Barracuda Networks, a cloud-enabled security and data protection solution vendor, has announced expanded public cloud functionality for their Barracuda Web Application Firewall and Barracuda NextGen Firewall.
The updated cloud generation firewalls would allow for utility-based consumption and automated security controls for DevSecOps workflows, giving customers an “easy” migration path to the public cloud.
AWS Marketplace
Barracuda Cloud Generation Firewalls would provide users the flexibility to deploy security at critical points – in the cloud, in hybrid or multi-cloud environments, and throughout the development lifecycle. New capabilities would include:
- Usage-based billing using the AWS Marketplace Metering Service Billing – Barracuda NextGen Firewall is now available as a metered billing service in the AWS Marketplace, joining the Barracuda Web Application Firewall, which became available with the same service last year. AWS Marketplace Metering Service Billing would ensure that all evaluation, pricing, and provisioning is done entirely within the AWS Marketplace, removing any licensing friction and offering a pricing structure based on actual traffic secured. Customers are able to build CI/CD pipelines that include their ISV partner solutions, and charges are based on the total bandwidth consumed across deployed firewalls and standard Amazon Elastic Compute Cloud (EC2) charges per instance.
- DevSecOps with Puppet – The REST API framework can be used to automate the configuration of the Barracuda Web Application Firewall, which now includes Puppet integration within AWS Cloud, making it “easier” for customers to integrate security controls into their cloud native applications on AWS. This integration enables cloud security and operations teams to codify their firewall policies as code so they can be tested and secured as part of the overall application delivery process. Puppet would maintain the desired state of the Barracuda Web Application Firewall, automatically remediate unauthorized changes, and enable security teams to quickly identify and remediate known vulnerabilities. This would benefit the business as it helps increase application “velocity, security, and reliability.”
“Real-time, proactive security throughout the development process is critical for tighter application security in today’s threat environment,” said Samm DiStasio, vice president, business development, Puppet. “Barracuda is our first security partner in public cloud to help us bridge the security gap in DevOps. Our integration with Barracuda Web Application Firewall helps speed up application delivery by automating management of critical security policies.”
Cloud Consumption Models
Barracuda Cloud Generation Firewalls are engineered to provide network and application security for cloud-only and hybrid-cloud environments. The cloud generation firewall functionality would include:
- Well-architected for the public cloud – Integrate directly with public cloud fabric, provide API integrations for DevOps tools and automation workflows, and centrally manage across hybrid environments. This would give customers the benefits of the cloud without compromising their security posture.
- Support for cloud-specific use cases – Support unique requirements of the cloud including horizontal scalability, distributed policy sets, fully meshed connectivity, and north-south traffic management. Meeting these requirements would allow customers to leverage the benefits of cloud automation around deployment, auto-scaling, high-availability, networking, and monitoring.
- Match Customer’s Cloud Consumption Models – Licensing that would allow customers to deploy security in alignment with their current public cloud consumption model.
“Perimeter-based firewalls create tightly-coupled environments that scale vertically, which makes perfect sense on-premises but is entirely the wrong model for the public cloud. This is really about using the right tool for the job,” said Tim Jefferson, Vice President, Public Cloud, Barracuda. “Customers should look to automate the orchestration, deployment, and configuration of security architectures that are loosely coupled and scale elastically. In today’s hybrid environments, customers need consistent security across on-premises and cloud-based environments – Barracuda Cloud Generation Firewalls help address this requirement.”
