In addition to the base license, you can add the following subscriptions to use your firewall to its fullest extent:
Barracuda Energize Updates
This license is mandatory for every CloudGen Firewall for the first year. The following features are included with Barracuda Energize Updates:
Basic Support
Includes email support 24x7 and phone support between the hours of 9 a.m. and 5 p.m. Monday through Friday in the US (Pacific Time), Japan, China, Austria, and the United Kingdom time zones.
Firmware Maintenance
Includes new firmware updates with feature enhancements, bug fixes, and pattern updates for:
- Application Control
- IPS/IDS engine
- SSL VPN template updates
- File Content definition updates
SD-WAN
SD-WAN provides multi-path VPN tunnels across all providers, thereby offering redundant, reliable, and failsafe network connections. When the VPN tunnel is up, it can transmit traffic as long as at least one ISP link is operational. Admins can retain full control over how each link is used, or they can configure the advanced balancing and bandwidth management features to optimally use the available bandwidth. SD-WAN combines a multi-transport VPN tunnel with the following advanced VPN routing, balancing, and shaping features:
- Dynamic Bandwidth and Round Trip Time (RTT) Detection
- Performance-Based Transport Selection
- Adaptive Bandwidth Protection
- Adaptive and Static Session Balancing
- Failover Support
- Multi-Provider Load Balancing
VPN Forward Error Correction (FEC)
Forward Error Correction is a method of correcting data transmission errors that occur over noisy communication lines, thereby improving data reliability without requiring retransmission.
Advanced Threat Protection
Enables ATP. Advanced Threat Protection (ATP) offers protection against advanced malware, zero-day exploits, and other targeted attacks beyond virus pattern detection. A malware subscription license is required. The number of files you can upload per hour and per month is limited, depending on your firewall model. The number of files scanned is counted in the Barracuda ATP Cloud. If the local counter on your Firewall is reset by reinstalling the system, the local counter will be out-of-sync for the rest of the month. Limits still apply.
| Model | Burst Limit (Files/Min) | Files per Month |
|---|---|---|
| F12, F18, F80, F18x, F20x, F30x | 5 | 108 000 |
| F280 | 10 | 216 000 |
| F380 | 12 | 260 000 |
| F400 | 15 | 324 000 |
| F600 | 25 | 540 000 |
| F800 | 35 | 750 000 |
| F900 | 50 | 1 000 000 |
| F1000 | 50 | 1 000 000 |
| AWS/Azure Level 2 | 5 | 108 000 |
| AWS/Azure Level 4 | 10 | 216 000 |
| AWS/Azure Level 6 | 15 | 324 000 |
| AWS/Azure Level 8 | 35 | 750 000 |
| VF25 | 2 | 43 200 |
| VF50 | 5 | 108 000 |
| VF100 | 10 | 216 000 |
| VF250 | 15 | 324 000 |
| VF500 | 20 | 432 000 |
| VF1000 | 25 | 540 000 |
| VF2000 | 30 | 648 000 |
| VF4000 | 35 | 750 000 |
| VF8000 | 50 | 1 000 000 |
| VFC1 | 5 | 108 000 |
| VFC2 | 10 | 216 000 |
| VFC4 | 15 | 324 000 |
| VFC8 | 30 | 648 000 |
| VFC16 | 35 | 750 000 |
| VFC48 | 50 | 1 000 000 |
Malware Protection
Enables the Virus Scanner service. This license is available for all CloudGen Firewalls. Not available for F10, F12, and VF10.
Barracuda Advanced Remote Access
Enables the SSL VPN service, MFA using One-time Passwords (OTP), SAML Azure AD authentication, and NAC support. Remote Access subscriptions are available for the CloudGen Firewall F18 or higher and all CloudGen Firewall Vx and public cloud models. For PAYG CloudGen Firewalls in AWS and Azure, this subscription is automatically included.
Included SSL VPN Features
- Browser-based access via desktop and mobile portals
- SSL VPN-based, server-side NAC
- VPN templates for SSL VPN
Authentication
- Multi-factor authentication using Time-based One-time Passwords (TOTP)
- AD FS/SAML authentication for Client-to-Site VPN
Included Network Access Client Features
- Windows Personal Firewall
- Windows Health Check via Access Control Service
- AD FS/SAML authentication for Barracuda CloudGen WAN and Barracuda CloudGen Firewall 8.2.0 or higher.
CudaLaunch
- iOS, Android, Windows, and macOS support
- Central management of accessible resources and VPN provisioning
User Session Limits
- Unlimited concurrent SSL VPN user sessions
- Unlimited concurrent CudaLaunch sessions
- Multiple concurrent client-to-site VPN sessions by the same user when using VPN Group Policies
Barracuda Firewall Insights
The Barracuda Firewall Insights subscription enables a CloudGen Firewall to stream data for statistical analytics to the Barracuda Firewall Insights Server.
Instant Replacement Service
Instant Replacement service includes the following features:
- Replacement unit shipped next business day
- Enhanced support which provided phone and email support 24x7.
- Hardware refresh every four years
Which subscriptions/features are available on which platform?
Feature sets and available subscriptions may differ from product type or platform. The following table provides an overview of which feature/subscription is available for which product.
Feature / Subscription
| Hardware | Virtual, Software | Public Cloud |
|---|---|---|---|
Energize Updates (e) | Available / Unlimited users | Available / Limited by capacity | Incl. in Service Subscription 1) |
Malware Protection (m) | Available / Unlimited users | Available / Limited by capacity | Not available 4) |
Advanced Threat Protection (a) | Available / Unlimited users / Limited file upload | Available / Unlimited users / Limited file upload | Not available 4) |
| NAC&SSLVPN (formerly known as Basic Remote Access) | Incl. in Advanced Remote Access Subscription 2) | Available / Limited by capacity | Incl. in Service Subscription 3) |
Advanced Remote Access (vp) Includes SSL VPN and enables the CudaLaunch app and multiple logins of one user. Enables AD FS/SAML authentication for Client-to-Site VPN and multi-factor authentication using Time-based One-time Passwords (firmware 8.x and higher). | Available / Unlimited users | Available / Limited by capacity | Incl. in Service Subscription 3) |
Firewall Insights (fi) Activates Firewall Insights reporting service | Available | Available | Available |
- All cloud licenses include NAC&SSLVPN (former Basic Remote Access subscription).
- NAC&SSLVPN is part of the Advanced Remote Access subscription (ARA).
- PAYG licenses include Advanced Remote Access.
- PAYG licenses cannot be enhanced with add-on subscriptions (Malware, ATP).
Add-on subscriptions are termed licenses and are valid from the time purchased until the expiration date is reached. When entering the license token, Barracuda Firewall Admin automatically downloads the purchased license file from Barracuda Networks and installs the subscriptions on the Barracuda Firewall Control Center. As soon as a firewall gets registered via token or connects as a physical unit, the firewall queries the license files from the Barracuda Networks server. All add-on subscriptions need at least an active Base and Energize Updates subscription to work properly.
Only active subscriptions guarantee the functionality of the subscribed add-on features. Before exceeding the expiration date, licenses must be renewed in order to guarantee the functionality of the purchased add-on features. For more information, see Validity.