Barracuda Web Application Firewall

Hardware-software complex Barracuda Web Application Firewall Is a comprehensive and powerful system for maintaining the security of web applications and Internet sites. Barracuda Web Application Firewall Provides reliable protection against hackers using the vulnerabilities of protocols or applications for the purpose of data theft, damage to services or distortion of the appearance of the site. Realization of protection against attacks such as the introduction of SQL-code, crossite scripting, hacking sessions and buffer overflow. In addition to maintaining the security of websites and applications Barracuda Web Application Firewall Can significantly increase their scalability and performance. The program offers all the functions necessary for delivering, protecting and monitoring enterprise-class web applications, enabling companies to comply with data security standards, such as PCI DSS. Protect websites:

• Protection against Web attacks. The complex provides security for web applications in front of all typical vulnerabilities. In addition, the Barracuda Web Application Firewall "harbors" the site through the discovery of "evidence" that can assist hackers in planning attacks on Web servers.
• Prevention of data loss. All outgoing traffic is checked for leakage of important information: bank card numbers, passport data, TIN, passwords and logins, etc.
• The XML firewall. An integrated XML firewall increases the security of XML-based Web applications and services. Provides protection for Web servers from infection schemes and WSDL and other types of attacks based on XML.
• Speed ​​control and protection from DoS attacks. Speed ​​control allows the administrator to set the client's access restrictions for certain periods of time, to prevent DoS attacks or brute-force attacks.
• Security profiles. Creating application profiles allows the Web Application Firewall to automatically configure and manage security profiles to protect against new threats. Administrators can generate white list rules to manage individual elements or HTML parameters by sampling web traffic.
• Integrated antivirus. All files downloaded by Web applications can be scanned for viruses and malware due to the built-in antivirus engine.

Access and identity management:

• Integration of LDAP and RADIUS. Barracuda Web Application Firewall fully integrates with the usual authentication services, such as Active Directory, eDirectory or any other LDAP / RADIUS-compliant service.
• Simple single entrance. Administrators can use the built-in capabilities of the Barracuda Web Application Firewall or third-party technologies as a single sign-on portal without having to make changes to the source code, IP address or server infrastructure.
• Two-factor authentication. The complex works with client authenticators and hardware tokens, for example RSASecureID, to provide secure user authentication.
• Access control. Administrators can create policies that determine which users can access what resources.

Delivery and acceleration of applications:

• High Availability Cluster. The complex can be deployed in high availability clusters. HA-cluster provides real-time replication of the application state and protects the system state during crashes.
• SSL offloading. The functions of reducing the load on SSL allow processing encrypted traffic and removing this load from the backend server.
• Load balancing. The complex allows you to distribute traffic between several backend servers.
• Content caching. It is possible to reduce the load on backend-web servers by caching web content, which results in minimizing the number of requests to the server.
• Compression. Automatic compression of client traffic in order to reduce the bandwidth load of the client browser.

Logging, monitoring and reporting:

• Logging. The program maintains logs of the web-firewall, access, audit and system. For more in-depth analysis, you can export logs to third-party applications.
• Creating reports. The kit includes several pre-configured report templates to provide an overall picture of application attacks, traffic statistics, and compliance with security standards.
• Support for the system log. The program sends the generated logs to the server's system log for centralized storage and analysis of data.