DATASHEET

Barracuda
Web Application Firewall
Protect applications and data from advanced threats.

Barracuda Web Application Firewall blocks an ever-expanding list of

sophisticated web-based intrusions and attacks that target the applications
hosted on web servers and the sensitive or confidential data to which they
have access. Placed between the Internet and web servers, Barracuda Web
Application Firewall scans all inbound web traffic to block attacks, and scans
outbound traffic to provide highly effective data loss prevention.

Barracuda Web Application Firewall simplifies application security so you can

focus on your business. Its comprehensive feature set, versatile deployment
options, and ease of use lets you automate many application security tasks,
whether your web infrastructure lives on-site, in a virtualized environment, or
in the cloud.

Get nonstop protection Simplify identity and Make advanced web

from evolving threats access management app security easy
Barracuda Web Application Firewall Barracuda Web Application Firewall has Pre-built security templates and
provides superior protection against data strong authentication and access control intuitive web interface provide
loss, DDoS, and all known and unknown capabilities that ensure security and immediate security without the need for
(zero-day) attack vectors. Automatic privacy by restricting access to sensitive time-consuming tuning or application
updates provide defense against new applications or data to authorized users. learning. Integration with security
threats as they appear. As new types vulnerability scanners and SIEM tools
of threats emerge, it acquires new automates the assessment, monitoring,
capabilities to block them. and mitigation process.

Barracuda Networks • DATASHEET • Barracuda Web Application Firewall NETWORK SECURITY

 Cloud detection and services layer
Shared services (threat intelligence, application scanning services)

Reporting
Ease of use and analytics Virtual patching Bootstrapping
and rehydration
Auto-scaling

Access control Authentication Authorization

OWASP Top Protection Advanced Bot Advanced Threat

Security 10 and more for APIs Protection
DDoS prevention
Protection

Caching and
App delivery Load balancing
compression
Content routing Traffic encryption

API-driven and DevSecOps-ready

Technical specs Support options

Web application security Networking Instant Replacement Service

• OWASP Top 10 protection (including) • VLAN, NAT • Replacement unit shipped next business day
- SQL injection • Network ACLs • 24/7 technical support
- Cross-site scripting • Advanced routing • Hardware refresh every four years
- Cookie or forms tampering
- Smart signatures Supported web protocols Barracuda Energize Updates
• Form field meta-data validation • HTTP/S 0.9/1.0/1.1/2.0 • Standard technical support
• Adaptive security • WebSocket • Firmware and capability updates as required
• Website cloaking • FTP/S • Automatic application definitions updates
• URL encryption • XML
• Response control • IPv4/IPv6
• JSON payload inspection Hardware options
• XML firewall Authentication
• Web scraping protection • LDAP/RADIUS • Optional ethernet bypass
• Network HSM Support (660 & above) • Client certificates
• Outbound data theft protection • SMS passcode
- Credit card numbers • Single sign-on Management features
- Custom pattern matching (regex) • Multi-domain SSO
• Granular policies to HTML elements • Customizable role-based administration
• Protocol limit checks Advanced authentication • Vulnerability scanner integration
• File upload control (660 and above) • Trusted host exception
• Geo IP location • Rest API
• Kerberos v5
- Anonymous Proxy • Custom templates
• SAML
• Tor Blocking • Interactive and scheduled reports
• Azure AD
• RSA SecurID
DDoS protection

• Integration with Barracuda NextGen Firewall Advanced Bot Protection

to block malicious IPs • Detects “low-and-slow” bots
• Barracuda IP Reputation Database • Minimizes false positives
• Heuristic Fingerprinting • Allows human and good-crawler activity
• CAPTCHA challenges
• Slow Client protection Application delivery and acceleration
• ToR exit nodes
• High availability
• Barracuda blacklist
• SSL offloading
• Volumetric DDoS protection3
• Load balancing
SIEM integrations • Content routing

• HPE ArcSight Logging, monitoring, and reporting

• RSA enVision
• System log
• Splunk
• Web firewall log
• Symantec
• Access log
• Microsoft Azure Event Hub
• Audit log
• Custom
• Network firewall log
• On-demand and scheduled reports

Barracuda Networks • DATASHEET • Barracuda Web Application Firewall NETWORK SECURITY

Model Comparison
360 460 660

SPECIFICATIONS
HTTP transactions per second 8,000 15,000 30,000
HTTP Connections per second 2,000 3,000 10,000
HTTPS transactions per second 2,500 4,000 12,000
Concurrent connections 90,000 150,000 500,000
Throughput 25 Mbps 50 Mbps 200 Mbps
Backend servers supported 1-5 5-10 10-25
NETWORKING
Advanced routing - - •
Multi-port hardware - - -
Link bonding - - -
HARDWARE
ECC memory - - •
Management port 10/100 10/100/1000 10/100/1000
Ethernet ports 2 x 10/100 w/bypass CU - -
Gigabit ethernet ports - 2 x GbE w/bypass CU 2 x GbE w/bypass CU
10 Gigabit ethernet ports - - -
PHYSICAL
Form factor 1U - Mini 1U - Mini 1U
Dimensions (in) 17.2 x 1.7 x 14 17.2 x 1.7 x 14 17.2 x 1.7 x 22.6
Weight (lb) 12 12 26
Power supply 1 1 1
AC input (Amps) 1.2 1.4 1.8
Voltage 100-240V 50-60 Hz 100-240V 50-60 Hz 100-240V 50-60 Hz
Heat output (BTU/Hr) 490 575 740
Operating temperature 5°C-35°C (41°F-95°F) 5°C-35°C (41°F-95°F) 5°C-35°C (41°F-95°F)
Operational relative humidity 8% ~ 90% (non-condensing) 8% ~ 90% (non-condensing) 8% ~ 90% (non-condensing)

Power supply:
• USA - UL listed, FCC
Safety certifications Available upon request Available upon request • Canada - CUL listed
• Europe/CE Mark
• EN 0950/ IEC 60950-Compliant

Barracuda Networks • DATASHEET • Barracuda Web Application Firewall NETWORK SECURITY

Model Comparison
860 861 862

SPECIFICATIONS
HTTP transactions per second 90,000 90,000 90,000
HTTP connections per second 16,000 16,000 16,000
HTTPS transactions per second 30,000 30,000 30,000
Concurrent connections 950,000 950,000 950,000
Throughput 1 Gbps 1 Gbps 1 Gbps
Backend servers supported 25-150 25-150 25-150
NETWORKING
Advanced routing • • •
Multi-port hardware • • •
Link bonding • • •
HARDWARE
ECC memory • • •
Management port 10/100/1000 10/100/1000 10/100/1000
Ethernet ports - - -
Gigabit ethernet ports 8 x GbE CU 8 x GbE w/bypass CU 8 x GbE w/bypass SPF (MM)
10 Gigabit ethernet ports - - -
PHYSICAL
Form factor 2U 2U 2U
Dimensions (in) 17.4x3.5x25.5 17.4x3.5x25.5 17.4x3.5x25.5
Weight (lb) 46 46 46
Power supply 2 2 2
AC input (Amps) 4.1 4.1 4.1
Voltage 100-240V 50-60 Hz 100-240V 50-60 Hz 100-240V 50-60 Hz
Heat output (BTU/Hr) 1680 1680 1680
Operating temperature 5°C-35°C (41°F-95°F) 5°C-35°C (41°F-95°F) 5°C-35°C (41°F-95°F)
Operational relative humidity 8% ~ 90% (non-condensing) 8% ~ 90% (non-condensing) 8% ~ 90% (non-condensing)

• USA - UL listed • EN 60950/IEC 60950-Compliant

Safety certifications Power supply: • Canada - CUL listed • CB Report
• Germany - TUV Certified • CCC Certification

Barracuda Networks • DATASHEET • Barracuda Web Application Firewall NETWORK SECURITY

Model Comparison
960 961 964

SPECIFICATIONS
HTTP transactions per second 180,000 180,000 180,000
HTTP connections per second 30,000 30,000 30,000
HTTPS transactions per second 50,000 50,000 50,000
Concurrent connections 1.8M 1.8M 1.8M
Throughput 5 Gbps 5 Gbps 5 Gbps
Backend servers supported 150-300 150-300 150-300
NETWORKING
Advanced routing • • •
Multi-port hardware • • •
Link bonding • • •
HARDWARE
ECC memory • • •
Management port 10/100/1000 10/100/1000 10/100/1000
Ethernet ports - - -
Gigabit ethernet ports 8 x GbE CU 8 x GbE w/bypass CU 8 x GbE w/bypass SPF (MM)
10 Gigabit ethernet ports 2 x 10 GbE CU 2 x 10 GbE w/bypass CU 2 x 10 GbE w/bypass SPF+ (MM)
PHYSICAL
Form factor 2U 2U 2U
Dimensions (in) 17.4 x 3.5 x 25.5 17.4 x 3.5 x 25.5 17.4 x 3.5 x 25.5
Weight (lb) 52 52 52
Power supply 2 2 2
AC input (Amps) 5.4 5.4 5.4
Voltage 100-240V 50-60 Hz 100-240V 50-60 Hz 100-240V 50-60 Hz
Heat output (BTU/Hr) 2200 2200 2200
Operating temperature 5°C-35°C (41°F-95°F) 5°C-35°C (41°F-95°F) 5°C-35°C (41°F-95°F)
Operational relative humidity 8% ~ 90% (non-condensing) 8% ~ 90% (non-condensing) 8% ~ 90% (non-condensing)

• USA - UL listed • EN 60950/IEC 60950-Compliant

Safety certifications Power supply: • Canada - CUL listed • CB Report
• Germany - TUV Certified • CCC Certification

Barracuda Networks • DATASHEET • Barracuda Web Application Firewall NETWORK SECURITY

Model Comparison
1060 1061 1062

SPECIFICATIONS
HTTP transactions per second 190,000 190,000 190,000
HTTP connections per second 70,000 70,000 70,000
HTTPS transactions per second 70,000 70,000 70,000
Concurrent connections 2.8M 2.8M 2.8M
Throughput 10 Gbps 10 Gbps 10 Gbps
Backend servers supported 300-600 300-600 300-600
NETWORKING
Advanced routing • • •
Multi-port hardware • • •
Link bonding • • •
HARDWARE
ECC memory • • •
Management port 10/100/1000 10/100/1000 10/100/1000
Ethernet ports - - -
Gigabit ethernet ports 16 x GbE CU 8 x GbE w/bypass CU 8 x GbE w/bypass Fiber
10 Gigabit ethernet ports 4 x 10 GbE CU 4 x 10 GbE w/bypass CU 4 x 10 GbE w/bypass Fiber
PHYSICAL
Form factor 2U 2U 2U
Dimensions (in) 17.4 x 3.5 x 25.5 17.4 x 3.5 x 25.5 17.4 x 3.5 x 25.5
Weight (lb) 52 52 52
Power supply 2 2 2
AC input (Amps) 5.4 5.4 5.4
Voltage 100-240V 50-60 Hz 100-240V 50-60 Hz 100-240V 50-60 Hz
Heat output (BTU/Hr) 2200 2200 2200
Operating temperature 5°C-35°C (41°F-95°F) 5°C-35°C (41°F-95°F) 5°C-35°C (41°F-95°F)
Operational relative humidity 8% ~ 90% (non-condensing) 8% ~ 90% (non-condensing) 8% ~ 90% (non-condensing)

• USA - UL listed • EN 60950/IEC 60950-Compliant

Safety certifications Power supply: • Canada - CUL listed • CB Report
• Germany - TUV Certified • CCC Certification

Specifications subject to change without notice.

DATASHEET • US 1.2 • Copyright 2019 Barracuda Networks, Inc. • 3175 S. Winchester Blvd., Campbell, CA 95008 • 408-342-5400/888-268-4772 (US & Canada) • barracuda.com
Barracuda Networks and the Barracuda Networks logo are registered trademarks of Barracuda Networks, Inc. in the United States. All other names are the property of their respective owners.