We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.


access rule

Forwarding rule that determines how clients on a source network access resources on a destination network.


With ActiveSync, Exchange accounts can be configured on a mobile device. Users can access email features using Microsoft Exchange ActiveSync via the Barracuda SSL VPN.


Additional feature such as Barracuda Microsoft Outlook Add-In. 


A piece of software that enhances another software application and usually cannot be run independently

address mapping

Technique that allows different protocols to interoperate by translating addresses from one format to another.

Advanced Threat Detection

Uses next-generation sandbox technology powered by full-system emulation to catch not only persistent threats and zero-day exploits, but also advanced malware designed to evade detection. Files are uploaded to and scanned in the Barracuda ATD cloud.

allow list

List of domains, users, or hosts that are allowed access, especially referring to mail and web traffic.  Also called whitelist. 

AMI (Amazon Machine Image)

AWS template that contains configuration, application server, and applications required to launch an EC2 AWS Instance.


Mobile device operating system. Compare to Apple iOS.


Antivirus software, abbreviated: AV. Used to prevent, detect and remove malicious software.


Application Programming Interface. A set of tools and procedures provided by the programmer of an application so that other programmers can control, exchange data with, or extend the functionality of an application.


Access Point Name provided by an ISP for wireless WAN connections.

App Redirect access rule

Access rule that rewrites the destination IP address and forwards the traffic to a service running on a local IP address of the Barracuda NextGen Firewall F-Series.

Apple iOS

Apple mobile operating system for devices such as iPhone and iPad. Compare to Android.


Device or piece of equipment.

Application Load Balancer

AWS feature that makes routing decisions at the application layer (HTTP/S), supports path-based routing, and can route requests to one or more ports on each EC2 instance or container instance in a VPC.

application object

Firewall object that references lists of applications. Can be applied to an application rule on the Barracuda NextGen Firewall F-Series.

application rule

Firewall rule that allows you to block or throttle traffic for detected applications.


Considering and inspecting application traffic. The Barracuda NextGen Firewall is an application-aware network firewall.

application-based provider/link selection

When configured, the Barracuda NextGen Firewall F-Series routes traffic through the provider link that is defined in the connection object.


Address Resolution Protocol. The protocol for mapping IP addresses to physical addresses such as Ethernet or Token Ring.

AS, Autonomous System

Collection of networks under a common administration sharing a common routing strategy. Autonomous systems are subdivided by areas. An autonomous system must be assigned a unique 16-bit number by the IANA. Sometimes abbreviated AS.


Referring to a standard 7-bit character system that includes the alphanumeric characters and printer control codes.

asymmetric encryption

Also known as Public Key Encryption. Encryption that uses both a public key and a private key as a pair; one is used for encryption, the other is used for decryption.


Asynchronous Transfer Mode. A broadband transmission system using 53-octet packets over a cell-switched network at speeds up to 2.2 GBPS.

Audit Log service

Service on the Barracuda NextGen Firewall F-Series that is used for central audit log file collection.

Authentication Client

Application used to automate Offline Firewall Authentication on the Barracuda NextGen Firewall F-Series.

authoritative DNS

Name server that gives answers in response to queries about names in a DNS zone.

authority zone

Associated with DNS. A section of the domain-name tree for which one name server is the authority.

Auto Scaling

A web service designed to launch or terminate AWS instances automatically based on user-defined policies, schedules, and health checks.

Auto Scaling Group

A representation of multiple EC2 instances that share similar characteristics, and that are treated as a logical grouping for the purposes of instance scaling and management.

Availability Zone (AZ)

A distinct location within an AWS region that is insulated from failures in other Availability Zones, and provides inexpensive, low-latency network connectivity to other Availability Zones in the same region.


Virus scanning engine used by the Barracuda NextGen Firewall F-Series. Avira is integrated in the Virus Scanner service.

AWS Certificate Manager (ACM)

A web service for provisioning, managing, and deploying Secure Sockets Layer/Transport Layer Security(SSL/TLS) certificates for use with AWS services.


A managed cloud platform that lets connected devices easily and securely interact with cloud applications and other devices.

AWS region

A named set of AWS resources in the same geographical area. A region comprises at least two Availability Zones.

AWS Route Table

Routing table used in AWS subnets, that can be modified, for example, to use an Internet gateway as the target for the default route.

AWS Management Console

A simple and intuitive web-based user interface to access and manage AWS.

Azure PowerShell

A set of modules that provide cmdlets to manage Azure with Windows PowerShell. 

Azure Resource Manager (ARM)

Azure deployment mode that enables you to work with the resources in your solution as a group. Recommended for new deployments.

Azure Route Table (UDR)

Also User Defined Routing or UDR. Allow you to create network routes for traffic between subnets and to the Internet.

Azure Security Center

Feature that helps to prevent, detect, and respond to threats with increased visibility of Azure resources, and provides security monitoring and policy management.

Azure Service Manager (ASM)

Classic deployment mode used in legacy Azure deployments. ASM offers a web interface and PowerShell for deployments. 

back-end server

Part of the back-end process, that usually consists of server, application, and database. The back end is where the technical processes happen, as opposed to the front end, which is usually where the user's interaction occurs.


Referring to the Internet, a central network that provides a pathway for other networks to communicate.

Backup Export Tool

Allows export of historical revisions of data backed up and stored on Barracuda Backup appliances.


Operating mode for Ethernet bundles where the link is chosen by calculating the hash out of the source/destination MAC (Layer 2) combined with the IP addresses (Level 3).

Barracuda Campus

Online documentation (campus.barracuda.com) for all Barracuda products, contains feature descriptions, how-to articles, and release notes. Formerly known as Barracuda University and Barracuda TechLibrary.

Barracuda Central

Provides a wide range of statistics, threat information, and a number of useful services to help manage and secure your network. Shares information with Barracuda Networks customers and the Internet security community. 

Barracuda cloud

The cloud where features such as the Barracuda Web Security Service are situated. Only use the term 'public cloud' when referring to AWS and Azure.

Barracuda Earth

Barracuda NextGen Firewall F-Series feature that provides a visual representation of the status of VPN site-to-site tunnels around the world. Information is retrieved from the Control Center.

Barracuda Networks account

Credentials granted and used to log into your Barracuda Networks product.

Barracuda Networks Technical Support

Contact Barracuda Networks Technical Support if you need help with your Barracuda Networks product. Visit https://www.barracuda.com/support/index for details.

Barracuda NextGen Admin

Application used to administer Barracuda NextGen Firewalls F-Series and Barracuda NextGen Control Centers. 

Barracuda NextGen Control Center

Central administration appliance designed to manage a large number of Barracuda NextGen Firewalls F-Series. 

Barracuda NextGen Firewall F-Series

Enterprise-grade, next-generation firewall, purpose-built for efficient deployment and operation within dispersed, highly dynamic, and security-critical network environments.

Barracuda NextGen Firewall X-Series

Application-aware network firewall appliance, designed for organizations without dedicated IT personnel to manage firewalls.

Barracuda NG Web Security Gateway (IBM ISS)

Web Security Gateway engine used by the URL Filter service on the Barracuda NextGen Firewall F-Series. The Barracuda NG Web Security Filter can only be used in combination with the HTTP proxy and is not compatible with Application Control. Requires a Barracuda NG Web Security Gateway subscription.

Barracuda portal

Entry point into Barracuda cloud services.

Barracuda VPN Client

Component of the Barracuda Network Access Client, available for Windows, Linux and macOS. VPN client that secures mobile desktops connecting to the corporate LAN through the Internet.

Barracuda Web Security Gateway

Integrated content filtering, application blocking, and malware protection solution that enforces Internet usage policies on and off network by blocking access to websites and Internet applications and eliminates spyware and other forms of malware.

Barracuda F-Series Install

Downloadable tool used to install the Barracuda NextGen Firewall F-Series.

BGP neighbors

BGP peers that are established by manual configuration between routers to create a TCP session on port 179. 


Method of storing or transmitting data in which the most significant bit or byte is presented first. Compare with little-endian.


Berkeley Internet Name Domain. The standard TCP/IP naming service that links network names with IP addresses.

block device

Storage device that moves data in sequences of bytes or bits (blocks). Example: hard disk, CD-ROM drive, flash drive.

block device mapping

Defines the block devices (instance store volumes and EBS volumes) to attach to an AWS instance. 


Loader for the operating system. A program that runs after completion of the self-tests in the hard boot process, and then loads and runs the software.

border gateway

Router that communicates with routers in other autonomous systems.

box level

A configurable operating instance of the Barracuda NextGen Control Center.


In AWS, container for objects that can be stored in Amazon S3.


In cryptography, a certificate authority or certification authority (CA) is an entity that issues digital certificates.

Caching DNS service

Forwarding DNS service (bdns) on the Barracuda NextGen Firewall F-Series that acts as a DNS proxy to speed up DNS queries.

CC Access Control service

Box level service on the Barracuda NextGen Control Center that specifies the amount of days for which access cache entries generated by activities traversing the Access Control Server should be deleted.

CC Configuration service

Box level service on the Barracuda NextGen Control Center that allows remote configuration of the Control Center and of the managed F-Series Firewalls.


Box level service of the Barracuda NextGen Control Center that specifies DNS zones such as hosts, domains, mail-exchangers etc.

CC Event service

Box level service on the Barracuda NextGen Control Center that processes events generated by the managed F-Series Firewalls.

CC Firewall

Box level service on the Barracuda NextGen Control Center. The CC Firewall service has the same features as the firewall service on a NextGen Firewall F-Series, except for Virus Scanning, URL Filtering and ATD.

CC FW Audit Log service

Box level service on the Barracuda NextGen Control Center that receives structured firewall data from managed F-Series Firewalls and stores the firewall audit information in a relational database installed on the Contro Center. 

CC PKI service

Box level service (Public Key Infrastructure) on the Barracuda NextGen Control Center that is used for handling certificates.

CC Statistics Collector (dstatm)

Box level service on the Barracuda NextGen Control Center that collects raw data from the managed F-Series Firewalls and processes it according to specified transfer settings.

CC Statistics Viewer (qstatm)

Box level service on the Barracuda NextGen Control Center that collects raw data from the managed F-Series Firewalls and processes it according to specified transfer settings.

CC syslog proxy

Box level service of the Barracuda NextGen Control Center, used for syslog streaming.

CC Syslog service

Box level service of the Barracuda NextGen Control Center that listens for incoming log messages from managed boxes and processes them.

CC VPN service

Box level service on the Barracuda NextGen Control Center that is responsible for tunnel termination and tunnel handling.

CC Firewall Audit Info Viewer 

Displays firewall data on the FWAUDIT tab of the Barracuda NextGen Control Center.


A document or seal certifying the authenticity of something. A digital certificate certifies the ownership of a public key. This allows relying parties to rely upon signatures or on assertions made about the private key that corresponds to the certified public key.


Log of configuration changes on the appliance. Can be found in the release notes of the product.


The result of a mathematical operation that uses the binary representation of a group of data as its basis, usually to check the integrity of the data.


Classless interdomain routing. Technique supported by BGP4 and based on route aggregation. CIDR allows routers to group routes together in order to cut down on the quantity of routing information carried by the core routers. 


Virus scanning engine that is used by the Barracuda NextGen Firewall F-Series. ClamAV is integrated in the Virus Scanner service.

Class A|B|C|D network

Classes of IP addresses as defined in the Internet Protocol hierarchy.

classic load balancer

In AWS, a Classic Load Balancer makes routing decisions at either the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS), and supports either EC2-Classic or a VPC (virtual private cloud).

cloud integration

AWS cloud integration allows the firewall to connect directly to the AWS service fabric to rewrite routes in AWS route tables and to retrieve information for the cloud element on the dashboard. Cloud integration also works with Azure.

cloud operating system

A computer operating system that is specially designed to run in a provider's datacenter and be delivered to the user over the Internet or another network. Windows Azure is an example of a cloud operating system or 'cloud layer' that runs on Windows Server 2008.

cloud portability

The ability to move applications and data from one cloud provider to another. See also Vendor lock-in.

cloud storage

Barracuda Backup, Barracuda Message Archiver, Barracuda NextGen Firewall F, Barracuda Essentials for Email Security, Barracuda Essentials for Office 365, Barracuda ArchiveOne, CudaCam

A model of data storage where the digital data is stored in logical pools, the physical storage spans multiple servers (and often locations), and the physical environment is typically owned and managed by a hosting company.

cloud-based encryption

A service offered by cloud storage providers whereby data is transformed using encryption algorithms and is then placed on a storage cloud.


AWS management tool that lets you create, manage, and update a collection of AWS resources using templates and allowing Json code for template deployment.


An AWS content delivery service that helps you improve the performance, reliability, and availability of your websites and applications.


Replacing traditional IT operations with lower-cost, outsourced cloud services.


AWS management tool to monitor resources and applications. Aggregates data and metrics (cpu load, network throughput, disk io, etc), filters it, and provides alarm actions.


Global settings that apply to a cluster on a Barracuda NextGen Control Center.

collision domain

In Ethernet, the network area within which frames that have collided are propagated. Repeaters and hubs propagate collisions. LAN switches, bridges and routers do not.

community string

Text string that acts as a password and is used to authenticate messages sent between a management station and a router containing an SNMP agent. The community string is sent in every packet between the manager and the agent.


Traffic in excess of network capacity.

connection draining

AWS feature, lets you scale down EC2 instances to reduce sessions.

content delivery network (CDN)

A distributed system consisting of servers in discrete physical locations, configured in a way that clients can access the server closest to them on the network, thereby improving speeds.

cross region replication

Feature of S3 storage class in AWS. Once enabled, every object uploaded to a particular S3 bucket is automatically replicated to a designated destination bucket located in a different AWS region.