Barracuda CloudGen Firewall Secure Access Concentrator for Microsoft Azure
Protecting your Digital Assets in Microsoft Azure

Overview:

Growth in cloud computing capabilities and services has driven more data into places where traditional IT security measures cannot reach; specifically, data centers not owned by your corporate IT group. The Barracuda CloudGen Firewall F-Series provides centralized management and highly secure, encrypted traffic to, from, and within Microsoft Azure deployments.

Moving your IT Infrastructure to the Cloud? Utilizing Microsoft Office 365? Running on Microsoft Azure?

Barracuda Networks is your partner for various kinds of deployments in Microsoft Azure. We understand your IT needs and we’re acknowledged as “Microsoft Partner – Gold Application Development.” We are also “Microsoft Azure Certified.”

Barracuda Networks and Microsoft Azure

Barracuda Networks was the first Microsoft Azure Certified Security Solution Provider. The Microsoft Azure Certification assures that the Barracuda Solutions have been tested for readiness and compatibility with Microsoft Azure public cloud, Microsoft Cloud Platform hosted by service providers through the Cloud OS Network, and on-premises private cloud Windows Server Hyper-V deployments.

The Microsoft Azure Certification brings customers several benefits

• Time of deployment is cut by 50-80%
• Ease of deployment increased by 90%
• Deployment bandwidth requirements are reduced to near-zero
• Current and future Barracuda on Microsoft Azure products allow both evaluation and purchased licenses at deployment time

Microsoft works closely with Barracuda engineering, solutions architects and sales teams to create a great customer experience and make it easy for customers to leverage the Barracuda CloudGen Firewall, Barracuda Spam Firewall and Barracuda Web Application Firewall to move their applications into the Azure cloud securely.

The Barracuda Spam Firewall and Barracuda Message Archiver offer best-of-breed email management, archiving, and security for organizations utilizing Microsoft Office 365. And there is more to come – stay tuned and learn about the latest innovations from Barracuda Networks and Microsoft Azure.

Moving Your Physical Data Center to the Cloud?

Get Secure Connectivity with Visibility and Control with the industry's most advanced next-generation firewall solution for Microsoft Azure. The Barracuda CloudGen Firewall ensures highly secure, encrypted traffic from, to, and within Microsoft Azure, providing secure remote and site-to-site access, and centralized management.

The growth in cloud computing capabilities and services has driven more data into places where traditional IT security measures cannot reach - into data centers not owned by your corporate IT group. The Barracuda CloudGen Firewall provides centralized management and highly secure, encrypted traffic to, from, and within Microsoft Azure deployments. Securing applications and data in Microsoft Azure is far easier with tools that are dedicated to the task. Deploying the Barracuda CloudGen Firewall in the cloud is very similar to running local network firewalls, and provides the advantages of common policy enforcement and distributed security management in a hybrid-IT environment. It provides next-generation firewalling and secure remote access to Microsoft Azure. It enables organizations to deploy sophisticated multi-zone network architecture in Microsoft Azure, just like their on-premises networks.

By using the proprietary high-performance VPN protocol extension TINA, the Barracuda CloudGen Firewall deployment enables secure high-speed site-to-site and client-to-site connectivity between on-premises networks and mobile-user devices, as well as connectivity between VNETs in Microsoft Azure. Best of all, it features the industry's best centralized management, ensuring highly scalable and fault tolerant network infrastructure required by today’s users, without the management overhead. The Barracuda NextGen Control Center adds a powerful and intuitive centralized management portal that makes it extremely simple to deploy, configure, update, and manage multiple units from a single location, while also providing comprehensive, real-time network visibility and reporting.

	Securing the Internet of Things The Barracuda CloudGen Firewall F-Series is designed and built from the ground up to provide comprehensive, next-generation security while being simple to deploy and maintain, and highly scalable. Need to connect micro-offices, point of sales and machine-to-machine business? With the F-Series you're all set!
	Easy to setup and maintain: SC1 The Secure Connector (SC1) is a hardware appliance purposebuilt to be an on-premises connectivity device that ensures high-performance and tamper-proof VPN connections to protect the data flow and, thus, guarantee data continuity.
	Bundling the data stream: SAC The Secure Access Concentrator is the collecting point for the data stream. This fully fledged CloudGen Firewall acts as VPN gateway for the SC1 deployments. SACs can be run on VMware, Hyper-V, XenServer, or KVM environments as well as directly in Microsoft Azure.
	Grows with your needs Integration within the Barracuda NextGen Control Center architecture ensures that your deployment can grow with your needs without technical or financial trapdoors. The template-based configuration ensures easy rollout of additional devices and maintain compliance.

Deployment:

The Secure Access Concentrator can be deployed in Azure and AWS if your FSCs are geographically dispersed and/or your backend systems hosted in Azure and/or AWS. The FSAC connects your Secure Connectors with your cloud resources and allows you to monitor the traffic between the FSC and the private subnets. If VPN connectivity is required, the FSAC is used in combination with an F-Series Firewall. You have two options for setting up the Secure Access Concentrator. The deployment steps are the same as the steps required for an on-premises FSAC.

FSAC and F-Series Firewall in the Public Cloud, Control Center located on-premises

In this scenario, the FSCs connect to the public IP address of the FSAC. In Azure, traffic to the backend subnets is routed over the F-Series Firewalls; in AWS, the FSAC connects directly to the backend subnets. The F-Series Firewall handles the VPN tunnels to the on-premises networks. Configuration data from the FSAC to the Control Center is sent through this site-to-site tunnel.

FSAC, F-Series Firewall, and Control Center in Azure and Amazon Web Services

The client connects to the public IP address of the FSAC. Traffic to the backend is routed either through the optional F-Series Firewalls, or directly to the backend subnets. The FSC can connect directly to the Control Center, which is located in another subnet. In Azure, the FSAC can also secure the traffic between the different backend subnets. An F-Series Firewall is required for site-to-site VPN connections to your on-premises networks.

Model Comparison:

¹ The Barracuda CloudGen Firewall F-Series SAC virtual image covers all editions.
² Requires a valid Energize Updates subscription.
³ Barracuda CloudGen Firewall F-Series SAC editions include as many VPN licenses as the number of protected IPs. VPN clients with an active connection to the Barracuda CloudGen Firewall F-Series SAC are counted towards the protected IP limits.
⁴ Including FTP, mail and Web protocols.
⁵ Requires a valid Malware Protection subscription.

Video:

Watch this video on building secure multi-tier architectures in Azure