Barracuda Firewall Appliance F400 Advanced Threat Protection Subscription 1 Month - BNGF400a-a

Enables ATP. Advanced Threat Protection (ATP) offers protection against advanced malware, zero-day exploits, and other targeted attacks beyond virus pattern detection. A malware subscription license is required. The number of files you can upload per hour and per month is limited, depending on your firewall model. The number of files scanned is counted in the Barracuda ATP Cloud. If the local counter on your Firewall is reset by reinstalling the system, the local counter will be out-of-sync for the rest of the month. Limits still apply.

Barracuda Advanced Threat Protection (ATP) is a cloud-based sandboxing service that is available in all Barracuda CloudGen Firewall Series models, as well as available for all sizes and deployment types. Unlike many other first-generation, advanced persistent threat security vendors, Barracuda's ATP implements full-system emulation and next-generation sandboxing techniques that provide granular visibility into malware behavior.

First, all files are checked against a constantly updated and worldwide synchronized hash database of already emulated files. If the file is not known, it is uploaded and emulated in a virtual sandbox where all malicious behavior is revealed. While traditional breach detection solutions detect network threats only after they have entered the network and after sending log notifications to the administrator, ATP on Barracuda's CloudGen Firewalls stops not yet known advanced persistent threats and ransomware before it enters the network.

Additionally, Advanced Threat Protection is also available on the Barracuda Email Security Gateway, Barracuda Essentials for Office 365, and Barracuda Essentials for Email Security – processing more than 20 million requests per day. This results in one of the world’s most comprehensive databases of known bad IP addresses, “spyware domains," and command and control servers used by botnets.

Key Features

• Dynamic, on-demand analysis of malware programs (sandboxing)
• Prevent malicious files—even unknown ones—from entering the organization and avoid network breaches
• Identify zero-day malware exploits, ransomware, targeted attacks, advanced persistent threats and other advanced malware, which routinely bypasses traditional signature based IPS and anti-virus engines
• Detailed forensics for both malware binaries and web threats (exploits)
• High resolution malware analysis (monitoring execution from the inside)
• Granular control over PDFs, EXEs/MSIs/DLLs, Android APKs, Microsoft Office files, Open Office files, macOS executables, and compressed files and archives
• Blocking of active content in Office and PDF documents
• Full interoperability with the integrated SSL Inspection - files can be extracted and checked in order to detect advanced malware in the encrypted stream
• Cloud-based emulation – resource intensive file emulation is offloaded to the Barracuda Advanced Threat Protection cloud
• Fast response times provided by synchronized cryptographic hash database for emulation shared across the Advanced Threat Protection cloud
• Multiple and simultaneous OS environments for emulated files (Windows, macOS, etc.)
• Temporary blocking of web and mail traffic during analysis
• Optional “deliver first then scan” policy with automatic quarantine function
• Stops spyware and botnet infected machines phoning home via DNS sinkhole technology
• Automatic quarantining and reporting on potentially infected machines in the network
• Scheduled reporting on potentially infected machines via Report Creator (includes automated distribution of the reports)
• Available for hardware and virtual appliances, as well as for Microsoft Azure, Amazon AWS, and Google Cloud Platform.