Blog

Firmware Release 7.7 Integrates New IP Reputation Feature and Protection Against Slow Client Attack Tools

Campbell, Calif. (October 16, 2012) – Barracuda Networks Inc., a leading provider of security, networking and data protection solutions, today launched new security capabilities for the Barracuda Web Application Firewall, targeting the latest threat and attack strategies, including botnets and application-level distributed denial of service (DDos) attacks.

Threats aimed at disrupting online services – largely distributed denial of service attacks – continue to plague the Internet despite industry best efforts and recent cases. These attacks typically emanate from multiple geographical locations and involve armies of botnets. For organizations that conduct business online, repercussions can include revenue loss and damaged business reputation.

“While denial of service disruptions focused on flooding network traffic or exploiting weaknesses in network protocols are anything but new, the attacks have reached new heights with tech-savvy attackers focusing on the application layer,” explains Stephen Pao, vice president of product management at Barracuda Networks. “By integrating our rich portfolio of security analysis and traffic management technology assets, we can offer a totally integrated Web application security offering unmatched by other vendor solutions.”

The new security capabilities are available with firmware release 7.7 of the Barracuda Web Application Firewall, leveraging both the security and traffic management uses of the platform. Highlights include:

• IP reputation analysis – The Barracuda Web Application Firewall enables administrators to allow or deny access to an application based on the client’s IP reputation, which is based on multiple characteristics such as geographical location of the client and whether the access is from an anonymous proxy.
• Granular application-specific rate controls – The Barracuda Web Application Firewall allows administrators to prioritize traffic and increase security through a layered security approach to determine access based on rate of data flow per service.

In addition, the Barracuda Web Application Firewall firmware release 7.7 also supports new management capabilities:

• Expanded security coverage across all applications – The Barracuda Web Application Firewall leverages its shared security policy infrastructure to expand security coverage beyond critical systems, allowing it to be deployed in a variety of segregated networks to protect against advanced threats such as Cross Site Request Forgery (CSRF) and HTTP Parameter Pollution.
• Complete SIEM integration – The Barracuda Web Application Firewall supports the exporting of logs using the standard Syslog protocol, as well as customized log formats to integrate with SIEM tools such as HP ArcSight or Splunk. Additionally, the new Barracuda Web Application Firewall Splunk application, which allows administrators to access a rich set of reports and graphs depicting log data, is now available from the Barracuda Networks customer portal and the Splunk website.

The Barracuda Web Application Firewall continues to receive industry praise for its innovative, easy-to-use platform. Most recently, the Barracuda Web Application Firewall won SearchSecurity’s Readers’ Choice Bronze Award for Best of Web Application Firewalls 2012, and Info-Tech Research Group listed Barracuda Networks as an “Innovator” in the Vendor Landscape report, “Application Delivery Controllers: It’s more than just load balancing” published September 2012.

Pricing and Availability
Barracuda Web Application Firewall firmware release 7.7 is available immediately at no additional charge to existing customers on the current hardware platform with an active Energize Update subscription. Barracuda Web Application Firewall pricing in North America ranges from US$4,999 to US$69,999 depending on model, with no per user fees. International pricing and availability varies based on region. For more information, please visit https://www.barracudanetworks.com/products/waf.