This article can also be found in the Premium Editorial Download "Information Security magazine: Best-of-breed: Security Products of the Year: 2006."
Download it now to read this article plus other related content.
Barracuda Spam Firewall
Price: $1,399 (Model 200) up to $29,999 (Model 900)
|Barracuda Spam Firewall|
Barracuda Networks' Barracuda Spam Firewall provides solid antispam capabilities and homegrown antivirus wrapped into a serviceable management package.
If you are looking for a reasonable value for your antispam requirements, the Barracuda Spam Firewall appliance is a serviceable choice. It has the feel of a comfortable mid-sized sedan with adequate features and an easy per-appliance pricing model.
The firewall provides solid antispam capabilities and home-grown antivirus wrapped into a reasonable--albeit less than stellar--management package. The series features a line of five Linux appliances based on e-mail volume needs (we tested the mid-range 400 model).
The antispam system is basic first- and second-generation technology consisting of customizable whitelists, real-time blacklists and a Bayesian filter, which can be tuned for users/groups. Additionally, Barracuda boasts that its Intention Analysis system determines the intention of the sender, increasing the effectiveness of the system. In our testing, the firewall provided a mild increase in effectiveness--though, admittedly, we can't duplicate the volume of e-mail a corporate network sees on a daily basis. The system receives hourly antispam and AV updates.
Barracuda's proprietary AV engine, which leverages open-source technology, performed acceptably against standard viruses. However, with the sophistication of today's viruses, we would be concerned about any but a dedicated AV provider's ability to respond quickly in the face of fast-moving malware.
The Spam Firewall could use the kind of wizards or best-practices templates we've seen in other e-mail security appliances. Bar-racuda assumes that the admin is an antispam/antivirus specialist and knows exactly how to tune its box. The factory default is set to catch as much spam as possible, and you are expected to read through the documentation to find the best tuning methods. There is a solid online help system.
It would not take much for Barracuda to offer its customers the option of starting with industry best practices, or at least teaching them what to look for.
The administrative interface is simplistic and unrefined: block-like DOS-style interfaces, layered with drop-down menus. It's functional, but not very elegant, and was sometimes difficult to navigate.
The reporting was minimal, with perhaps only a half-dozen available report types; we would expect to see 20 or more types available with drill-down capabilities.
Reports can either be displayed on screen or received by e-mail. To get detailed reporting, we had to manually sift through the syslog via the browser or via a syslog server.
That said, Barracuda says a new version of the firm-ware, which was scheduled for release after our testing was completed, upgrades the administrative interface and reporting engines, allowing for more report types and export functions in CSV or XML formats.
This was first published in February 2006