An embedded deep packet inspection (DPI) engine from Rohde & Schwarz Cybersecurity serves as the core for Barracuda's NextGen firewall F-series. The Barracuda F-series firewall is able to classify network applications up to Layer 7 in real-time, and can granularly control what applications are permitted, prioritized or de-prioritised for access.
By embedding the R&S PACE 2 DPI software, the F-series firewall can identify services like Voice over IP (VoIP) while maintaining a high bandwidth, even if settings are being changed to reprioritise applications on the fly (dynamic Quality of Service (QoS) settings).
This improves site-to-site connectivity and enables uninterrupted access to applications hosted in the cloud, all while simplifying the administration of network operations for enterprises and managed services providers.
In addition, the firewall offers advanced protection for dispersed enterprise networks that rely on cloud computing, software as a service (SaaS) and an increasingly mobile workforce. Fast and reliable application classification using DPI remains a prerequisite for a firewall solution to enable advanced security and traffic management policies.
The R&S PACE 2 DPI engine provides a powerful and extremely reliable detection and classification of thousands of applications and sub-applications through combining deep packet inspection and behavioural traffic analysis - regardless of whether the protocols use advanced obfuscation, port hopping techniques or encryption.
The embedded software makes high-performance traffic visible in order to set up advanced security and traffic management policies, secure and control enterprise applications hosted in public clouds, and to guarantee uninterrupted network availability and operational continuity. "Ten years ago, enterprises were more concerned about the unauthorised use of P2P applications and instant messaging. Although the need for application control and awareness remains, enterprise concerns have shifted to securing enterprise applications hosted in private and public clouds, protecting east-west data centre traffic and preventing unwanted traffic and malware on the corporate network," said Alexander Müller, product manager for DPI at Rohde & Schwarz Cybersecurity.
"In the cloud era, network firewalls are more than just security devices, they must ensure network availability across distributed networks." "Our F-series virtual and cloud-based firewalls are enhanced to facilitate real-time policy and security management in order to protect today's enterprise distributed networks of office sites, data centres and mobile workers. The high-performance R&S PACE 2 DPI engine from Rohde & Schwarz Cybersecurity supports this effort to protect organisations as part of our firewall solution," said Klaus Gheri, VP Network Security at Barracuda Networks. "By implementing the R&S PACE 2 DPI software, we receive regular application and protocol updates without the need to increase internal R&D in signature plug-ins and maintenance."