We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see https://campus.barracuda.com/doc/71862301/ for further information on our EoS policy.

Public Cloud Hosting

  • Last updated on

The growth of cloud computing capabilities and services has driven more data into places where traditional IT security cannot reach - into the datacenters of public cloud providers. Cloud-based deployments can be in the form of a private cloud, where the Barracuda NG Firewall can act as a gateway device, or in a public or hybrid cloud. You can secure instances in a public or hybrid cloud by deploying a Barracuda NG Firewall as a virtual security device within your cloud environment. The Barracuda NG Firewall uses application and user awareness combined with advanced bandwidth management to optimize WAN performance and reliability, thereby securely handling all incoming traffic for the backend server instances.

CloudNGs.png

Microsoft Azure Cloud

Microsoft Azure is a public cloud service. The Barracuda NG Firewall integrates into your Microsoft Azure virtual network by creating a network security gateway between Internet-facing endpoints and your virtual machines. Microsoft Azure Small and Medium instances use one virtual network interface with a dynamic IP address per virtual machine and can be deployed via web interface or a Microsoft PowerShell script. Large and Extra Large instances support two and four network interfaces, respectively, and must be deployed via PowerShell. There are two types of images available in the Marketplace: Bring-Your-Own-License (BYOL) and an hourly rate (PAYG). The Barracuda NG Firewall Azure can be deployed on any Azure pricing tier. The NG Firewall license is bound to the number of CPU cores. Barracuda Networks recommends the following Azure pricing tiers:

LicenseAzure Pricing TierNumber of CPU CoresNumber of NICs
NG Firewall Level 2A111
NG Firewall Level 4A221
NG Firewall Level 6A34up to 2
NG Firewall Level 8A48up to 4
NG Control CenterA1 - A4n/a1

Use the deployment method matching your required feature set:

Amazon Web Services (AWS)

Amazon AWS offers both virtual private and public cloud services. If you are deploying a virtual private cloud, the Barracuda NG Firewall AWS will act as a gateway device, just like in a traditional network. Internal IP addresses in the VPC can be static or dynamic; public IPs (Amazon Elastic IPs) are then mapped to the internal Network Interfaces. The AMI uses one dynamic Network Interface as a default configuration. Up to 9 additional Amazon Network Interfaces can be added, depending on the instance type with a total of up to 100 network interfaces per VPC. These network interfaces can be connected to subnets in the virtual private cloud, with each subnet containing server instances hosted in a different Availability Zone of your choice. There are two types of images available in the Marketplace: Bring-Your-Own-License (BYOL) and an hourly rate (PAYG). Starting with 6.1.1 both image types are only available in HVM virtualization type. The Barracuda NG Firewall AWS is available in four different sizes:

NG Firewall LicenseAmazon Instance TypeNumber of vCPUsNumber of NICsIP addresses per Interface
Level 2m3.medium1up to 24
Level 4m3.large2310
 c3.large (recommended)2310
Level 6m3.xlarge4410
 c3.xlarge4415
Level 8m3.2xlarge8430
 c3.2xlarge8415

To deploy a Barracuda NG Firewall in an Amazon Virtual Private Cloud, see How to Deploy the Barracuda NG Firewall in an Amazon Virtual Private Cloud.

Last updated on