery (XML) - - ✓ ✓ ✓ ✓
BOT PROTECTION
Web Scraping Protection including
✓ ✓ ✓ ✓ ✓ ✓
Known Bot Database
Advanced Bot Protection with Cloud-
based Maching Learning (Requires ✓ ✓ ✓ ✓ ✓ ✓
ABP Subscription)
Barracuda Active Threat Intelligence
✓ ✓ ✓ ✓ ✓ ✓
(Requires ABP Subscription)
Bot Spam Protection (Referrer and
✓ ✓ ✓ ✓ ✓ ✓
Comment Spam)
Form Spam Protection - - ✓ ✓ ✓ ✓
Credential Stuffing and Spraying
- - ✓ ✓ ✓ ✓
Protection (Requires ABP Subscription)
Brute Force Attack Protection ✓ ✓ ✓ ✓ ✓ ✓
CAPTCHA Support (Internal,
✓ ✓ ✓ ✓ ✓ ✓
reCAPTCHA v2 & v3)
DDOS PROTECTION
Volumetric DDoS Protection (Requires
✓ ✓ ✓ ✓ ✓ ✓
ADP Subscription)
Application DDoS Protection ✓ ✓ ✓ ✓ ✓ ✓

Barracuda Networks • DATASHEET • Barracuda Web Application Firewall APPLICATION AND CLOUD SECURITY
 FEATURES 360 460 660 86X SERIES 96X SERIES 106X SERIES

SECURE APPLICATION DELIVERY

TLS/SSL Offloading ✓ ✓ ✓ ✓ ✓ ✓
Load Balancing & Content Routing - ✓ ✓ ✓ ✓ ✓
Network HSM Support - - ✓ ✓ ✓ ✓
Dynamic URL Encryption - - ✓ ✓ ✓ ✓
HTTP/1.0, HTTP/1.1, HTTP/2.0,
✓ ✓ ✓ ✓ ✓ ✓
WebSocket, FTP/S & IPv6 Support
Request and Response Control
✓ ✓ ✓ ✓ ✓ ✓
(URL Translation)
Website Translations - ✓ ✓ ✓ ✓ ✓
Caching and Compression - ✓ ✓ ✓ ✓ ✓
IDENTITY AND ACCESS CONTROL
Local Users/Group (Internal LDAP),
✓ ✓ ✓ ✓ ✓ ✓
Client Certificates
LDAP/Active Directory, RADIUS,
Kerberos v5, SMS Passcodes, - ✓ ✓ ✓ ✓ ✓
Okta support
SAML, Azure AD, Duo Support,
RSA SecurID integration, OpenID - - ✓ ✓ ✓ ✓
Connect, JWT
Azure AD - - ✓ ✓ ✓ ✓
Enable single and multi-domain SSO ✓ ✓ ✓ ✓ ✓ ✓
Enable MFA with RADIUS/
- ✓ ✓ ✓ ✓ ✓
LDAP-based services
VIRTUAL PATCHING AND FEEDBACK LOOPS
Barracuda Vulnerability
✓ ✓ ✓ ✓ ✓ ✓
Remediation Service
Virtual Patching support for 20+
✓ ✓ ✓ ✓ ✓ ✓
vulnerability scanners
LOGGING AND REPORTING
Onboard logging [Web Firewall Logs,
Access Logs, Audit Logs, Network ✓ ✓ ✓ ✓ ✓ ✓
Firewall Logs and System Logs)
On-demand and scheduled reporting
✓ ✓ ✓ ✓ ✓ ✓
with 30+ OOTB reports
Syslog Export ✓ ✓ ✓ ✓ ✓ ✓
SIEM/SOAR Support (Includes: Splunk,
ARCsight, Azure Sentinel, RSA enVision,
✓ ✓ ✓ ✓ ✓ ✓
IBM Qradar, Symantec, Sumologic,
Loggly, Azure Event Hub and more)
NETWORKING AND HIGH AVAILABILITY
VLAN and NAT Support ✓ ✓ ✓ ✓ ✓ ✓
Network ACL's ✓ ✓ ✓ ✓ ✓ ✓
Advanced Routing - - ✓ ✓ ✓ ✓
Multi-Port Hardware - - - ✓ ✓ ✓
Link Bonding - - - ✓ ✓ ✓
Active-Passive High Availability ✓ ✓ ✓ ✓ ✓ ✓
Active-Active High Availability - - ✓ ✓ ✓ ✓
ADD ON SUBSCRIPTIONS
Advanced Bot Protection ✓ ✓ ✓ ✓ ✓ ✓
Active DDoS Prevention ✓ ✓ ✓ ✓ ✓ ✓
Advanced Threat Protection - - ✓ ✓ ✓ ✓

Barracuda Networks • DATASHEET • Barracuda Web Application Firewall APPLICATION AND CLOUD SECURITY
 FEATURES 360 460 660 860 861 862

MODEL COMPARISON

Throughput 25 Mbps 50 Mbps 200 Mbps 1 Gbps 1 Gbps 1 Gbps

Max. Backend
Servers 5 10 25 150 150 150
(Recommended)
HTTP
Transactions Per 8000 15000 30000 90000 90000 90000
Second
HTTP
Connections Per 2000 3000 10000 16000 16000 16000
Second
HTTPS
Transactions Per 2500 4000 12000 30000 30000 30000
Second
Concurrent
90000 150000 500000 950000 950000 950000
Connections

HARDWARE SPECIFICATIONS

Form Factor 1U-Mini 1U-Mini 1U 1U 1U 1U

"Dimensions
17.2 x 22.4
(inch) 17.2 x 1.7 x 1.4 17.2 x 1.7 x 1.4 17.2 x 1.7 x 22.6 17.2 x 22.4 x 1.73 17.2 x 22.4 x 1.73
x 1.73
WxDxH"

Weight (lb) 12 12 26 26.45 26.45 26.45

ECC Memory - - - Yes Yes Yes

10 10 10 10 10 10
Management
100 100 100 100 100 100
Port
1000 1000 1000 1000 1000 1000
2 x 10/100 RJ45
Ethernet Ports - - - - -
with bypass
Gigabit Ethernet
- 2x 1G RJ45 with bypass 2x 1G RJ45 with bypass 8x 1G RJ45 8x 1G RJ45 with bypass 8x 1G SFP (MM)with bypass
Ports
10Gigabit
- - - - - -
Ethernet Ports

Power Supply 1 1 1 2 2 2

AC Input (Amps) 1.2 1.4 1.8 4.2 4.2 4.2

Heat Output
490 575 740 967.78 967.78 1001.91
(BTU/Hr)
Operating 5°C-35°C "0 ~ 40°C ( 32
5°C-35°C (41°F-95°F) 5°C-35°C (41°F-95°F) "0 ~ 40°C ( 32 ~ 104°F )" "0 ~ 40°C ( 32 ~ 104°F )"
Temperature (41°F-95°F) ~ 104°F )"

"10 ~ 85%
Operational 8% ~ 90% (non- 8% ~ 90% (non- 8% ~ 90% (non- "10 ~ 85% relative
relative "10 ~ 85% relative humidity"
Relative Humidity condensing) condensing) condensing) humidity"
humidity"

Safety & EMC Available on "EN 60950 "EN 60950 "EN 60950 "EN 60950
Available on Request
Certifications Request FCC, CE" FCC, CE" FCC, CE" FCC, CE"

Barracuda Networks • DATASHEET • Barracuda Web Application Firewall APPLICATION AND CLOUD SECURITY
 FEATURES 960 961 964 1060 1061 1062

Throughput 5 Gbps 5 Gbps 5 Gbps 10 Gbps 10 Gbps 10 Gbps

Max. Backend Servers (Recommended) 300 300 300 600 600 600

HTTP Transactions Per Second 180000 180000 180000 190000 190000 190000

HTTP Connections Per Second 30000 30000 30000 70000 70000 70000

HTTPS Transactions Per Second 50000 50000 50000 70000 70000 70000

Concurrent Connections 1800000 1800000 1800000 2800000 2800000 2800000

HARDWARE SPECIFICATIONS

Form Factor 1U 1U 1U 2U 2U 2U

"Dimensions (inch)
17.2 x 22.4 x 1.73 17.2 x 22.4 x 1.73 17.2 x 22.4 x 1.73 17.4 x 3.5 x 25.5 17.4 x 3.5 x 25.5 17.4 x 3.5 x 25.5
WxDxH"

Weight (lb) 26.45 26.45 26.45 52 52 52

ECC Memory Yes Yes Yes Yes Yes Yes

10 10 10 10 10 10
Management Port 100 100 100 100 100 100
1000 1000 1000 1000 1000 1000

Ethernet Ports - - - - - -

8x 1G RJ45 with 8x 1G SFP (MM) 8x 1G RJ45 with 8x 1G Fiber with

Gigabit Ethernet Ports 8x 1G RJ45 16x 1G RJ45
bypass with bypass bypass bypass
2x 10G RJ45 with 2x 10G SFP+ (MM) 4x 10G RJ45 with 4x 10G Fiber with
10Gigabit Ethernet Ports 2x 10G RJ45 4x 10G RJ45
bypass with bypass bypass bypass

Power Supply 2 2 2 2 2 2

AC Input (Amps) 4.2 4.2 4.2 5.4 5.4 5.4

Heat Output (BTU/Hr) 1003.8 1003.8 1044.38 2200 2200 2200

"0 ~ 40°C ( 32 ~ "0 ~ 40°C ( 32 ~ "0 ~ 40°C ( 32 ~ 5°C-35°C 5°C-35°C 5°C-35°C

Operating Temperature
104°F )" 104°F )" 104°F )" (41°F-95°F) (41°F-95°F) (41°F-95°F)

"10 ~ 85% relative "10 ~ 85% relative "10 ~ 85% relative 8% ~ 90% (non- 8% ~ 90% (non- 8% ~ 90% (non-
Operational Relative Humidity
humidity" humidity" humidity" condensing) condensing) condensing)

"EN 60950 "EN 60950 "EN 60950 "EN 60950 "EN 60950 "EN 60950
Safety & EMC Certifications
FCC, CE" FCC, CE" FCC, CE" FCC, CE" FCC, CE" FCC, CE"

Support options Management features

• Customizable role-based administration
Instant Replacement Service • Vulnerability scanner integration
• Replacement unit shipped next business day • Trusted host exception
• 24/7 technical support • Rest API
• Hardware refresh every four years • Custom templates
• Interactive and scheduled reports
Barracuda Energize Updates

• Standard technical support

• Firmware and capability updates as required
• Automatic application definitions updates

DATASHEET • US 1.6 • Copyright 2019-2021 Barracuda Networks, Inc. • 3175 S. Winchester Blvd., Campbell, CA 95008 • 408-342-5400/888-268-4772 (US & Canada) • barracuda.com
Barracuda Networks and the Barracuda Networks logo are registered trademarks of Barracuda Networks, Inc. in the United States. All other names are the property of their respective owners.