Email Security Gateway

Email Security Gateway

Comprehensive Protection from Email-Based Threats

The Barracuda Email Security Gateway spam firewall is offered without per-user or per-feature fees, and is also available as a virtual appliance or in a public cloud environment (Amazon Web Services (AWS), Microsoft Azure, or VMware vCloud Air).
Deployment options: Appliance, Virtual, Azure, AWS, vCloud Air.

Email Security Gateway spam firewall by Barracuda

Try It Free!

  • Risk-Free Evaluation
  • 30 Days to Try It Out
Get Evaluation Now
Request a Quote

Today’s IT professionals need a comprehensive email security solution to block email-borne attacks while providing the extra features needed to ensure business continuity - at one affordable price.

The Barracuda Advantage

  • Free Cloud Protection Layer providing:
    • Email spooling up to 96 hours
    • Inbound email filtering
  • Barracuda Real-Time Protection
  • Outbound email filtering for DLP
  • Cloud-based encryption included free of charge
  • Configuration backup to the cloud
  • Preconfigured for quick deployment
  • No per-user or per-server fees

Product Spotlight

  • Industry-leading spam and virus defense for email
  • Protection from data loss and reputation damage
  • Long-lasting product that stays ahead of the latest threats
  • Advanced, granular policy management
  • Also available as a virtual appliance , and on public cloud platforms (Amazon Web Services and Microsoft Azure)

Information

  • Key Features

    It's time to take control of spam! This spam firewall is an integrated hardware and software solution that has the power of an enterprise-class solution, and the ease-of-use and affordability that businesses of all sizes demand.

    The appliance includes the features you need to eliminate your spam and completely protect your email server from all forms of attack. Email may be blocked, quarantined, tagged, or delivered based on the policies of the organization or the preferences of the individual user.

    Protection from Email Threats

    The Barracuda Email Security Gateway provides comprehensive protection against the most current email-borne threats that can cripple your network if left unprotected. With our proprietary twelve-layer defense system, the Barracuda Spam & Virus Firewall optimizes performance of your email server while utilizing the following protections:

    • Anti-spam
      The anti-spam algorithms and methods used by the spam firewall are the most comprehensive and most advanced in the industry at detecting and filtering spam resulting in the lowest rate of false positives.
    • Anti-virus
      By utilizing dual layer virus blocking, decompression of archives and file type blocking, the Spam Firewall anti-virus engine provides complete virus protection.
    • Anti-spoofing
      This technology prevents the use of forged or "spoofed" sender addresses on unsolicited email. The anti-spoofing feature also allows larger organizations to specify a list of IP addresses that are allowed to have a "From" address that appears from inside the organization to support multiple sites and multiple email servers.
    • Anti-phishing
      It provides robust protection against phishing schemes which are often used to gather confidential information about an organization or its individual users.
    • Anti-spyware (Attachments)
      All attachments are scanned and any spyware executables are detected and eliminated immediately.
    • Denial of Service Protection
      Rate controls are utilized to stop denial of service attacks as well as dictionary based spam attacks. These rate control systems are integrated and automatic in the Barracuda Spam & Virus Firewall.

    Protection from Image-based Spam

    In recent months, Barracuda Central has recorded a nearly 500 percent increase in image-based spam. In a large number of these cases, many of these images also contain text. Using OCR (Optical Character Recognition) techniques in combination with unique fingerprint methods, the Barracuda Spam & Virus Firewall has proven to be an effective protective force against image-based spam. Fingerprint analysis is capable of blocking image spam regardless of whether images contain text.

    Barracuda Networks also developed methods to uniquely fingerprint components of spam messages, including images. Barracuda Central collects these spam fingerprints from honeypots as well as from thousands of Barracuda Email Security Gateways belonging to customers who opt-in to submit spam messages for analysis. Using this vast database of spam fingerprints, the Barracuda Email Security Gateway’s new fingerprint analysis can profile message components of new spam emails against known spam fingerprints and automatically block, quarantine, or tag messages based on a match.

    End-user Control Features

    The Barracuda Email Security Gateway features an easy-to-use Web interface, making management and administration of the appliance easy and cost effective. The Web interface allows you to define, manage and control corporate email policies from one central place.

    • User-based Filtering
      The end user can configure it on an individualized basis or you can do it on a global corporate level.
    • Individual Spam Scoring
      The individual spam scoring feature allows end users to set their individual thresholds for spam tolerance providing personalized control over spam policies.
    • Personal Allow and Block Lists
      The Barracuda Email Security Gateway can be configured to allow end users to have control over their individual allow and block lists which further reduces the chance of false positives.
    • End-User Quarantine
      The Barracuda Email Security Gateway provides the ability to setup quarantine mailboxes where users can direct questionable email for later review. This greatly reduces the support load for large organizations.
    • Digest Emails
      A daily email is sent to all end users with a quarantine account summarizing the contents of their individual quarantine mailboxes.
    • Microsoft Outlook and Lotus Notes Integration
      Barracuda Networks provides a software plug-in for both Microsoft Outlook and Lotus Notes end users. With this tool, users can classify messages as spam or not spam in order to fine-tune the filtering and further eliminate any chance of false positives.

    Simplified & Centralized Administration

    The Barracuda Email Security Gateway features an easy-to-use Web interface, making management and administration of the appliance easy and cost effective. The Web interface allows you to define, manage and control corporate email policies from one central place.

    • Multilingual User Interface
      The interface is available in Chinese (simplified and traditional), German, French, Spanish, Japanese, Dutch and English.
    • Barracuda Energize Updates
      A team of security engineers at Barracuda Central continuously monitors the Internet for trends in spam and virus attacks. As they detect trends, Energize Updates are created and distributed to all Barracuda Email Security Gateways, which are automatically updated with new spam rules, spam algorithms, and virus definitions. These updates require zero administration and ensure that your network has comprehensive and accurate protection even as the methods of attack change.
    • Logs and Graphical Reports
      System administrators can view logs or generate graphical reports to provide visibility within the organization. The spam firewall can generate reports on top email users, top spam recipients, top spam senders, and more.
    • No Per User Charges
      There are no per user charges so the system administrator no longer has to worry about keeping track of new accounts.
    • Multiple Domains & Multiple Email Servers
      A single unit can be used for multiple email servers and for multiple domains resulting in lower administrative costs.

    Protection for Large Enterprises

    The Barracuda Email Security Gateway models 600 and 800 were engineered to meet the specific needs of large enterprises. These models offer all the scalability, redundancy and reliability needed for large-scale deployments at an affordable price.

    • Easy Integration with existing Networks
      The units also can be integrated with any IT infrastructure no matter how geographically or logically diverse.
    • Clustering Multiple Barracuda
      Models 600 and 800 can also be clustered for automatic scalability, redundancy and fault tolerance.
    • Hot Swap Redundant Disk Array and Power Supply
      These features provide a total solution for reliable fault tolerant data storage management necessary for large enterprises.
    • Plug and Play Installation
      Deploying the unit is also extremely easy. There is no software to install or modifications necessary to your existing email systems, greatly reducing the time and resources required for installation and ongoing support.
    • LDAP and Microsoft Active Directory Integration
      Directory server integration allows for single sign on and recipient verification.
  • Email Security Gateway Model Specifications

    For small offices (SMB) the model 100 offers a world-class solution for up to 50 users. The model 300, for larger organizations, handles up to 1,000 active email users.

    The largest model handles up to 100,000 active email users. These specifications are not limits of the system, but are the recommended capacity.

    If you would like to speak to someone about which model is right for your organization, please do not hesitate to contact us.

    Model 100 Model 200 Model 300 Model 400
    • BSF100a
    • 10 Domains
    • 1–50 Active Email Users
    • 8 GB Message Log Storage
    • 1U Mini Rackmount Chassis
    • 1 Input Current
    • 1x10/100 Ethernet Connection
    • Compatible with all Email Servers
    • Hardened and Secure OS
    • Outbound Email Filtering
    • Email Encryption
    • Cloud Protection Layer
    • BSF200a
    • 50 Domains
    • 51-500 Active Email Users
    • 10 GB Message Log Storage
    • 1U Mini Rackmount Chassis
    • 1 Input Current
    • 1x Gigabit Ethernet Connection
    • Compatible with all Email Servers
    • Hardened and Secure OS
    • Outbound Email Filtering
    • Email Encryption
    • Cloud Protection Layer
    • BSF300a
    • 250 Domains
    • 300-1000 Active Email Users
    • 12 GB Message Log Storage
    • 20 GB Quarantine Storage
    • 1U Mini Rackmount Chassis
    • 1.2 Input Current
    • 1x Gigabit Ethernet Connection
    • Compatible with all Email Servers
    • Hardened and Secure OS
    • Outbound Email Filtering
    • Email Encryption
    • Cloud Protection Layer
    • MS Exchange/LDAP Accelerator
    • Per User Settings and Quarantine
    • Delegated Help Desk Role
    • Syslog Support
    • BSF400a
    • 500 Domains
    • 1000-5000 Active Email Users
    • 24 GB Message Log Storage
    • 60 GB Quarantine Storage
    • 1U Mini Rackmount Chassis
    • 1.4 Input Current
    • 1x Gigabit Ethernet Connection
    • Redundant Disk Array (RAID)

     

    • Compatible with all Email Servers
    • Hardened and Secure OS
    • Outbound Email Filtering
    • Email Encryption
    • Cloud Protection Layer
    • MS Exchange/LDAP Accelerator
    • Per User Settings and Quarantine
    • Delegated Help Desk Role
    • Syslog Support
    • Clustering & Remote Clustering
    • Per Domain Settings
    • Single Sign-On
    • SNMP/API
    Note: The capacity depends on environment and selected options.
    Model 600 Model 800 Model 900 Model 1000
    • BSF600a
    • 5000 Domains
    • 3000-10000 Active Email Users
    • 72 GB Message Log Storage
    • 180 GB Quarantine Storage
    • 1U Fullsize Rackmount Chassis
    • 1.8 Input Current
    • 2xGigabit Ethernet Connection
    • Hot Swappable Reundant Disk Array (RAID)

     

     

     

    • Compatible with all Email Servers
    • Hardened and Secure OS
    • Outbound Email Filtering
    • Email Encryption
    • Cloud Protection Layer
    • MS Exchange/LDAP Accelerator
    • Per User Settings and Quarantine
    • Delegated Help Desk Role
    • Syslog Support
    • Clustering & Remote Clustering
    • Per Domain Settings
    • Single Sign-On
    • SNMP/API
    • Customizable Branding
    • Per User Score Settings
    • Delegated Domain Administration
    • BSF800a
    • 5000 Domains
    • 8000-22000 Active Email Users
    • 120 GB Message Log Storage
    • 360 GB Quarantine Storage
    • 2U Fullsize Rackmount Chassis
    • 4.1 Input Current
    • 2xGigabit Ethernet Connection
    • Hot Swappable Redundant Disk Array (RAID)
    • Hot Swappable Redundant Power Supplies

     

    • Compatible with all Email Servers
    • Hardened and Secure OS
    • Outbound Email Filtering
    • Email Encryption
    • Cloud Protection Layer
    • MS Exchange/LDAP Accelerator
    • Per User Settings and Quarantine
    • Delegated Help Desk Role
    • Syslog Support
    • Clustering & Remote Clustering
    • Per Domain Settings
    • Single Sign-On
    • SNMP/API
    • Customizable Branding
    • Per User Score Settings
    • Delegated Domain Administration
    • BSF900a
    • 5000 Domains
    • 15000-30000 Active Email Users
    • 240 GB Message Log Storage
    • 1 TB Quarantine Storage
    • 2U Fullsize Rackmount Chassis
    • 5.4 Input Current
    • 2xGigabit Ethernet Connection
    • Hot Swappable Redundant Disk Array (RAID)
    • Hot Swappable Redundant Power Supplies

     

    • Compatible with all Email Servers
    • Hardened and Secure OS
    • Outbound Email Filtering
    • Email Encryption
    • Cloud Protection Layer
    • MS Exchange/LDAP Accelerator
    • Per User Settings and Quarantine
    • Delegated Help Desk Role
    • Syslog Support
    • Clustering & Remote Clustering
    • Per Domain Settings
    • Single Sign-On
    • SNMP/API
    • Customizable Branding
    • Per User Score Settings
    • Delegated Domain Administration
    • BSF1000a
    • 5000 Domains
    • 25000-100000 Active Email Users
    • 512 GB Message Log Storage
    • 2 TB Quarantine Storage
    • 2U Fullsize Rackmount Chassis
    • 7.2 Input Current
    • 2xGigabit Ethernet Connection
    • Hot Swappable Redundant Disk Array (RAID)
    • Hot Swappable Redundant Power Supplies

     

    • Compatible with all Email Servers
    • Hardened and Secure OS
    • Outbound Email Filtering
    • Email Encryption
    • Cloud Protection Layer
    • MS Exchange/LDAP Accelerator
    • Per User Settings and Quarantine
    • Delegated Help Desk Role
    • Syslog Support
    • Clustering & Remote Clustering
    • Per Domain Settings
    • Single Sign-On
    • SNMP/API
    • Customizable Branding
    • Per User Score Settings
    • Delegated Domain Administration
    Note: The capacity depends on environment and selected options.
  • Virtual Appliances

      100 Vx 300 Vx 400 Vx 600 Vx 800 Vx 900 Vx 1000 Vx
    Active Email Users 1-50 1,000 5,000 10,000 22,000 30,000 100,000
    CPU Cores Allowed 1 2 4 6 12 24 Unlimited
    Features              
    Compatible with all mail servers yes yes yes yes yes yes yes
    Hardened and Secure OS yes yes yes yes yes yes yes
    Outbound Email Filtering yes yes yes yes yes yes yes
    Email Encryption yes yes yes yes yes yes yes
    Cloud Protection Layer yes yes yes yes yes yes yes
    MS Exchange/LDAP Accelerator   yes yes yes yes yes yes
    Per User Settings and Quarantine   yes yes yes yes yes yes
    Delegated Help Desk Role   yes yes yes yes yes yes
    Syslog Support   yes yes yes yes yes yes
    Clustering & Remote Clustering     yes yes yes yes yes
    SNMP/API     yes yes yes yes yes
    Per Domain Settings     yes yes yes yes yes
    Single Sign-On     yes yes yes yes yes
    Customizable Branding       yes yes yes yes
    Per User Score Settings       yes yes yes yes
    Delegated Domain Administration       yes yes yes yes
    Advanced Threat Detection optional optional optional optional optional optional optional
  • Azure

      Level 3 Level 4 Level 6
    Container Size A1-Standard A2-Standard A3-Standard
    License Type BYOL BYOL BYOL
    Features      
    Compatible with all mail servers yes yes yes
    Hardened and Secure OS yes yes yes
    Outbound Email Filtering yes yes yes
    Email Encryption yes yes yes
    Cloud Protection Layer yes yes yes
    MS Exchange/LDAP Accelerator yes yes yes
    Per User Settings and Quarantine yes yes yes
    Delegated Help Desk Role yes yes yes
    Syslog Support yes yes yes
    Clustering & Remote Clustering yes yes yes
    SNMP/API yes yes yes
    Customizable Branding yes yes yes
    Per User Score Settings yes yes yes
    Delegated Domain Administration yes yes yes
    Per-Domain Settings yes yes yes
    Single Sign-On yes yes yes
    Advanced Threat Detection optional optional optional
  • AWS

      Level 3 Level 4 Level 6
    Container Size m3.medium m3.large m3.xlarge
    License Type BYOL Marketplace BYOL Marketplace BYOL Marketplace
    Features      
    Compatible with all mail servers yes yes yes
    Hardened and Secure OS yes yes yes
    Outbound Email Filtering yes yes yes
    Email Encryption yes yes yes
    Cloud Protection Layer yes yes yes
    MS Exchange/LDAP Accelerator yes yes yes
    Per User Settings and Quarantine yes yes yes
    Delegated Help Desk Role yes yes yes
    Syslog Support yes yes yes
    Clustering & Remote Clustering yes yes yes
    SNMP/API yes yes yes
    Customizable Branding yes yes yes
    Per User Score Settings yes yes yes
    Delegated Domain Administration yes yes yes
    Per-Domain Settings yes yes yes
    Single Sign-On yes yes yes
    Advanced Threat Detection optional optional optional
  • Documentation

    DataSheets

     Guides:

  • How does the Barracuda protect against email threats?

    The unit is an integrated hardware and software solution. It a multilayered approach for providing comprehensive email protection available against spam, viruses, spoofing, phishing and spyware attacks. An additional benefit is the optimized processing of each email to maximize performance and capability to filter millions of messages per day.

    Behind the industry-leading initiatives of Predictive Sender Profiling and Barracuda Real-Time Protection are 12 explicit defense layers including: Denial of Service and Security Protection, Rate Controls, IP Reputation Analysis, Sender Authentication, Recipient Verification, Virus Protection, Policy (user-specified rules), Fingerprint Analysis, Intent Analysis, Image Analysis, Bayesian Analysis, and a Spam Rules Scoring engine.

    How is email filtered?

    Deployed at the network perimeter, all incoming email must pass through all 12 defense layers of the Barracuda before any of it can reach the intended recipients. The defense layers are grouped into two main classes: connection management, which involves dropping incoming mail connections before receiving messages, and mail scanning, which analyzes messages upon receipt. During the filtering process, emails are checked for new and familiar spammer attacks, viruses, and customized administrator policy violations. Based on administrator and user preferences, spam can be tagged, quarantined or blocked.

    Why tag email? What happens to tagged emails?

    Tagging email benefits organizations by easily identifying messages that meet set criteria. Tagged emails are delivered to the recipient with a customizable label, such as [BULK], that is added to the subject of the message.

    Why quarantine email? What happens to quarantined email?

    Quarantining emails is a safeguard that allows for examination of questionable messages prior to accepting or rejecting; typically, quarantined email does turn out to be spam. An administrator can choose two types of email quarantine: global or per user quarantine.

    When configured for global quarantine, the Barracuda routes all quarantined email to a mailbox specified by the administrator. When configured for per user quarantine, the Barracuda stores the email locally and notifies users periodically of their quarantined email. Users can choose to delete quarantined email, forward it to their own mailboxes or whitelist the sender address to prevent future email from being quarantined. Per user quarantine is available with the Barracuda models 300, 400, 600, 800 and 900.

    What are some of the underlying technologies used in the Barracuda ?

    The Barracuda uses a combination of proprietary and open source software. The Barracuda operating system is based on a hardened, stable Linux kernel that has undergone strict scrutiny by top security researchers. The robust MTA is capable of handling a high number of SMTP connections and mail delivery volumes. Starting with firmware release 3.5, the Barracuda MTA has a built-in journaling function that can be used in conjunction with the Barracuda Message Archiver.

    If I am using Microsoft Exchange, how will the Barracuda protect against “dictionary” attacks?

    The Microsoft Exchange Accelerator, available on Barracuda model 300 and higher, uses the Lightweight Directory Access Protocol (LDAP) built into Exchange to verify recipients before delivering messages to the Microsoft Exchange Server.

    What new technologies has the Barracuda added to combat the latest spam campaigns?

    Barracuda Networks has announced several initiatives against spam:

    • Multi-Pass Optical Character Recognition Engine: Image spam generally embeds text within images with the intent of hiding content and bypassing the text rules processing layers of spam filters. & With Barracuda Networks’ industry-leading multi-pass OCR engine, Barracuda Email Security Gateways render the spammers’ tricks to hide text behind color or blurred images ineffective.
    • Predictive Sender Profiling: Barracuda Networks’ industry-leading Predictive Sender Profiling probes deeper into sent email and digs into the campaign itself to identify anomalous sender activity, allowing Barracuda Networks to effectively block spam typically unstoppable by traditional reputation analysis.
    • Barracuda Real-Time Protection: Barracuda Real-Time Protection uses an advanced set of technologies to immediately block the latest virus, spyware and other malware attacks as they emerge. Leveraging the Barracuda Email Security Gateways large and diverse customer base, Barracuda Networks leads in industry in detecting early trends and responding to email-borne threats.

    How does the Barracuda protect against virus threats?

    The Barracuda provides comprehensive protection against virus threats through three powerful layers. The first layer consists of a well-respected open source virus scanning engine. The second layer is a proprietary virus engine maintained by Barracuda Central, an advanced 24/7 security operations center that works to continuously monitor and block the latest Internet threats. The third layer is Barracuda Real-Time Protection, a set of advanced technologies that enable Barracudas to immediately block the latest virus, spyware and other malware attacks as they emerge without having to wait for a signature to be downloaded onto the Barracuda.

    How does the Barracuda Email Security Gateway block real-time threats?

    Barracuda Central engineers diligently work 24x7 monitoring spam and virus threats around the world. Since response times are crucial with real-time threats, when one is detected the Barracuda uses Barracuda Real-Time Protection to mitigate these threats as they emerge without waiting for new updates.

    How much time will I spend installing and maintaining the Barracuda?

    The Barracuda Email Security Gateway is designed as an easy-to-install appliance requiring minimal administrative overhead. Without any tuning, the Barracuda Email Security Gateway offers a 95 percent spam accuracy rate with a 0.01 percent false positive rate. Taking into account the six defense layers automatically tuned by Energize Updates, the Barracuda Email Security Gateway is easily kept up-to-date for ongoing spam accuracy.

    Will I receive a high number of false positives using a Barracuda Email Security Gateway?

    With no tuning, the Barracuda Email Security Gateway is set to minimize false positives, typically at 0.01 percent or less – one of the lowest false positive ratings in the industry. As with any solution that allows for user customization, each customer’s false positive return will vary depending on how the administrator tunes the unit (i.e. a stricter spam score setting may result in more false positives).

    What does Energize Updates include for the Barracuda Email Security Gateway?

    The Barracuda Energize Updates subscription provides the latest spam and virus definition updates that block new campaigns before they become an outbreak. Barracuda Central engineers constantly update spam and virus definitions and are able to remotely tune six of the 12 defense layers, thereby minimizing administration time. Energize Updates also gives you access to technical support, new firmware releases and the opportunity to participate in the Barracuda Early Release Firmware program.

    Does the Barracuda offer per user policies?

    Most per user policy settings are available in Barracuda Email Security Gateway 300 and higher. Per user policies empower users with the ability to set their own individual scoring policies (available on models 600 or higher), Bayesian database, allow lists and block lists.

    Can the Barracuda filter outbound messages?

    Yes. The Barracuda filters outbound messages for viruses and basic spam scanning policies. For advanced outbound scanning, Barracuda Networks offers the Barracuda Email Security Gateway-Outbound which includes different workflows for quarantining outbound email traffic for review by policy auditors.

    How do I block or minimize the amount of invalid bounce messages?

    Invalid bounce messages are non-delivery reports to forged email addresses. To block invalid bounce messages, enable the Invalid Bounce Suppression feature and relay all your outgoing email through the Barracuda Email Security Gateway.

    Does the Barracuda enable administrators to block email from other countries?

    Yes, the Barracuda offers different ways to block spam from other countries:

    1. Based on a Reverse DNS lookup, administrators block messages whose top level domain resolves to a country’s hostname
    2. Based on the declared character set of an email, administrators block messages that contain a specific language set.
    3. While it is not recommended by Barracuda Networks, administrators create custom policies to filter other patterns in the subject, header or body to block unwanted email from other countries.

Choosing Your Email Security Gateway is Easy

Our team of technical sales professionals are able to help you source the right Email Security Gateway for your organization, whether it's physical, virtual or in the cloud. The basic process is:

01

Select the unit that suits your organization's needs.

02

Pre-sales training & advice from our experts.

03

Physical units are delivered as soon as possible.

04

Installation advice & post-install training available.

Barracuda Networks Email Security Gateway spam filter

Email Security Gateway Evaluation

Request a no-risk, free evaluation

 

Unsure of which solution is right for your organization? Pehaps you don't have a dedicated IT staff? Our technical sales specialists are very experienced at helping professionals of all experience levels get the solution they need.

Get Help Now