Barracuda Zero Trust Access for Microsoft 365

Secure access to your Microsoft 365 applications on any device, anywhere.

Included in Barracuda Email Protection

Overview:

Cybercriminals compromised approximately 500,000 Microsoft 365 accounts in 2021.

By exploiting the rise of remote work, BYOD policies, and a distributed workforce, cybercriminals are able to move laterally across Microsoft 365 applications.

Protect your Microsoft 365 applications from lateral attacks.

Mitigate breach risks for your remote employees and contractors and reduce your exposure to lateral attacks by deploying continuous verification of user and device identity and trust.

Enable remote worker productivity.

Empower employees with streamlined access to Microsoft 365 applications, increased security, and upgraded performance compared to traditional VPN technology.

Easily deploy and manage from the cloud.

With flexible deployment, you can instantly provision company devices, BYOD endpoints, and contractor endpoints, or enable self-service for your workforce.

Quick to deploy, easy to manage Zero Trust Access for Microsoft 365 applications.

Security starts with access. Barracuda’s Zero Trust Access model establishes unparalleled access control across users and devices — from remote to hybrid, and from company-owned to employee- and contractor-owned. It provides remote, conditional, and contextual access to resources and reduces over-privileged access risks. With Zero Trust Access, employees and partners can access Microsoft 365 applications without creating additional attack surfaces.

Secure third-party access to your business.

Mitigate the risks associated with third-party access to your business with Zero Trust. Improve visibility into device and user activity and enable role-based access to applications and data. Deploy Zero Trust Access and secure access to Microsoft Outlook, Teams, OneDrive, SharePoint, and more for your outsourcers, partners, contractors, and post-M&A subsidiaries.

Protect your employees with dynamically-triggered multifactor authentication (MFA).

Turn your endpoint devices into an additional layer of defense against Microsoft account compromise. With Certificate-Based Authentication (CBA) and dynamically-triggered MFA, you can prevent advanced MFA bypass attacks and mitigate breach risk for your employees.

Simplify compliance reporting.

Zero Trust Access is included in Barracuda Email Protection.

Discover the right plan for you.

Features:

Zero Trust Access for Microsoft 365

Protect against phishing and block threats at the device level on any mobile device. Users do not need to install or maintain additional software for this protection, which eliminates the exposure associated with unreliable mobile networks and devices.

Enable your organization to create robust access policies and gain visibility into who has access to what Microsoft 365 applications and from where. Set role and attribute-based controls to grant contextual access to trusted users and devices, gain total visibility into access activities, and mitigate risks. With Certificate-Based Authentication (CBA) and dynamically-triggered multifactor authentication (MFA), you can prevent advanced MFA bypass attacks and mitigate breach risk for your employees.

Simplified Management

Simplify provisioning for company-owned and employee-owned devices, as well as shared home computers based on app and role. Easily onboard your teams to ensure secure access to apps and web, including one-click user addition and deletion. Set and manage access controls with its policy engine.

Maintain security with continuous assessment of user and device access privileges. Manage global policies such as disk encryption and device screen lock and automatically block access for compromised devices. Improve productivity and remove friction with simple, self-service remediation steps to fix access issues.

Meet SOC Type 2 and other compliance requirements with no extra work. Zero Trust Access creates a clear system of record for your Microsoft 365 applications, delivering streamlined reports of system access across the organization. Manage, track, and verify the who, what, and when of privileged access in one product. Streamline audit and compliance reporting. Get useful insights into endpoint telemetry, define access policies, continuously monitor device security posture, and more.

Plans:

Barracuda offers 3 ways to protect your email, data, users, and acess

Comprehensive Microsoft 365 Protection Starts Here.

Zero-Trust Access for Microsoft 365 is included in Barracuda Email Protection.

Protect users from all email threat types with secure email gateway combined with artificial intelligence.

Includes everything from Advanced.

Add automated post-delivery email incident response to your email security to save resources and secure your users mailboxes.

Includes everything from Premium.

Get comprehensive protection for Microsoft 365 by improving your resiliency with user training, data protection, email archiving, and zero trust access.

Capabilities	Advanced	Premium	Premium Plus
PREVENT THREATS
Spam and Malware Protection Identify and block spam, viruses, and malware delivered via email messages. Using virus scanning, spam scoring, real-time intent analysis, URL link protection, reputation checks, and other techniques, Barracuda scans email messages and files.
Attachment Protection Barracuda combines behavioral, heuristic, and sandboxing technologies to protect against zero-hour and targeted attacks. A sandbox environment is used to detonate and observe behavior of suspicious attachments.
Link Protection Link Protection automatically rewrites URLs so that Barracuda can sandbox the request at click time to block malicious links.
Email Continuity In the event of a mail server outage or loss of connectivity, an emergency mailbox lets users continue to send and receive emails, staying productive until your primary servers are back online.
Phishing and Impersonation Protection Automatically detect and prevent impersonation, business email compromise, and other targeted attacks. Barracuda’s AI engine learns each organization's unique communication patterns and leverages these patterns to identify anomalies and prevent socially engineered attacks in real time.
Account Takeover Protection Stop phishing attacks used to harvest credentials for account takeover. AI detects anomalous email behavior and alerts IT, then finds and removes all fraud emails sent from compromised accounts.
Domain Fraud Protection Prevent email domain fraud with DMARC reporting and analysis. Barracuda provides granular visibility and analysis of DMARC reports and helps you minimize false positives, protect legitimate email, and prevent spoofing.
Web Security Protect users from accessing malicious web content with advanced DNS and URL filtering.
Zero Trust Access for Microsoft 365 Mitigate breach risks for remote employees and contractors and reduce your exposure to lateral attacks on Microsoft 365 applications by deploying continuous verification of user and device identity and trust.
DETECT AND RESPOND
Automatic Remediation All user-reported messages are automatically scanned for malicious URLs or attachments. When a threat is detected, all matching emails are automatically moved from users' mailboxes into their junk folders.
SIEM/SOAR/XDR Integration Orchestrate incident response cross-product with RESTful API (beta) and syslog integrations. Remotely administer and configure incident response capabilities and store your event data for tracking, analysis, and troubleshooting.
Threat Hunting and Response Quickly identify and efficiently remediate post-delivery threats by automating investigative workflows and enabling direct removal of malicious emails.
Automated Workflows Build custom playbooks to completely automate your incident response process. Admins at any technical level can create a workflow by defining a trigger, determining conditions, and assigning the desired actions through a simple user interface.
Attack Simulation Simulated phishing attacks are constantly updated to reflect the most recent and most common threats. Simulations are not limited to email, but also include voice, SMS, and portable-media (USB stick) attacks.
Security Awareness Training Get access to advanced, automated education technology that includes simulation-based training, continuous testing, powerful reporting for administrators, and active incident-response awareness.
SECURE DATA, ENSURE COMPLIANCE
Email Encryption Secures your mail by encrypting it during transport to the Barracuda Message Center, encrypting it at rest for storage in the cloud, and providing secure retrieval by your recipients through HTTPS web access. Create a policy to automatically encrypt emails based on their sender, content, and other criteria.
Data Loss Prevention Create and enforce content policies to prevent sensitive data, including credit card numbers, Social Security numbers, HIPAA data, customer lists, and other private information, from being sent by email. Policies can automatically encrypt, quarantine, or block certain outbound emails based on their content, sender, or recipient.
Cloud Archiving A cloud-based, indexed archive allows for granular retention policies, extensive search, role-based auditing/permissions, legal hold, and export. Easily comply with e-discovery requests and regulatory or policy-retention requirements.
Cloud-to-Cloud Backup Get data protection and cloud backup for Office 365 data, including Exchange Online mailboxes, SharePoint Online, OneDrive for Business, and Teams. Fast point-in-time recovery in the event of accidental or malicious deletion.
Data Inspector Automatically scan your OneDrive for Business and SharePoint data for sensitive information and malicious files containing malware. Use it to develop policies that comply with GDPR, CCPA, and other data privacy regulations.