Barracuda CloudGen Firewall

The cloud-hosted Advanced Threat Protection uses a complete virtual copy of a system (virtual sandbox) to look at unknown files. This careful check analyzes embedded exploits in documents like PDF and Office files, clearly showing malicious activity. The system automatically blocks infected devices (IPs) or puts them in quarantine, stopping attacks like zero-day and ransomware from spreading.

The Intrusion Detection and Prevention (IDS/IPS) system constantly watches for and delivers real-time protection against many network attacks and security flaws in software. It immediately stops common attacks including SQL injections, Cross-Site Scripting, and Denial of Service (DoS/DDoS) attacks, plus malware like Trojans, viruses, worms, and spyware. It blocks tricky ways attackers hide their actions by using methods like stream segmentation, checking unusual packets, and TCP split handshake protection.

Barracuda CloudGen Firewall software protects the network by scanning web content (HTTP and HTTPS), email (SMTP, POP3), and file transfers (FTP) directly at the entry point. The system runs with two built-in antivirus scanners that use regular signature updates and advanced techniques to guard the environment. This feature detects malware and programs using exploits on files such as PDF and Office documents, even when attackers try to disguise them.

The core firewall component is a high performance stateful deep packet inspection engine that carefully checks both the packet's technical header and the actual data part of every passing communication. This process ensures that packets made incorrectly are ignored, protecting the network infrastructure, and applies firewall rules based on the full content and context of the communication. This foundational technology makes important security possible, including Application Control and Intrusion Prevention.

The advanced threat protection feature connects to a global threat network that gathers data from millions of collection points across all attack types worldwide. This network quickly collects threat data from sources including network, email, website attacks, and web browser threats. When a new threat is identified, the information is instantly shared with all connected security solutions in real-time.