DATASHEET
Barracuda
WAF-as-a-Service
Protect every web app, hosted anywhere, in minutes.
Deploying and configuring traditional web application firewalls (WAFs) can be
prohibitively complex and time-consuming. Indeed, some simply install a WAF
in default mode for compliance, and never configure it correctly—leaving them
vulnerable to application-based threats.
You can deploy, configure, and get Barracuda WAF-as-a-Service up and
running in just minutes. Pre-built templates protect your applications
immediately, and an intuitive interface makes it simple to fine-tune specific
policies. Full-spectrum DDoS protection ensures continuous application
availability. And the built-in Barracuda Vulnerability Remediation Service
automatically scans your applications and remediates vulnerabilities.
Simple yet flexible Protection from Protection for
next-generation attacks next-generation apps
Barracuda WAF-as-a-Service features
an easy-to-use, five-step onboarding The service is built on enterprise-proven Regardless of where you host
wizard to ensure your applications are technology that defends against OWASP your apps—on-prem, in the cloud,
protected in minutes. Effective pre-built Top 10 security risks, OWASP Automated in a container, or in a serverless
templates provide complete protection Threats to Web Applications, and more, environment—you get a REST API and
for most commonly used applications. including zero-day threats. Advanced the Barracuda Vulnerability Remediation
Advanced users can easily assert bot defense stops automated attacks Service, which scans for application
granular control over specific elements to such as web scraping, scalping, carding, vulnerabilities and remediates them
set customized security policies. Simply bot spam, and credential-stuffing/ with a single click. This ensures
add the configuration element you want account-takeover attacks. Unmetered uninterrupted, optimized security
to fine-tune to the list of configuration DDoS protection prevents both even as you update your applications
components and adjust them to meet application and volumetric DDoS attacks. and deploy new ones in response to
your specific needs. Rich analytics and intuitive reports help evolving business needs—without any
you document compliance. additional administrative overhead.
Barracuda Networks • DATASHEET • Barracuda WAF-as-a-Service NETWORK AND APP SECURITY
Hackers/bots
Authorized users
App servers
Barracuda
WAF-as-a-Service
Remote/distributed
employees
Database servers
Barracuda Vulnerability
Remediation Service
Protects against all these threats: Other advanced security features:
• OWASP Top 10 Application Security Risks • IP reputation protection
-- Including SQL injections, XSS, CSRF, XXE, -- Including IP geolocation, and reputation feeds
and more based on sensors in the field and other inputs
• Advanced bots • File upload protection
-- Including the OWASP Automated Threats to -- Integration with Barracuda Advanced Threat
Web Applications Protection included
• Credential-stuffing/account-takeover attacks • Parameter tampering
• API attacks for XML and JSON APIs • Cookie/form manipulation
• Application and volumetric DDoS attacks • Forceful browsing
• Zero-day attacks • Application tampering
-- With a powerful positive-security model • Form field meta-data validation
combined with smart-signature technology • Website cloaking
for negative security • Response control
• Granular policies to HTML elements
Supported protocols • Protocol limit checks
• HTTP/S/0.9/1.0/1.1/2.0 • Barracuda IP reputation database
• WebSocket • Heuristic fingerprinting
• IPv4 • CAPTCHA challenges
• Slow client protection
• ToR exit nodes
• Barracuda blacklist
• Unmetered L3-L7 DDoS protection
DATASHEET • US 1.0 • Copyright 2019 Barracuda Networks, Inc. • 3175 S. Winchester Blvd., Campbell, CA 95008 • 408-342-5400/888-268-4772 (US & Canada) • barracuda.com
Barracuda Networks and the Barracuda Networks logo are registered trademarks of Barracuda Networks, Inc. in the United States. All other names are the property of their respective owners.
