Azure Marketplace Spotlight: Barracuda Web Application Firewall
In the Azure Marketplace you can find thousands of certified, open source, and community software applications, add-ons, and data—pre-configured for Microsoft Azure. Finding the gems in this large catalog can be daunting, that’s why we highlight an interesting and broadly usable product. This time it’s the Barracuda Web Application Firewall in the Azure Marketplace.
Probably (or better hopefully) your on-premises servers running your internet-facing sites, applications and services are protected by a decent firewall solution. In many cases this on-premises firewall is a real physical device or at least a dedicated machine, protecting you from the big bad internet. How does this translate to the cloud where your sites, applications and services are not running in your own datacenter anymore? By default Azure will only open up endpoints to the internet, which you explicitly allow (e.g. port 80 for HTTP, 443 for SSL …). You can even choose to allow certain instances (e.g. a Virtual Machine) to only communicate with other instances which are part of your solution, and not with the internet.
But sometimes more advanced protection mechanisms are needed, which can be covered in by for example the Barracuda Web Application Firewall. This firewall provides protection against data loss, application-layer DDoS, and known and previously unknown zero day application-layer attack modalities. As new types of threats emerge, the Barracuda Web Application Firewall will acquire new capabilities to block them. These definitions are automatically updated and will “virtually patch” automatically on units in the field, ensuring the highest security posture for critical applications at all times. Additional capabilities include Granular Identity and Access Management which deliver strong authentication and access control that ensure security and privacy by restricting access to sensitive applications or data to authorized users.
Since the Barracuda Web Application Firewall is in the Azure Marketplace, setting it up is a breeze! You can choose to use your own license (Bring-Your-Own-License, BYOL), so you’ll only pay for the Azure VM consumption. Or you can choose to pay for the license itself as well.
