Barracuda Advanced Bot Protection: Features

Stop bots dead in their tracks

Web Application Protection

- OWASP Top 10 and Zero-Day Attack Protection

Protect against all OWASP Top 10 attacks, zero-day attacks, data leakage, and DDoS attacks. The layered traffic processing engine and Smart Signatures use fewer attack-detection signatures to detect and block web attacks, including zero-day attacks. Each Smart Signature can detect attacks found in 40 attack-specific signatures, reducing detection time and improving overall detection.

+ Geo IP and IP Threat Intelligence

Using client source addresses, organizations can control access to web resources. Barracuda Application Protection can control access based on GeoIP to limit access only to specified regions. It also integrates with the Barracuda Reputational Database and can identify suspicious IP addresses, bots, TOR networks, and other anonymous proxies that are often used by attackers to hide their identity and location. Capabilities include the ability to block proxies, VPNs, and entire networks based on Autonomous System Numbers (ASN).

+ Data Leak Protection

Inspects all outbound traffic for sensitive data leakage. Content such as credit card numbers, U.S. social security numbers, or any other custom patterns are identified and can be either blocked or masked without administrator intervention. Furthermore, the information is logged and can be used by administrators to find potential leaks.

+ Website Supply Chain Protection

Attackers exploit third-party scripts to perform client-side digital skimming attacks, such as Magecart, to steal PII and financial data directly from the browser. These attacks are difficult to detect because these scripts are loaded directly by the browser and attackers are using sophisticated techniques to avoid detection with scanners and similar defensive methods. Barracuda Application Protection includes Client-Side Protection, a feature that automates the CSP and SRI configuration, reducing admin overhead and configuration errors. Additionally, Barracuda Active Threat Intelligence provides visualization and reporting for these configurations, giving deeper visibility into how these scripts are used.

+ Antivirus for File Uploads

Available with all plans, the on-board Antivirus engine scans and detects viruses in file uploads.

+ Advanced Threat Protection for File Uploads

Seamless integration with Barracuda Advanced Threat Protection to provide security against advanced zero-hour threats. By analyzing files in a CPU-emulation based sandbox, it can detect and block malware embedded deep inside files uploaded to applications.

+ Risk-based attack detection

Barracuda Active Threat Intelligence automatically classifies each incoming request with risk scores based on the request parameters. These risk scores are used by backend ML models to identify advanced threats such as bots and complex attackers and block them.

Full-Spectrum DDoS Protection

- Unmetered Volumetric DDoS Prevention

Volumetric DDoS attacks are on the rise because the computational resources available to attackers make it very easy to launch full-scale attacks that can bring an entire network down. Barracuda WAF-as-a-Service offers unmetered DDoS protection cloud service that scrubs traffic before reaching the intended websites. This allows the cloud service to identify patterns of DDoS attacks and block them.

+ Unmetered Application DDoS Attack Prevention

Protect against advanced application-layer DDoS (Slowloris, RUDY, and Slow Read) attacks with heuristic fingerprinting and IP reputation to distinguish real users from botnets. Secure against application DDoS using a variety of risk assessment techniques such as application-centric thresholds, protocol checks, session integrity, active and passive client challenges, historical client reputation block lists, geo-location, and anomalous idle-time detection.

+ Unlimited Rate-Limiting rules

Barracuda Application Protection offers rate limiting of incoming client requests based on IP and client fingerprint. Rate limiting can be enforced at an application or URL level using an unlimited number of rules.

API Dashboard

- Comprehensive Traffic Metrics

Monitor API usage with detailed analytics, including performance trends and request volumes, to gain full visibility into system activity.

+ Compliance Reporting

Automatically generate reports that validate adherence to industry standards and internal security policies, ensuring regulatory alignment.

+ Threat Intelligence

Detect and highlight the most active attacking source IP addresses, enabling rapid identification and response to malicious activity.

+ Endpoint Inventory and Exposure

Track the total number of endpoints, identify those with applied security policies, and flag endpoints exposing sensitive data.

+ Security Threat Detection

Provide insights into the origins of attacks, high-risk activity (e.g., abnormal request patterns, suspicious user agents, anomalous IPs).

+ Data Exposure Risk

Identify endpoints exposing PII/PCI data and highlight those lacking corresponding security policies to mitigate compliance and privacy risks.

+ Usage Patterns and Operator Insights

Analyze top endpoints, client IP distribution, user-agent presence, and method usage to ensure operational sanity and detect anomalies.

+ Incident awareness and response readiness

Provides visibility into recent attacks, alert trends with direct mapping to OWASP Top 10 events.

API Security

- Protect JSON and GraphQL APIs

Barracuda Application Protection protects XML, JSON, and GraphQL APIs against all application attacks, including OWASP Top 10 API threats.

+ Schema-based API Discovery

Import the schema for your JSON API to automatically create security rules based on the definition of the API. Supported schemas are OpenAPI and Google API formats.

+ ML-powered JSON API Discovery

Shadow and zombie APIs are major threats for application defenders. Barracuda Application Protection uses machine learning to detect these API endpoints from live traffic analysis and automatically secures them.

+ Unlimited API Rate-Limiting rules (Tarpit)

Barracuda Application Protection offers rate limiting capabilities for APIs that can be enforced on an endpoint level, reducing the ability of misbehaving clients to slow down or bring down an API.

Advanced Bot Protection

- Bot Protection – Web Scraping and Spam detection

Barracuda Application Protection uses a combination of honeypots, behavioral analysis, and signatures to detect and block web scraping and bot spam.

+ Bot Signature Database

Barracuda Application Protection contains a regularly updated bot signature database that contains over 10,000 individual signatures. These signatures can be used to identify and block bots before they reach your application.

+ Active Threat Intelligence

Barracuda Active Threat Intelligence collects threat data from a widespread network of sensors and customer traffic. This data is processed using machine learning in near-real time and pushed out to connected units immediately.

+ CAPTCHA Insertion and Challenges

Barracuda Application Protection has multiple methods of challenging bots and attackers, including JavaScript challenges and CAPTCHAs.

+ Brute Force Prevention

Barracuda Application Protection can identify and block brute force attacks that attempt to identify login credentials or hidden parts of an application.

+ Credential Stuffing Protection

Barracuda Active Threat Intelligence uses a database of previously leaked credentials to validate logins against, blocking attempts if matches are found and alerting admins.

+ Privileged Account Protection

Privileged Account Protection on Barracuda Active Threat Intelligence uses behavioral analytics to detect unusual user behavior patterns.

+ Machine Learning-powered Bot Detection

Barracuda Advanced Bot Protection uses cloud-based machine learning to stop bad bots and protect against various forms of attacks.

+ Client Identification and Control

Barracuda Application Protection can identify individual devices behind an IP address, allowing for more precise blocking strategies.

Secure Application Delivery

- Content Delivery Network

Barracuda Application Protection provides an integrated CDN with over 118 PoPs worldwide.

+ Authentication, Authorization and Access Control

Offers granular AAA capabilities to offload authentication and authorization for applications.

+ Integrated ZTNA

Barracuda CloudGen Access is included to provide secure access control for internal applications.

+ Load Balancing with Server Health Monitoring

Configurable server setups with continuous monitoring to improve uptime.

+ Content Routing

Content Routing identifies and redirects traffic based on incoming request parameters.

+ Containerized Deployment

Barracuda Application Protection provides a deployment module to secure microservices and containerized applications.

Automation, Reporting, Analytics, and Services

- Log Export to SIEM

Allows all application logs to be exported to external SIEM solutions for analysis.

+ Advanced Reporting and Visualization

Barracuda Active Threat Intelligence Dashboard provides visibility into traffic patterns and client types visiting your website.

+ Auto Configuration Engine

Auto Configuration Engine reviews traffic and provides application-specific configuration recommendations.

+ Virtual Patching and Scanner Integration

Advanced vulnerability scanner monitors deployments for vulnerabilities and can remediate them automatically.

+ Configuration API

All capabilities on the product can be configured using the Configuration API.

+ Configuration Snapshots

All configuration changes are stored as JSON snapshots.