• Anti-spam
• Anti-virus
• Anti-spoofing
• Anti-phishing
• Anti-spyware (Attachments)
• Denial of Service

The Barracuda Spam Firewall is compatible with all email servers and can fit into nearly any corporate or small business environment. It is used by small organizations with as few as 10 employees and large organizations with as many as 200,000 employees. A single Barracuda Spam Firewall handles up to 30,000 active email users. Multiple units can be clustered together for even greater capacity and high availability.

The Barracuda Spam Firewall protects your email server with twelve defense layers:

• Network Denial of Service Protection
• Rate Control
• IP Reputation Analysis
• Sender Authentication
• Recipient Verification
• Virus Scanning
• Policy (User-specified rules)
• Spam Fingerprint Check
• Intent Analysis
• Image Analysis
• Bayesian Analysis
• Rule-based Scoring

• URL filtering by content category.  You can define policies that restrict or allow Web sites based on their categorization.  The Barracuda Web Filter includes definitions for 58 content categories, including pornography, violence, hacking, sports, news, dating, and chat sites.
• URL filtering by domain name or URL pattern.  You can customize your content filtering policy to restrict certain Web sites, or look for specific patterns in Web site addresses.  Advanced administrators can specify URL patterns to block using the very powerful UNIX regular expression (regexp) syntax
• Image Safe Search integration (URL rewriting).  The Barracuda Web Filter takes advantage of the “safe search” content filtering capabilities built into image search engines, such as Google, Yahoo, and MSN.  If enabled, the Barracuda Web Filter Image Safe Search feature rewrites URLs for these image search engines to include the URL parameters that restrict display of objectionable content in cached image search results.
• File type blocking.  You can define policies to restrict downloading of files over the Web based on their MIME types.  For example, to block downloads of executables, you can block MIME type application/octet-stream.

These controls can be combined to govern Internet usage to increase productivity, reduce exposure to offensive material, and to prevent visits to sites that could compromise security.
 

IM Server
The integrated Instant Messaging server provides companies with a secure internal IM network. Internal messages need never leave the corporate network, and are protected by industry-leading 256-bit encryption. The Barracuda IM Client provided with the product comes with client rollout and roster management tools, and is easy to install and deploy.

Security
The Barracuda IM Firewall offers one of the highest levels of message encryption available on any IM product. Its 256-bit message encryption ensures that your corporate messages remain private as long as you are using the Barracuda IM Client. The client provides users security even outside their corporate network from anywhere on the Internet.

Logging/Reporting
With the Barracuda IM Firewall all instant messaging traffic on your network is logged, including group chat sessions and file transfers. All logs are stored on the appliance and can be easily backed up or exported.

Keyword Tools
Keyword notification and content management tools ensure that your users are adhering to your internal policies and government compliance regulations. Keywords, phrases, and regular expressions can be identified, removed, or blocked entirely within IM conversations. If a policy violation is committed, the appropriate parties can be notified via email or IM. All policy violations are logged and noted.
 

• HTTP
• HTTPS (SSL)
• SSH
• SMTP
• IMAP
• RDP (Citrix/Terminal Services)
• POP3
• NNTP
• ASP
• Streaming Media
• DNS
• LDAP
• RADIUS
• TFTP
• Other TCP/UDP based services

Intrusion Prevention System
Many security technologies are integrated into the Barracuda Load Balancer. The set-and-forget, best of breed Intrusion Prevention System (IPS) helps secure your network, even if you miss a patch or if an exploit manages to get past your existing security. In addition to the Denial of Service (DDoS) protection provided for all load balanced servers by the built-in IPS, the Barracuda Load Balancer will also automatically block any exploits that are detected across multiple protocols, with no extra configuration required. Exploit signatures are regularly updated at Barracuda Central, and are automatically delivered to your Barracuda Load Balancer via Energize Updates.

Auto-Discover Mode
All models of the Barracuda Load Balancer support Auto-Discovery of Real Servers and Services, to ensure quick and easy deployment of new servers.  For common services, there’s no need to manually configure each port. The Barracuda Load Balancer automatically detects which services are running on a specified server, which saves on deployment and configuration time. 

IP Persistence
The Barracuda Load Balancer supports technology that directs clients back to the same server to establish session server persistence. In environments where session persistence is required, Layer 4 IP persistence provides a fast and reliable solution for most configurations including most encrypted e-commerce traffic, database, and Citrix/Terminal Services configurations. The timeout is fully configurable and can be enabled on a service level.

Scheduling Policy
Multiple scheduling technologies are supported by the Barracuda Load Balancer, including server weighting, Weighted Least Connection (WLC), and Weighted Round Robin (WRR).

Automated Service Monitor
A fully integrated service monitor is available on all Barracuda Load Balancers, which allows for easy re-configuration of your servers based on the availability of your upstream and downstream infrastructure components. Downed servers are automatically removed from the farm within seconds of server failure.

Multiple Deployment Modes
The Barracuda Load Balancer supports three different operating modes for the most flexibility of any load balancer on the market. Route-path offers the most flexibility, while Bridge-path allows deployment without changes to existing IP infrastructure. Direct Server Return allows up to 10GB throughput, ideal for content delivery networks.

High Availability
High Availability is easy to set up with the Barracuda Load Balancer's  Web interface. Simply point the secondary (backup) Barracuda Load Balancer to the primary Load Balancer’s management IP address, and the load balancer synchronizes configurations to establish a highly available network that brings your server farm to enterprise grade availability.

Web Administrative Interface
The Barracuda Load Balancer configuration is executed through an intuitive Web interface. With features such as quick server and service adding, health monitoring, and Auto-Discover, the Barracuda Load Balancer is easy to use -- a typical configuration can be performed in less than ten minutes!

• Archiving. With multiple modes of deployment, getting started with email archiving is easy. Emails intended to be archived can either be pushed to the Barracuda Message Archiver via SMTP, or the Barracuda Message Archiver can pull emails via standard email access protocols (POP3 or IMAP). The Barracuda Message Archiver can also be deployed in conjunction with the Barracuda Spam Firewall, leveraging its capabilities to journal inbound and outbound email.
• MAPI email import. Using Microsoft’s Message Application Protocol Interface (MAPI), you can import emails from other sources to consolidate the historical emails stored on a Microsoft Exchange server into one secure email archive.
• PST file import. Scattered PST files stored on users’ desktops or laptops can also be imported. In conjunction with the MAPI email import feature, this allows you to create a comprehensive archive of new and historical emails.
• SMTP relay. The Barracuda Message Archiver can work as an SMTP relay to forward emails to your designated email server. This capability allows you to capture inter-company emails for archiving if journaling is not practical.
• Indexing. Using a thorough list of all message components, emails are fully indexed by message content and attachments with the option to add tags for customized searches.
• Search and retrieval. The Archive Search tool located in the Web user interface conducts quick full-text searches based on tags or message content. Users can easily search personal email archives, view emails in the archive and forward emails to active mailboxes.
• Message storage. Built-in storage and redundancy is provided through internal or external mirroring, as well as swappable drive trays that enable added control and email management across the organization’s network. This allows you to move emails from costly, transaction-based storage required for production email servers to less expensive storage options.
• Single instance storage. With the use of single instance storage, the Barracuda Message Archiver intelligently removes duplicate emails or attachments from a message thread, ensuring only one copy is compressed before storing it in a file system to maximize storage capacity.
• Tamper resistant. End users can monitor the status of email messages sent to their archive by checking to see if it has been corrupted or deleted.

• HTTP protocol compliance. At a basic level, Barracuda Web Application Controllers verify that all inbound requests comply with the HTTP specification. For example, inbound requests with more than one Content-Length header are typically the basis of HTTP request smuggling attacks; therefore they are illegal according to the HTTP specification and are blocked automatically.
• Protection against common, high-visibility attacks. Hackers can take advantage of vulnerabilities in your online Web forms to attack your applications. Barracuda Web Application Controllers protect your Web applications against SQL injections, OS command injections and cross-site scripting attacks.
• Protection against attacks based on session state. Barracuda Web Application Controllers protect your Web applications against any attacks based on session state, such as forms tampering or cookie tampering.
• Online form field validation. Through a positive security model, Barracuda Web Application Controllers can ensure that requests conform with a developer’s intention. For example, if a developer specifies that a field should contain 40 characters of text input, any attempt by an attacker to inject a Trojan or a virus will be rejected outright because it does not conform to that input pattern.
• Outbound data theft protection. In addition to inspecting the request traffic, Barracuda Web Application Controllers also inspect all outbound packets for any data pattern expressible as a UNIX-style regular expression. Built-in policies protect all major credit cards and US Social Security number patterns and new data patterns can be added at any time. Inspection for outbound leakage of these patterns can be applied to security policy on-the-fly.
• Web site cloaking. To prevent hackers from doing reconnaissance on your Web infrastructure, Barracuda Web Application Controllers automatically strip identifying banners of Web server software and version numbers out of all transactions.
• Anti-crawling. While some Web crawlers, such as search engines, are often desirable, you may wish to prevent all other users from downloading your entire site. Barracuda Web Application Controllers can easily identify and allow legitimate crawlers while blocking more malicious ones.
• Rate controls and application denial of service (DoS) protection. You can specify a performance cap for your application, above which traffic is queued. Rate controls ensure that applications are not pushed beyond their performance limits, preventing application-layer DoS.
• Advanced learning modes and fine-grained control. Barracuda Web Application Controllers feature automatic “profiling” of Web sites based on traffic passing through the system as well as automatic fine-grain rules creation based on both HTTP requests and responses down to the level of individual HTML elements.