Barracuda Firewall Training
Overview
The Barracuda CloudGen Firewall family provides purpose-built hardware and virtual appliances designed to protect and connect your network infrastructure. On top of industry-leading centralized management, the highly resilient VPN technology combined with intelligent traffic management capabilities allows customers to increase efficiency and increase overall network availability.
Barracuda CloudGen Firewall
The Barracuda CloudGen Firewall is an enterprise-grade, next-generation firewall that was purpose-built for efficient deployment and operation within dispersed, highly dynamic, and security-critical network environments. In addition to next-generation firewall protection, the Barracuda CloudGen Firewall provides industry-leading operations efficiency and added business value by safeguarding network traffic against line outages and link quality degradation.
User identity and application awareness are used to select the best network path, traffic priority, and available bandwidth for business-critical traffic. The Barracuda CloudGen Firewall can transparently move traffic to alternative lines to keep traffic flowing.
Barracuda Firewall Control Center
All policies and client and device settings for all Barracuda CloudGen Firewalls and Secure Connectors are centrally managed and tracked by the Barracuda Firewall Control Center. This allows the CloudGen Firewall and Secure Connectors to meet enterprise requirements of massive scalability, efficient configuration, and life cycle and license management across dispersed networks, while at the same time offering performance guarantees for business-critical applications.
Barracuda Secure Connector
The Barracuda Secure Connector offers large-scale remote access capabilities. It enables the ever-growing number of IoT devices and micro-networks to securely connect to the central or distributed corporate datacenter. In such a scenario, a large number of small Secure Connector appliances connect via TINA VPN to their regional Secure Access Controller (VACC). The VACC forwards the management traffic to the Firewall Control Center. Corporate policies such as Application Control, URL Filtering, and Virus Scanning are handled either directly on the VACC or forwarded to the border firewall. The configuration and life-cycle management for all Secure Connectors and their VACCs are handled by one central Firewall Control Center. The Firewall Control Center can manage multiple Secure Access Controllers, allowing you to scale up the network at will.
Secure Connector Integration with the Control Center
The Secure Connector is a small hardware appliance optimized to efficiently connect remote devices and micro-networks to the corporate data center via TINA VPN tunnel. The configuration is centrally managed by the Control Center, but can be overridden via the web interface on the device itself. When a Secure Connector is deployed, a management network and a data network are automatically selected and permanently assigned to the device.
The Firewall Control Center, a central management appliance for Secure Connector and CloudGen Firewall devices, provides a central template-driven configuration management interface, firmware update management, and status information for all managed devices. Secure Connector configuration is handled through a single interface: the Secure Connector Editor.
The Secure Connector Editor allows you to create configuration templates and link them to individual SC appliances. Changes made to the templates are immediately pushed to the Secure Connector.
Access Controller and Secure Connector Deployment
The Secure Access Controller is deployed via virtual CloudGen Firewall images available for on-premises deployments or in the public cloud. The Secure Access Controller handles incoming Secure Connector VPN tunnels. Management traffic is automatically forwarded to the Control Center, and user traffic is processed directly. If the Access Controller is deployed remotely, a VPN tunnel is created between the Access Controller and the Control Center that is also used for the Secure Connector management traffic. If necessary, Access Controllers can be deployed in a high availability cluster.
Secure Connector Firewall
The Secure Connector appliances use a different Firewall service from the CloudGen Firewalls. The Firewall allows you to create rules defining access, source, and destination NAT based on four network zones defined for the Secure Connector:
- LAN
- Wi-Fi
- WAN (including Wi-Fi client)
- VPN
Secure Connector Networks
The Secure Connector network can be configured in several ways:
- Manual – The network must be entered manually. Devices behind the Secure Connector require a static IP address.
- Manual Mapped – The network is entered manually. Devices behind the Secure Connector require a static IP address. The static network is mapped to an automatically assigned subnet out of the Secure Connector data network.
- DHCP Server – The network is entered manually. Devices behind the Secure Connector receive an IP address from the DHCP server on the Secure Connector.
- DHCP Server Mapped – The network is entered manually. Devices behind the Secure Connector receive an IP address from the DHCP server on the Secure Connector. The network is mapped to an automatically assigned subnet out of the Secure Connector data network.
- Automatic – The network is assigned automatically to the Secure Connector by the Control Center.
Mapped networks must be the same size as the network assigned to the Secure Connector. The management network offers access. The Wi-Fi access point can use a separate network from the Secure Connector network, accessing the other zones via source NAT firewall rules.
The Secure Connector supports the following WAN connection types:
- DHCP client
- Static IP
- Wi-Fi client
- WWAN modem
Hardware Specifications
Hardware specifications and power options depend on the appliance. The following Secure Connector models are available:
- SC1 – Via external power supply (5V); via USB/USB OTG
- SC2 – Via external power supply (12V); via PoE
Licensing
To deploy the Secure Connector and Access Controller, you must have an Access Controller license. You must also assign a Secure Connector Energize Updates pool license. The number of instances in the pool license determines the number of Secure Connectors allowed to connect. The size of the Secure Connector pool license may not exceed the maximum number of VPN connections for the Access Controller model.
The following models are available:
- Barracuda CloudGen Firewall VACC 400 – 2 CPU cores, up to 500 VPN connections
- Barracuda CloudGen Firewall VACC 610 – 4 CPU cores, up to 1200 VPN connections
- Barracuda CloudGen Firewall VACC 820 – 8 CPU cores, up to 2500 VPN connections
Secure Connector Web Interface
You can also manage a Secure Connector through the Secure Connector web interface. The Secure Connector web interface provides an overview of all configuration settings. Information is arranged in tabs that allow you to perform firmware updates and to monitor all activities of your Secure Connector. To access the web interface, open a browser, enter the management IP address of the appliance, and log in with your Secure Connector username and password.
Virtual Firewall Secure Connector (VFSC)
To ensure secure connectivity of systems in container environments or systems that have the ability to run containers such as industrial PCs, Barracuda Secure Connector is now available as a version to be deployed quickly in Docker. This enables the ever-growing number of industrial devices and micro-networks to securely connect to the central or distributed corporate data center or the cloud.
Minimal System Requirements:
CPU | RAM [MB] | Minimum Storage [GB] |
---|---|---|
x86_64 CPU @1Ghz | 512 | 8 |
Platform Flexibility
The Barracuda CloudGen family offers hardware and virtual models in various sizes, from branch offices up to headquarters and datacenters. The Firewall Control Center Vx and CloudGen Firewall Vx can run on a wide range of hypervisors, effortlessly integrating with your existing network and server infrastructure. The CloudGen Firewall is designed for deployment across the entire enterprise, including the Microsoft Azure, Amazon AWS, and Google Cloud Platform public clouds.
First Steps with Barracuda CloudGen Firewall and Control Center
Follow the guides below to get the CloudGen Firewall up and running:
Deployment – Deployment for hardware CloudGen Firewall, virtual and public cloud CloudGen Firewall, and Firewall Control Center.
Get Started – Follow this guide to integrate CloudGen Firewall and Control Center into your existing network.
Sales Number : +91 9582 90 7788
Support Number : +91-9654016484
Sales Email : sales@itmonteur.net
Support Email : support@itmonteur.net
Register & Request Quote
Submit Support Ticket