The Global Secure SD-WAN Service Built Natively on Azure

Barracuda CloudGen WAN combines ease of use, full security, and cloud scalable SD-WAN connectivity to leverage the Microsoft Global Network as your WAN backbone instead of MPLS or leased lines. CloudGen WAN is a SaaS service deployed directly from the Azure Marketplace for as many regions as needed and administered centrally for all office locations and remote endpoints. The Microsoft Global Network is automatically provisioned as the backbone for anywhere anytime application access. Create a pragmatic SASE solution in the public cloud you prefer, on your own terms.
Eliminate costly MPLS leased linesGet fast, effortless access to the Microsoft Global Network backbone for high-performance site-to-site and site-to-cloud connections. |
|
Deploy to all your sites rapidly and easilyZero-touch deployment for all CloudGen WAN site devices requires no local expertise. Just plug them in and they self-configure. |
|
Fully leverage all your cloud and SaaS solutionsCloudGen WAN eliminates latency and bandwidth shortfalls that can degrade performance of apps you rely on, such as Office 365. |

Leverage the power of Barracuda Advanced Threat ProtectionBarracuda CloudGen WAN makes full use of the Barracuda Global Threat Intelligence Network that ingests vast amounts of diverse threat information from millions of collection points around the world. These include deployed Barracuda endpoints, honeypots, or decoys intended to attract the attention of threat actors and criminals, autonomous crawlers, bots that travel the internet actively seeking out new threats, third-party malware submissions, and analysis by Barracuda Labs. Each of these checks for unknown traffic patterns, files or code and, if not known, submits to the Barracuda Advanced Threat Protection cloud service for detailed analysis. Sophisticated analysis techniques, including multiple levels of code inspection, machine learning and sandboxing, make sure that all submitted traffic gets a final verdict quickly. The obtained information is subsequently available for every Barracuda Networks device. Existing security classification is available for hundreds of millions of files and 99.9% of all traffic. Cloud-based sandboxing is applied automatically for the remaining unknown traffic, making CloudGen WAN the easiest ways to protect your network, users and data from malware and advanced threats.
The first firewall on AzureBarracuda CloudGen WAN is based on the same secure backend technology as Barracuda CloudGen Firewall, the first next generation firewall on Azure in 2014. As the first security vendor in the Azure Marketplace, Barracuda builds solutions in Azure and for Azure, achieving deep integration no other vendor can match. With eight current Microsoft Preferred solutions, and active joint development by Microsoft and Barracuda, we make it easy to secure your journey to the Azure cloud.
CloudGen WAN site devices are available in five different form factors as hardware appliances and as virtual appliances for hyper-converged infrastructure deployments. Hardware appliances are true turn-key solutions with zero-touch deployment and SD-WAN throughput ranges from 300 Mbps to 10 Gbps. Virtual appliances are available for Hyper-V, VMware, Xen and KVM, ranging from 100 Mbps to 5 Gbps.

CloudGen WAN is more than just another SD-WAN solution. It lets you build an automated cloud-based network by leveraging the Microsoft Global Network. The product of a joint development program by Microsoft and Barracuda, CloudGen WAN is the only global secure SD-WAN service built natively on Azure. It is a single, unified solution that makes it very simple to ensure highly secure, seamless connectivity to all your locations and all your cloud-based resources and applications.
Use the Microsoft Global Network—a vast backbone network that offers the availability, capacity, and flexibility to meet any demand—as the core of your modern, highly distributed WAN. Barracuda CloudGen WAN lets you easily connect all your locations to the Microsoft Global Network via Azure Virtual WAN. It combines the highest levels of security and SD-WAN capabilities in an easy-to-use, easy-to-buy solution that is purpose-built to bring you all the benefits of the cloud.


With zero-touch deployment, industry-proven default configurations, and an easy, intuitive management interface, Barracuda CloudGen WAN automates and simplifies all the tasks that traditionally make WAN management complex and challenging. Barracuda CloudGen WAN delivers a complete set of industry-leading next-generation security capabilities while dramatically reducing IT resource overhead, saving you time and money.
By deploying Barracuda CloudGen WAN and harnessing the power of the Microsoft Global Network, you completely eliminate the need for costly MPLS uplinks and connections—which according to Gartner account for nearly two thirds of the costs associated with network architectures. Combine these savings with the long-term reduction of IT resource needs and with the business benefits of cloud flexibility and reliability, and the value of using CloudGen WAN and Microsoft Global Network is self-evident.


According to Gartner the future of network security is in the cloud, with SASE—Secure Access Service Edge—serving as the new paradigm for software-defined secure access. CloudGen WAN is Barracuda’s practical implementation of the SASE concept. It combines the ease of use of SASE services with the cloud-friendliness and the proven security of Barracuda CloudGen Firewall. With Microsoft and Barracuda CloudGen WAN, you can move your network, WAN, and security infrastructures to your preferred public cloud with total confidence.
Global secure SD-WAN service
CloudGen WAN brings full SD-WAN functionality to Azure Virtual WAN, Microsoft’s native hybrid cloud service. Secure SD-WAN dynamically selects the most suitable uplink for each application in real time, based on traffic characteristics, available bandwidth, and latency between VPN endpoints. This lets you replace MPLS lines by globally connecting your sites via the Microsoft Global Network, the world’s fasted private network. Purpose-built for the cloud, CloudGen WAN provides seamless, automated access to your business-critical resourses, leveraging a rich feature-set including:
Azure Virtual WAN
Directly deployed from Azure marketplace, the CloudGen WAN gateway becomes a part of Microsoft’s Azure Virtual Hub and, together with CloudGen WAN site devices, ensures optimized connectivity from every branch office to the nearest Azure Cloud entry point. Barracuda supports dynamic path selection across multiple ISPs for Azure Virtual WAN, giving you failsafe, always-on cloud connectivity. The close integration with native Azure services seamlessly integrates Barracuda CloudGen WAN into your Azure cloud infrastructure.
Simple to deploy
CloudGen WAN is easy to set up and does not require specialized IT skills. Directly deployed from Azure marketplace, the service works out of the box with smart default configuration, suitable for all cloud and SaaS applications. CloudGen WAN runs natively as a SaaS service inside one or multiple Azure Virtual WAN regions and provides easy, automated access to the Microsoft Global Network. The service can either be rolled out to all locations as a pure SD-WAN solution alongside existing firewalls or as a secure SD-WAN solution replacing existing firewalls.
Zero-touch site deployment
Zero-touch deployment lets you deploy CloudGen WAN site devices directly from the factory to the desired remote location without requiring on-site IT personnel. Simply connect the unit and power it up. With no need for manual configuration on-site, zero-touch deployment allows you to deploy CloudGen WAN site devices across widely distributed organizations easily, rapidly, and at very low cost.
Simple to operate
Directly managed via the CloudGen WAN management portal for all regions and all sites across your global WAN, regardless of the number of cloud entry points or locations. The central cloud portal offers the highest degree of automation and unparalleled ease of use. CloudGen WAN continuously monitors and optimizes network performance to ensure uninterrupted always-on connectivity and high quality of service levels for your business-critical traffic and applications.
Advanced multi-layered security
CloudGen WAN is built on the same technology as CloudGen Firewall, Barracuda’s battle-tested enterprise firewall (“Recommended” in NSS Labs NGFW Group Test 2019). Purpose-built for the cloud, CloudGen WAN provides advanced multi-layered security to protect your business-critical resourses, leveraging a rich feature-set including:

Front View

Rear View
| Barracuda CloudGen WAN T900 | |
|---|---|
| Performance | |
| Site performance up to | 9.3 Gbps |
| Recommended number of users | 6,000-9,000 |
| Concurrent sessions | 4,000,000 |
| New session/s | 190,000 |
| Interface | |
| Port Density | 9x 1 GbE RJ45 Ethernet 8x 1 GbE SFP 4x 10 GbE SFP+ 2x 40 GbE QSFP+ |
| USB 2.0 | 2 |
| Serial console | 1 [RJ45] |
| IPMI | 1 [RJ45] |
| Data Storage | |
| RAM | 32 |
| Mass Storage | |
| Type | SSD |
| Size | 430 GB or higher |
| Dimensions | |
| Appliance weight | 12 kg |
| Carton weight with appliance | 20 kg |
| Appliance size: (WxDxH) | 440 x 570 x 44 mm |
| Carton size: (WxDxH) | 585 x 775 x 229 mm |
| Form factor | 1U Rack Mount |
| Hardware | |
| Display | Yes |
| Hardware crypto accelerator | Yes |
| Cooling | Fan |
| Power supply | Dual hot swap, internal |
| Environmental | |
| Noise emission | <75 |
| Operating temperature | 0 to +40°C |
| Storage temperature | -20 to +75°C |
| Operating humidity | 10% to 85% non-condensing |
| Certifications & Compliance | |
| CE emissions | Yes |
| CE electrical safety | Yes |
| FCC emissions | Yes |
| Power & Efficiency | |
| Power supply type | Internal |
| Power type | AC |
| Input rating | 100-240 Volts |
| Input frequency | 50-60 Hz |
| Auto sense | Yes |
| Wattage / max. power draw | 500W |
| Max. power draw (@ 230V) | 4 A |
| Max. heat dissipation | ~400W |
| Max. heat dissipation | ~1366 BTU |
| Energy efficiency | > 88% average |
| Scale Unit | 2 | 4 | 10 | 14 | 20 | 30 | 40 | 60 | 80 |
|---|---|---|---|---|---|---|---|---|---|
| Performance | |||||||||
| Aggregated bandwidth | 1 Gbps | 2 Gbps | 5 Gbps | 7 Gbps | 10 Gbps | 15 Gbps | 20 Gbps | 30 Gbps | 40 Gbps |
| Max. single tunnel performance | 500 Mbps | 1 Gbps | 2.5 Gbps | 3.5 Gbps | 5 Gbps | 7 Gbps | 10 Gbps | 15 Gbps | 15 Gbps |
| Model: | T100 | T200 | T400 | T600 | T900 |
|---|---|---|---|---|---|
| Performance1 | |||||
| Site performance up to | 300 Mbps | 700 Mbps | 1.5 Gbps | 1.5 Gbps | 9.3 Gbps |
| Recommended number of users | 50-100 | 150-300 | 300-1,000 | 1,000-4,000 | 6,000-9,000 |
| Concurrent sessions | 80,000 | 250,000 | 500,000 | 2,100,000 | 4,000,000 |
| New session/s | 8,000 | 12,000 | 20,000 | 20,000 | 20,000 |
| Hardware | |||||
| Form factor | Desktop | Desktop | 1U rack mount | 1U rack mount | 1U rack mount |
| Copper ethernet NICs [GbE] | 4x1 | 6x1 | 8x1 | 10x1 | 8x1 |
| Fiber NICs (SFP) [GbE] | - | - | - | 8x1 | 8x1 |
| Fiber NICs (SFP+) [GbE] | - | - | 2x10 | 2x10 | 4x10 |
| Fiber NICs (QSFP+) [GbE] | - | - | - | - | 2x40 |
| Integrated switch | - | 8-port | - | - | - |
Global secure SD-WAN service
Seamless Azure Virtual WAN integration
Simple to operate
Simple to deploy
Zero-touch site deployment
Advanced multi-layered security
Download the Barracuda Networks CloudGen WAN Data Sheet (PDF)
Download the Barracuda Networks CloudGen WAN Product Overview Data Sheet (PDF)
Pricing Notes: