Features & Benefits of Barracuda Spam Firewall

Model Comparison of Barracuda Spam Firewall

Barracuda Spam Firewall Buyer's Guide

The purpose of this document is to help you determine which Barracuda Spam Firewall will be best for your organization. When deciding which device you will need the first thing you will want to know is how many email accounts you will need to support. The following table will help you match the device with the amount of email accounts in your organization.

When comparing the 100 and the 200, the only differences are the amount of email users it will support, domains it will support, and the log storage. There are not any extra features that you get by choosing the 200 over the 100.

The Barracuda Spam Firewall 300 and higher will give you Per user settings and quarantine,MS Exchange/ LDAP recipient verification, and syslog support.

The Barracuda Spam Firewall 400 and higher will give you Clustering, RAID, per domain settings, single sign-on, and the SNMP/API programming interface.

The Barracuda Spam Firewall 600 and above will give you customizable branding and per user score settings. The models 600 and above also have Hot Swappable redundant disk arrays. As you move up the product line, the storage capacity also increases, as is shown in the chart above.

The Barracuda Spam Firewall 800 and above have hot swappable, redundant power supplies.

As you move up the product line, the storage capacity also increases, as shown in the chart above.

Yearly Subscriptions

Energize Updates- This subscription will give you spam definition updates, anti-virus updates, firmware updates, and access to Barracuda's technical support during office hours. This is a required purchase with any Barracuda appliance for the first year. After the first year, you have the option of whether to renew or not. If you choose not to, you will probably see a significant decrease in performance with your appliance.

Instant Replacement- This is an optional subscription that will extend the hardware warranty appliance and provide for 24x7 technical support with Barracuda. The Instant Replacement service guarantees overnight replacement of your appliance in the event of failure.

Premium Support- This option is available on the Barracuda 600 and above. It will give you the fastest response time, a dedicated support team, and advanced notification of new repairs and features in upcoming software releases. In order to get premium support, both Energize Updates and Instant Replacement must be purchased as well.

Barracuda Spam Firewall FAQs:

• Why did Barracuda Networks change the name of the Barracuda Spam Firewall?
  
• Are there any changes to the product with this new name?
  
• Will there be any changes to pricing or part numbers?
  
• How does the Barracuda Spam & Virus Firewall protect against email threats
  
• How is email filtered?
  
• Why tag email? What happens to tagged emails?
  
• Why quarantine email? What happens to quarantined email?
  
• What are some of the underlying technologies used in the Barracuda Spam & Virus Firewall?
  
• If I am using Microsoft Exchange, how will the Barracuda Spam & Virus Firewall protect against “dictionary” attacks?
  
• What new technologies has the Barracuda Spam & Virus Firewall added to combat the latest spam campaigns?
  
• How does the Barracuda Spam & Virus Firewall protect against virus threats?
  
• How does the Barracuda Spam & Virus Firewall block real-time threats?
  
• How much time will I spend installing and maintaining the Barracuda Spam & Virus Firewall?
  
• Will I receive a high number of false positives using a Barracuda Spam & Virus Firewall?
  
• What does Energize Updates include for the Barracuda Spam & Virus Firewall?
  
• Does the Barracuda Spam & Virus Firewall offer per user policies?
  
• Can the Barracuda Spam & Virus Firewall filter outbound messages?
  
• How do I block or minimize the amount of invalid bounce messages?
  
• Does the Barracuda Spam & Virus Firewall enable administrators to block email from other countries?
  
• How do I know which Barracuda Spam & Virus Firewall model is best suited to my needs?
  
• What if I have more questions about the Barracuda Spam & Virus Firewall?
  

Why did Barracuda Networks change the name of the Barracuda Spam Firewall?

Barracuda Networks is adding new emphasis to its purpose-built anti-virus engine for email and Web threats. Unlike desktop anti-virus engines retrofitted for gateway use, the Barracuda Spam & Virus Firewall features anti-virus technology specifically designed for rapid response to viruses that propagate and mutate quickly over botnets and through other bulk email delivery techniques.

When Barracuda Networks launched the Barracuda Spam Firewall in October 2003, most organizations already had anti-virus software, usually from the vendors of their desktop anti-virus software. These organizations were looking for an immediate solution to manage the deluge of spam coming into their mail servers, and the name Barracuda Spam Firewall was chosen to describe a solution to that core problem.

Since then, the threat landscape has evolved to the point where a desktop anti-virus software package retrofitted for mail server usage is no longer suited to provide maximum protection. Today’s botnets and zombies rapidly propagate and mutate not only commercial spam traffic but also virus and other malware traffic.

Over the past five years, Barracuda Networks has been developing and enhancing a purpose-built anti-virus engine specifically designed for email-borne threats, featuring:

• rapid response to new threats and variants
• prioritization of the threats that propagate most aggressively
• low false positives
• complete coverage by integrating signatures from ClamAV, the world’s largest free and open source software (FOSS) repository of virus definitions

Are there any changes to the product with this new name?

No. While current firmware releases will be branded with the name Barracuda Spam & Virus Firewall, this change should be viewed as evolutionary, not revolutionary. The underlying technology enhancements, including Barracuda Real-Time Protection and Predictive Sender Profiling, have been introduced and continually evolving in the product for years.

Will there be any changes to pricing or part numbers?

No. Pricing will not change with this announcement. Existing part numbers (e.g., BSF100) will still be used. A new price list will be distributed to existing resellers with new description fields, but part numbers and pricing will not change with this announcement.

How does the Barracuda Spam & Virus Firewall protect against email threats?

The Barracuda Spam & Virus Firewall, an integrated hardware and software solution, uses a multilayered approach to provide the most comprehensive email protection available against spam, viruses, spoofing, phishing and spyware attacks. An added benefit of the Barracuda Spam & Virus Firewall is the optimized processing of each email to maximize performance and capability to filter millions of messages per day.

Behind the industry-leading initiatives of Predictive Sender Profiling and Barracuda Real-Time Protection are 12 explicit defense layers including: Denial of Service and Security Protection, Rate Controls, IP Reputation Analysis, Sender Authentication, Recipient Verification, Virus Protection, Policy (user-specified rules), Fingerprint Analysis, Intent Analysis, Image Analysis, Bayesian Analysis, and a Spam Rules Scoring engine.

How is email filtered?

Deployed at the network perimeter, all incoming email must pass through all 12 defense layers of the Barracuda Spam & Virus Firewall before any of it can reach the intended recipients. The defense layers are grouped into two main classes: connection management, which involves dropping incoming mail connections before receiving messages, and mail scanning, which analyzes messages upon receipt. During the filtering process, emails are checked for new and familiar spammer attacks, viruses, and customized administrator policy violations. Based on administrator and user preferences, spam can be tagged, quarantined or blocked.

Why tag email? What happens to tagged emails?

Tagging email benefits organizations by easily identifying messages that meet set criteria. Tagged emails are delivered to the recipient with a customizable label, such as [BULK], that is added to the subject of the message.

Why quarantine email? What happens to quarantined email?

Quarantining emails is a safeguard that allows for examination of questionable messages prior to accepting or rejecting; typically, quarantined email does turn out to be spam. An administrator can choose two types of email quarantine: global or per user quarantine.

When configured for global quarantine, the Barracuda Spam & Virus Firewall routes all quarantined email to a mailbox specified by the administrator. When configured for per user quarantine, the Barracuda Spam & Virus Firewall stores the email locally and notifies users periodically of their quarantined email. Users can choose to delete quarantined email, forward it to their own mailboxes or whitelist the sender address to prevent future email from being quarantined. Per user quarantine is available with the Barracuda Spam & Virus Firewall 300, 400, 600, 800 and 900 models.

What are some of the underlying technologies used in the Barracuda Spam & Virus Firewall?

The Barracuda Spam & Virus Firewall uses a combination of proprietary and open source software. The Barracuda Spam & Virus Firewall operating system is based on a hardened, stable Linux kernel that has undergone strict scrutiny by top security researchers. The robust MTA is capable of handling a high number of SMTP connections and mail delivery volumes. Starting with firmware release 3.5, the Barracuda Spam & Virus Firewall MTA has a built-in journaling function that can be used in conjunction with the Barracuda Message Archiver.

If I am using Microsoft Exchange, how will the Barracuda Spam & Virus Firewall protect against “dictionary” attacks?

The Microsoft Exchange Accelerator, available on Barracuda Spam & Virus Firewall 300 and higher, uses the Lightweight Dictionary Access Protocol (LDAP) built into Exchange to verify recipients before delivering messages to the Microsoft Exchange Server.

What new technologies has the Barracuda Spam & Virus Firewall added to combat the latest spam campaigns?

In 2007 alone, Barracuda Networks has announced several initiatives against spam:

• Multi-Pass Optical Character Recognition Engine: Image spam generally embeds text within images with the intent of hiding content and bypassing the text rules processing layers of spam filters. With Barracuda Networks’ industry-leading multi-pass OCR engine, Barracuda Spam & Virus Firewalls render the spammers’ tricks to hide text behind color or blurred images ineffective.
• Predictive Sender Profiling: Barracuda Networks’ industry-leading Predictive Sender Profiling probes deeper into sent email and digs into the campaign itself to identify anomalous sender activity, allowing Barracuda Networks to effectively block spam typically unstoppable by traditional reputation analysis.
• Barracuda Real-Time Protection: Barracuda Real-Time Protection uses an advanced set of technologies to immediately block the latest virus, spyware and other malware attacks as they emerge. Leveraging the Barracuda Spam & Virus Firewalls large and diverse customer base, Barracuda Networks leads in industry in detecting early trends and responding to email-borne threats

How does the Barracuda Spam & Virus Firewall protect against virus threats?

The Barracuda Spam & Virus Firewall provides comprehensive protection against virus threats through three powerful layers. The first layer consists of a well-respected open source virus scanning engine. The second layer is a proprietary virus engine maintained by Barracuda Central, an advanced 24/7 security operations center that works to continuously monitor and block the latest Internet threats. The third layer is Barracuda Real-Time Protection, a set of advanced technologies that enable Barracuda Spam & Virus Firewalls to immediately block the latest virus, spyware and other malware attacks as they emerge without having to wait for a signature to be downloaded onto the Barracuda Spam & Virus Firewall.

How does the Barracuda Spam & Virus Firewall block real-time threats?

Barracuda Central engineers diligently work 24x7 monitoring spam and virus threats around the world. Since response times are crucial with real-time threats, when one is detected the Barracuda Spam & Virus Firewall uses Barracuda Real-Time Protection to mitigate these threats as they emerge without waiting for new updates.

How much time will I spend installing and maintaining the Barracuda Spam & Virus Firewall?

The Barracuda Spam Firewall is designed as an easy-to-install appliance requiring minimal administrative overhead. Without any tuning, the Barracuda Spam & Virus Firewall offers a 95 percent spam accuracy rate with a 0.01 percent false positive rate. Taking into account the six defense layers automatically tuned by Energize Updates, the Barracuda Spam & Virus Firewall is easily kept up-to-date for ongoing spam accuracy.

Will I receive a high number of false positives using a Barracuda Spam & Virus Firewall?

With no tuning, the Barracuda Spam & Virus Firewall is set to minimize false positives, typically at 0.01 percent or less – one of the lowest false positive ratings in the industry. As with any solution that allows for user customization, each customer’s false positive return will vary depending on how the administrator tunes the unit (i.e. a stricter spam score setting may result in more false positives).

What does Energize Updates include for the Barracuda Spam & Virus Firewall?

The Barracuda Energize Updates subscription provides the latest spam and virus definition updates that block new campaigns before they become an outbreak. Barracuda Central engineers constantly update spam and virus definitions and are able to remotely tune six of the 12 defense layers, thereby minimizing administration time. Energize Updates also gives you access to technical support, new firmware releases and the opportunity to participate in the Barracuda Early Release Firmware program.

Does the Barracuda Spam & Virus Firewall offer per user policies?

Per user policies are available in Barracuda Spam & Virus Firewall 300 and higher. Per user policies empower users with the ability to set their own individual scoring policies, Bayesian database, allow lists and block lists.

Can the Barracuda Spam & Virus Firewall filter outbound messages?

Yes. The Barracuda Spam & Virus Firewall filters outbound messages for viruses and basic spam scanning policies. For advanced outbound scanning, Barracuda Networks offers the Barracuda Spam & Virus Firewall-Outbound which includes different workflows for quarantining outbound email traffic for review by policy auditors.

How do I block or minimize the amount of invalid bounce messages?

Invalid bounce messages are non-delivery reports to forged email addresses. To block invalid bounce messages, enable the Invalid Bounce Suppression feature and relay all your outgoing email through the Barracuda Spam & Virus Firewall or the Barracuda Spam & Virus Firewall-Outbound appliance.

Does the Barracuda Spam & Virus Firewall enable administrators to block email from other countries?

Yes. The Barracuda Spam & Virus Firewall offers different ways to block spam from other countries:

1. Based on a Reverse DNS lookup, administrators block messages whose top level domain resolves to a country’s hostname.
   
2. Based on the declared character set of an email, administrators block messages that contain a specific language set.
   
3. While it is not recommended by Barracuda Networks, administrators create custom policies to filter other patterns in the subject, header or body to block unwanted email from other countries.
   

How do I know which Barracuda Spam & Virus Firewall model is best suited to my needs?

A local Barracuda Networks sales representative can evaluate your environment based on the number of active users, email traffic and desired features. As your organization expands, the Barracuda Spam & Virus Firewall can be clustered to accommodate your additional growth.

What if I have more questions about the Barracuda Spam & Virus Firewall?

For additional assistance, please visit our technical support forum or contact your BarracudaStore.com sales representative. To obtain a demo of the Barracuda Spam & Virus Firewall, please call 866.892.5081 (toll free)