It seems like your browser didn't download the required fonts. Please revise your security settings and try again.

End-of-Sale/Renewals for Models 100 and 200

As of October 4th, 2020, new sales for models 100 and 200 of the Barracuda Email Security Gateway ceased. As of November 30, 2023, renewals for models 100 and 200 of the Barracuda Email Security Gateway have ceased. 

Microsoft Azure

  • Last updated on

Virtual machines (VMs) deployed through Azure Gallery prior to mid February, 2015 do not support Disk Expansion. If you deployed prior to this time period and want to expand the disk, you must re-deploy the VM using the latest VM image available in Azure Gallery.

See also: Microsoft Azure Restrictions and Limitations

Microsoft Azure is a public cloud service, with instances that use one virtual network interface with a dynamic IP address per virtual appliance. The Barracuda Email Security Gateway can be deployed as a virtual appliance in the Microsoft Azure cloud to protect your email server from spam, virus, spoofing, phishing and spyware attacks. Outbound filtering and encryption options also prevent confidential or sensitive information from being purposely or inadvertently leaked outside the organization.

Licensing Options

The Barracuda Email Security Gateway is available on Microsoft Azure with the Bring Your Own License (BYOL) and Hourly / Metered options.

Bring Your Own License (BYOL)

With the Bring Your Own License (BYOL) option, you are required to get the Barracuda Email Security Gateway license token, either by:

  • Providing the required information for a free evaluation at OR
  • Purchasing online at
    With this license option, there will be no Barracuda Email Security Gateway Software charges, but Microsoft Azure usage charges on Microsoft will be applicable.
  • You can either begin with the free evaluation OR purchase the Barracuda Email Security Gateway license directly after deploying the VM or when accessing the VM web interface for the first time.

BYOL Models and Instance Types

For BYOL, the Barracuda Email Security Gateway virtual appliance is available in three sizes on Microsoft Azure. The following table lists each size level with their corresponding instance type, number of active email users, cores, and memory allocated to each instance type. You'll select the Instance Type in the next step in How to Deploy the Barracuda Email Security Gateway on Microsoft Azure. If you want to increase the performance of a license that you have already purchased, you can buy additional cores from Barracuda and reconfigure for a larger instance type.

Supported Instance Type
in Microsoft Azure
Active Email Users
Level 3 - (D1)3,000 - 10,00013.5 GB
Level 4 - (D2)8,000 - 22,00027 GB
Level 6 - (D3)15,000 - 30,000414 GB

You are limited to 1.7 GB of memory when deploying a Level 3 (A1) instance in Microsoft Azure. This limitation should not affect the operation of the Barracuda Email Security Gateway when deployed in this environment. Also note that if you need to add additional storage:

Hourly / Metered

With the Hourly/Metered licensing option, you complete the purchase or evaluation of the Barracuda Email Security Gateway entirely within the Microsoft Azure gallery. After the instance is launched, it is provisioned automatically. You are charged hourly for both the Barracuda Spam Software and Microsoft Azure usage on Microsoft.

Hourly / Metered Model and Instance Types

For more information on supported instance types, Default CPU, Default Memory and Hourly pricing, refer to Barracuda Email Security Gateway Pricing Details

If you want to increase the performance of an existing VM, configure it with a larger instance type on Microsoft Azure and you will be charged accordingly by Microsoft. The VM will automatically be reconfigured by Microsoft with the resources and capabilities of the larger instance type.

Before You Begin

If your organization does not have an Azure account, go to the Microsoft Azure purchase options page, and follow the onscreen instructions.

Create an Azure Virtual Network

  1. Log into your Microsoft Azure Management Portal.
  2. In the left pane, click NETWORKS, and then click NEW at the bottom of the screen.

  4. On the Virtual Network Details page:
    1. Enter a unique name in the Name field. For example, AzureVirtualNet
    2. Select a location from the LOCATION drop-down list. The virtual network can only be used for Azure instances in this geographic region. E.g., South Central US
    3. Click Next arrow.png
  5. (Optional) On the DNS Servers and VPN Connectivity page, select or enter your DNS SERVERS.
  6. Click Next arrow.png
  7. On the Virtual Network Address Spaces page, configure the ADDRESS SPACE:
    1. STARTING IP – Enter the first IP address of the address space you want to use.
    2. CIDR – Select the subnet mask for the virtual network. The maximum number of instances for a virtual network are listed in parentheses.
  8. Add a SUBNET:
    1. STARTING IP – Enter the first IP address of the subnet.
    2. CIDR – Select the subnet mask for the subnet.
  9. Click Next arrow.png

The created virtual network gets displayed in the VIRTUAL NETWORKS lists.

Next Step

Continue with How to Deploy the Barracuda Email Security Gateway in the Microsoft Azure Management Portal for instructions on installation and configuration.