Call a Specialist Today! 800-878-6893

Barracuda CloudGen WAN VT3000
The Global Secure SD-WAN Service Built Natively on Azure


Barracuda CloudGen WAN VT3000

Barracuda Products
Barracuda CloudGen WAN VT3000
Barracuda CloudGen WAN VT3000
#CGW-VT3000
Get a Quote!
Barracuda Networks Energize Updates
Energize Updates include Basic Support (Email 24x7, Phone 9am-5pm PST), Firmware Maintenance and Updates, Security Updates, and optional participation in the Barracuda Early Release Firmware program.
Barracuda CloudGen WAN VT3000 1 Year EU Subscription
#CGW-VT3000-EU-1Y
List Price: $15,600.00
Our Price: $14,820.00
Barracuda CloudGen WAN SaaS VT3000 1 Year EU Subscription
#CGW-VT3000-EU-SS
Get a Quote!

Click here to jump to more pricing!

Barracuda CloudGen WAN VT3000:

Barracuda CloudGen WAN provides easy to use secure SD-WAN and Firewall-asa-Service. Everything is centrally managed from one portal regardless how many users, locations, or cloud services need to be secured and connected.

To harness the power of Microsoft Azure and the Azure Global network it is easily deployed directly from the Azure Marketplace. With Barracuda CloudGen WAN you can create a pragmatic SASE solution on your terms.

Traditional data centers are going away

More than ten percent of organizations have already shut theirs down, and Gartner has predicted that will rise to 80 percent by 2025.


Integrated Next-Generation Security

Eliminate costly MPLS leased lines

Get fast, effortless access to the Microsoft Global Network backbone for high-performance site-to-site and site-to-cloud connections.

Regaining Control of User Activity

Deploy to all your sites rapidly and easily

Zero-touch deployment for all CloudGen WAN site devices requires no local expertise. Just plug them in and they self-configure.

True Enterprise Readiness

Fully leverage all your cloud and SaaS solutions

CloudGen WAN eliminates latency and bandwidth shortfalls that can degrade performance of apps you rely on, such as Office 365.


Easy to establish and maintain

CloudGen WAN works out-of-the-box with smart default configurations for cloud and SaaS applications. The CloudGen WAN management portal provides the most intuitive way to centrally orchestrate SD-WAN connectivity, security, and networking with minimal overhead.

In a nutshell: With Barracuda CloudGen WAN you can deploy, secure and manage a global high performance WAN without the need for specialized SD-WAN or expert enterprise firewall knowledge.

The solution extends SD-WAN connectivity and next-generation firewall security beyond users and office locations. Dedicated Industrial IoT and rugged form factor devices for shop and factory floors extend the pragmatic SASE concept to cover users, sites and things.

True cloud native

CloudGen WAN was built from the ground up as a cloud service to provide secure SD-WAN globally. Unlike other solutions in the market, it was not built as a pure-play SD-WAN with attached security and then moved to cloud.

Running natively as a SaaS service, CloudGen WAN establishes a fast overlay SD-WAN backbone automatically. For even better WAN experience, the solution provides an SDWAN enabled on ramp to the Microsoft Global Network. Other than traditional MPLS or Network-as-a-Service solutions, Barracuda CloudGen WAN provides dynamic sizing of networking and security throughput to match your actual workload requirements

Connectivity and security

CloudGen WAN is based on the security technology of Barracuda CloudGen Firewall. Barracuda’s enterprise network firewall is the most secure and most scalable SD-WAN solution available.

CloudGen WAN provides SD-WAN technology formerly only available on dedicated network optimization solutions.

Deploy CloudGen WAN either next to an existing firewall solution or as standalone solution that provides battle-tested network connectivity and security, IPS/ IDS, deep SSL inspection, and Advanced Threat Protection – all built right into the core of the solution.


Benefits:



Harness the power of the cloud to build a modern, high-performance WAN.

CloudGen WAN is more than just another SD-WAN solution. It lets you build an automated cloud-based network by leveraging the Microsoft Global Network. The product of a joint development program by Microsoft and Barracuda, CloudGen WAN is the only global secure SD-WAN service built natively on Azure. It is a single, unified solution that makes it very simple to ensure highly secure, seamless connectivity to all your locations and all your cloud-based resources and applications.


Build your business using one of the most powerful cloud infrastructures.

Use the Microsoft Global Network—a vast backbone network that offers the availability, capacity, and flexibility to meet any demand—as the core of your modern, highly distributed WAN. Barracuda CloudGen WAN lets you easily connect all your locations to the Microsoft Global Network via Azure Virtual WAN. It combines the highest levels of security and SD-WAN capabilities in an easy-to-use, easy-to-buy solution that is purpose-built to bring you all the benefits of the cloud.


Say goodbye to complex, costly deployment and maintenance tasks.

With zero-touch deployment, industry-proven default configurations, and an easy, intuitive management interface, Barracuda CloudGen WAN automates and simplifies all the tasks that traditionally make WAN management complex and challenging. Barracuda CloudGen WAN delivers a complete set of industry-leading next-generation security capabilities while dramatically reducing IT resource overhead, saving you time and money.


Improve performance, boost reliability, and significantly reduce costs.

By deploying Barracuda CloudGen WAN and harnessing the power of the Microsoft Global Network, you completely eliminate the need for costly MPLS uplinks and connections—which according to Gartner account for nearly two thirds of the costs associated with network architectures. Combine these savings with the long-term reduction of IT resource needs and with the business benefits of cloud flexibility and reliability, and the value of using CloudGen WAN and Microsoft Global Network is self-evident.


Adopt the SASE framework for improved security in cloud networks.

According to Gartner the future of network security is in the cloud, with SASE—Secure Access Service Edge—serving as the new paradigm for software-defined secure access. CloudGen WAN is Barracuda’s practical implementation of the SASE concept. It combines the ease of use of SASE services with the cloud-friendliness and the proven security of Barracuda CloudGen Firewall. With Microsoft and Barracuda CloudGen WAN, you can move your network, WAN, and security infrastructures to your preferred public cloud with total confidence.


Features:

Connectivity and SD-WAN

Global secure SD-WAN service

CloudGen WAN brings full SD-WAN functionality to Azure Virtual WAN, Microsoft’s native hybrid cloud service. Secure SD-WAN dynamically selects the most suitable uplink for each application in real time, based on traffic characteristics, available bandwidth, and latency between VPN endpoints. This lets you replace MPLS lines by globally connecting your sites via the Microsoft Global Network, the world’s fasted private network. Purpose-built for the cloud, CloudGen WAN provides seamless, automated access to your business-critical resourses, leveraging a rich feature-set including:

  • Adaptive bandwidth protection
  • Adaptive session balancing
  • Forward error correction (FEC)
  • SD-WAN breakout
  • Dynamic bandwidth and latency detection
  • Performance-based transport selection
  • TINA—Barracuda’s proprietary VPN protocol
  • Site-to-site connectivity
  • Failover link support
  • Dynamic quality of service
  • WAN compression

Azure Virtual WAN

Directly deployed from Azure marketplace, the CloudGen WAN gateway becomes a part of Microsoft’s Azure Virtual Hub and, together with CloudGen WAN site devices, ensures optimized connectivity from every branch office to the nearest Azure Cloud entry point. Barracuda supports dynamic path selection across multiple ISPs for Azure Virtual WAN, giving you failsafe, always-on cloud connectivity. The close integration with native Azure services seamlessly integrates Barracuda CloudGen WAN into your Azure cloud infrastructure.

Dynamic bandwidth and latency detection

To achieve the best possible user experience across the WAN, CloudGen WAN onsite devices proactively measure the available bandwidths and quality of all internet uplinks and between VPN endpoints. The results are directly available to the security and SD-WAN policy engine to select the best suitable uplink per application or to disqualify an uplink if the bandwidth or latency fall outside of acceptable limits.

Application-based routing

A unique combination of next-generation security and adaptive WAN routing technology allows Barracuda CloudGen WAN to dynamically assign available bandwidth, uplink, and routing information based on protocol, user, location, and content as well as application, application categories, and even web content categories. This keeps expensive, highly available lines free for business- and mission-critical applications, while significantly reducing response times and freeing up additional bandwidth.

Management and Automation

Simple to deploy

CloudGen WAN is easy to set up and does not require specialized IT skills. Directly deployed from Azure marketplace, the service works out of the box with smart default configuration, suitable for all cloud and SaaS applications. CloudGen WAN runs natively as a SaaS service inside one or multiple Azure Virtual WAN regions and provides easy, automated access to the Microsoft Global Network. The service can either be rolled out to all locations as a pure SD-WAN solution alongside existing firewalls or as a secure SD-WAN solution replacing existing firewalls.

Zero-touch site deployment

Zero-touch deployment lets you deploy CloudGen WAN site devices directly from the factory to the desired remote location without requiring on-site IT personnel. Simply connect the unit and power it up. With no need for manual configuration on-site, zero-touch deployment allows you to deploy CloudGen WAN site devices across widely distributed organizations easily, rapidly, and at very low cost.

Simple to operate

Directly managed via the CloudGen WAN management portal for all regions and all sites across your global WAN, regardless of the number of cloud entry points or locations. The central cloud portal offers the highest degree of automation and unparalleled ease of use. CloudGen WAN continuously monitors and optimizes network performance to ensure uninterrupted always-on connectivity and high quality of service levels for your business-critical traffic and applications.

Once only central management

The CloudGen WAN management portal hosts security, networking, and SD-WAN connectivity rules that are applied and enforced automatically across all site devices and endpoints hosted with your CloudGen WAN subscription. Define an SD-WAN or security policy once and CloudGen WAN automatically distributes and enforces it across all locations and users.

Security

Advanced multi-layered security

CloudGen WAN is built on the same technology as CloudGen Firewall, Barracuda’s battle-tested enterprise firewall (“Recommended” in NSS Labs NGFW Group Test 2019). Purpose-built for the cloud, CloudGen WAN provides advanced multi-layered security to protect your business-critical resourses, leveraging a rich feature-set including:

  • Advanced Threat Protection
  • Intrusion detection and prevention
  • Malware protection
  • SSL inspection
  • Stateful deep packet inspection
  • Single pass architecture
  • URL filtering--application-based ACL

URL filtering

The URL filtering feature of CloudGen WAN lets you create and enforce effective internet content and access policies by enabling highly granular, real-time visibility into online activity broken down by individual users and applications. It protects user productivity, blocks malware downloads and other web-based threats, and supports compliance by blocking access to unwanted websites and servers, providing an important additional layer of security alongside application control.

Advanced Threat Protection

The malware protection functionality built into Barracuda CloudGen WAN shields the internal network from malicious content by scanning web content (HTTP and HTTPs), email (SMTP, POP3), and file transfers (FTP/SFTP) via integrated malware protection based on Barracuda Advanced Threat Protection. It covers viruses, worms, trojans, malicious java applets, and programs using known exploits on PDF, picture and office documents, macro viruses, and many more, even when using stealth or morphing techniques for obfuscation. Resource-intensive sandboxing is offloaded to the Barracuda ATP Cloud with its multiple datacenters in the Americas, mainland Europe, and the UK. A hash fingerprint of each file and the good/bad classification of all sandboxed files are stored and cached for future use, effectively speeding up processing and guaranteeing near instantaneous results.

SSL interception

Barracuda CloudGen WAN can apply IPS, virus protection, application control, URL filtering, and even Advanced Threat Protection to SSL-encrypted web traffic using the standard 'trusted man-in-the-middle' approach. SSL interception can be fine-tuned to exempt local networks, users/groups, URL filter categories, or custom defined domains from SSL inspection.

SASE

Practical SASE

Barracuda CloudGen WAN provides a practical SASE solution that is easy to deploy in Azure. While other SASE vendors use their own cloud and their own network, CloudGen WAN allows leveraging the global presence and power of Azure data centers and Microsoft’s global network. For all organizations leveraging Azure or planning to adopt Azure it makes perfect sense to deploy a SASE offering on the same public cloud platform.

For organizations having certain geopolitical requirements or using applications requiring an organization’s IP address as source IP address, every CloudGen WAN site device serves as a private enforcement node for SWG, FWaaS enforcement and as entry point to the cloud service for remote endpoints. The SASE enforcement points in Azure, as well as the private enforcement points on the site devices, are controlled by security policies defined centrally in the CloudGen WAN management portal, without requiring administrators to know where the traffic enters the service.

Specifications:

Barracuda CloudGen WAN
VT100 VT500 VT1500 VT3000 VT5000
Performance
Site performance up to 300 Mbps 700 Mbps 1.5 Gbps 3.8 Gbps 9.3 Gbps
Recommended number of users 50-100 150-300 300-1000 1,000-4,000 6,000-9,000
Concurrent sessions 80,000 250,000 500,000 2,100,000 4,000,000
New session/s 8,000 12,000 20,000 115,000 190,000
Hardware
Licensed vCPUs 2 4 8 10 up to 32
Virtual NICs 5-16x

Model Comparison:

CloudGen WAN gateways (hosted in Microsoft Azure)

Scale Unit 2 4 10 14 20 30 40 60 80
Performance
Aggregated bandwidth 1 Gbps 2 Gbps 5 Gbps 7 Gbps 10 Gbps 15 Gbps 20 Gbps 30 Gbps 40 Gbps
Max. single tunnel performance 500 Mbps 1 Gbps 2.5 Gbps 3.5 Gbps 5 Gbps 7 Gbps 10 Gbps 15 Gbps 15 Gbps

CloudGen WAN site devices

Model: T100 T200 T400 T600 T900 VT100 VT500 VT1500 VT3000 VT5000
Performance1
Site performance up to 300 Mbps 700 Mbps 1.5 Gbps 1.5 Gbps 9.3 Gbps 300 Mbps 700 Mbps 1.5 Gbps 3.8 Gbps 9.3 Gbps
Recommended number of users 50-100 150-300 300-1,000 1,000-4,000 6,000-9,000 50-100 150-300 300-1000 1,000-4,000 6,000-9,000
Concurrent sessions 80,000 250,000 500,000 2,100,000 4,000,000 80,000 250,000 500,000 2,100,000 4,000,000
New session/s 8,000 12,000 20,000 20,000 20,000 8,000 12,000 20,000 115,000 190,000
Hardware
Form factor Desktop Desktop 1U rack mount 1U rack mount 1U rack mount N/A
Copper ethernet NICs [GbE] 4x1 6x1 8x1 10x1 8x1 N/A
Fiber NICs (SFP) [GbE] - - - 8x1 8x1 N/A
Fiber NICs (SFP+) [GbE] - - 2x10 2x10 4x10 N/A
Fiber NICs (QSFP+) [GbE] - - - - 2x40 N/A
Integrated switch - 8-port - - - N/A
Virtual NICs N/A 5-16x

Technical Specs

Global secure SD-WAN service

  • Adaptive bandwidth protection
  • Adaptive session balancing
  • Forward error correction
  • Support for SD-WAN breakout
  • Dynamic bandwidth and latency detection
  • Performance-based transport selection
  • FIPS-140-2-certified TINA VPN protocol extension
  • Seamless site-to-site connectivity
  • Automatic failover and load balancing
  • Dynamic Quality of Service
  • WAN compression

Seamless Azure Virtual WAN integration

  • Support for multiple ISP per site
  • Dynamic path selection

Simple to operate

  • One single management interface for all regions and sites across an organization’s WAN
  • Continuous monitoring and optimizing
  • Highest level of automation for superior Quality-ofService and uninterrupted always-on connectivity for business-critical traffic and applications

Simple to deploy

  • Deployment directly via Azure Marketplace
  • Smart default configurations
  • Native SaaS service in Azure
  • Automates access to Microsoft Global Network
  • Run either as pure-play SD-WAN solution next to existing security devices or as Secure SD-WAN solution replacing existing security devices

Zero-touch site deployment

  • No in-house pre-configuration
  • No manual configuration on-site
  • Site device installation without special-trained IT personnel on-site

Advanced multi-layered security

  • Stateful deep packet inspection
  • Single-pass architecture
  • Advanced threat protection
  • Intrusion detection and prevention
  • Malware protection
  • SSL inspection
  • URL filtering
  • Application-based access control list

Pricing Notes:

Barracuda Products
Barracuda CloudGen WAN VT3000
Barracuda CloudGen WAN VT3000
#CGW-VT3000
Get a Quote!
Barracuda Networks Energize Updates
Energize Updates include Basic Support (Email 24x7, Phone 9am-5pm PST), Firmware Maintenance and Updates, Security Updates, and optional participation in the Barracuda Early Release Firmware program.
Barracuda CloudGen WAN VT3000 1 Year EU Subscription
#CGW-VT3000-EU-1Y
List Price: $15,600.00
Our Price: $14,820.00
Barracuda CloudGen WAN SaaS VT3000 1 Year EU Subscription
#CGW-VT3000-EU-SS
Get a Quote!