Sold by: Barracuda Networks
Deployed on AWS
Free Trial
Barracuda CloudGen Firewall for AWS provides SD-WAN to AWS and security to your public cloud deployments. Connect remote VPCs, datacentres, offices and mobile workers while providing user and app-aware segmentation with strong access controls and full visibility of your network traffic.
4.3
Overview
The Barracuda CloudGen Firewall is a purpose-built Cloud Generation Firewall engineered for rapid deployment and operation within dispersed, highly dynamic, and security-critical network environments on AWS. As an AWS Security Competency certified solution, it allows customers to offer secure remote access, secure office-to-cloud connectivity, and cloud network segmentation. The Barracuda CloudGen Firewall also enables branch office direct internet schemes.
Beyond its powerful network firewall, IPS, and VPN technologies, the CloudGen Firewall integrates an extensive set of next generation firewall technologies including comprehensive application control, availability, and traffic flow optimization across the wide area network, web filtering, antivirus, and network access control enforcement
Note: Download the standalone Windows management application Firewall Admin from Barracuda Download portal (https://dlportal.barracudanetworks.com ) to administer your CloudGen Firewall. PAYG licenses are targeted at cloud-on ramp with SD-WAN and network segmentation based use cases and don't include Anti-Virus or Advanced Threat protection. Please use the BYOL version if the latter are required.
Highlights
- Secure Remote Access: Built-in state-of-the-art SD-WAN engine combines multiple remote access and WAN opt technologies to offer optimized and secure access to cloud resources for office and mobile users using any type of device.
- Granular Traffic Control and Visibility: Enterprise-grade firewalling allows segmentation and full visibility of network traffic within VPC and between locations based on application, static or dynamic ports, user identity and many others.
- Comprehensive Threat Protection: Integrated IPS engine provides complete and comprehensive real-time network protection against a broad range of network threats.
Details
Sold by
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux 9.0.6-0250
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
c5n.large Recommended | $1.10 |
t3.medium | $1.10 |
c6a.12xlarge | $3.40 |
t2.2xlarge | $2.86 |
c5n.4xlarge | $5.72 |
c6in.8xlarge | $3.40 |
t2.medium | $1.10 |
c6in.large | $0.95 |
c7i.large | $0.95 |
c7i.8xlarge | $3.40 |
Vendor refund policy
Terminate the instance at any time to stop incurring charges.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
Use the Windows management tool Barracuda Firewall Admin available from the Barracuda Download Portal to connect. The username is "root" and default password is the instance ID. For more information visit https://campus.barracuda.com/doc/170821021/
Resources
Support
Vendor support
Email and Phone Support offered 24x7 without any phone trees. You will actually speak to a live person. Please have your AWS Account ID available when you contact Barracuda Support. Support Phone Numbers:North America - 408 342 5300 Europe - +44 (0) 1256 300 102 Australia - +612 8019 7254 China - +86 400 720 8200 Japan - +81 3 5436 6236 India - +91 804 904 8600 Germany, Austria, Switzerland - +43 (0) 508 100 800 Website:https://www.barracuda.com/support E-mail:support@barracuda.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Barracuda Networks
By Check Point Software Technologies
By Juniper Networks
Top
10
In Device Connectivity
Top
10
In Log Analysis, Network Infrastructure
Top
10
In Migration
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Software-Defined WAN (SD-WAN) Engine
Built-in SD-WAN engine combining multiple remote access and WAN optimization technologies for secure access to cloud resources across office and mobile users.
Intrusion Prevention System (IPS)
Integrated IPS engine providing real-time network protection against a broad range of network threats.
Application-Based Traffic Control
Enterprise-grade firewalling with application-aware segmentation and traffic control based on application identity, ports, and user identity.
Network Access Control
Network access control enforcement capabilities for enforcing security policies across dispersed network environments.
VPN and Secure Connectivity
VPN technologies enabling secure remote access, secure office-to-cloud connectivity, and cloud network segmentation with support for branch office direct internet schemes.
Advanced Threat Prevention Capabilities
Includes firewall, Data Loss Prevention (DLP), Intrusion Prevention System (IPS), application control, IPsec VPN, URL filtering, antivirus, and anti-bot features for multi-layered network security.
Traffic Inspection and Control
Inspects and controls encrypted data flows between on-premises networks and AWS VPCs, including North-South traffic entering and exiting private subnets and East-West traffic between VPCs.
Infrastructure-as-Code Integration
Integrates with infrastructure-as-code tools including Terraform and Ansible for policy automation, with dynamic security policy adaptation based on real-time cloud metadata.
AWS Service Integration
Supports integration with Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, AWS Transit Gateway, AWS Outposts, and Amazon Macie.
Centralized Security Management
Provides unified, centralized management through Check Point Security Management Server with consistent policy, logging, and reporting across AWS, hybrid, and on-premises environments.
Intrusion Detection and Prevention
Intrusion detection and prevention (IPS) capabilities for threat detection and mitigation
Application Security and Visibility
Application visibility and control through AppSecure with L4-L7 security services
VPN and Secure Connectivity
IPsec and full mesh VPN termination services for secure connectivity across on-premises data centers, campuses, branches, and geographically dispersed VPCs
Cloud-Native Integration
Integration with AWS services including Elastic Load Balancer, Auto-Scaling Groups, CloudWatch, Security Hub, Key Management Service, and Gateway Load Balancer (GWLB) with L3 gateway and L4 load balancer capabilities
Advanced Routing and Network Services
Cloud-grade routing capabilities with NAT, firewall, and network address translation services
Standard contract
No
No
No
Customer reviews
Pavan Ingaleshwar
Secure branch connectivity has improved and traffic management now keeps business apps responsive
Reviewed on Apr 21, 2026
Review provided by PeerSpot
What is our primary use case?
My main use case with Barracuda CloudGen Firewall is securing branch offices with remote users and hybrid environments while maintaining stable connectivity. I used it for firewall perimeter security and site-to-site VPN between offices and remote users' VPN access, as well as for intrusion prevention and web filtering, and SD-WAN for branch connectivity and traffic visibility and control.
I mainly use Barracuda CloudGen Firewall for managing VPN users, monitoring branch office connectivity, and reviewing blocked traffic logs. I also handle web access control, IPS alerts review, and traffic prioritization.
What is most valuable?
The best feature of Barracuda CloudGen Firewall is its SD-WAN capability because it helps optimize branch connectivity, along with strong VPN and multi-site connectivity. It is very useful for multiple offices and remote users. Traffic and bandwidth control are also important, especially when business applications need priority. Security services being in one platform includes firewall, IPS, filtering, and VPN. The hybrid cloud feature works well with mixed on-premises and cloud environments. To me, the most valuable feature is VPN and branch connectivity management because it offers secure access across multiple offices and remote user teams.
The VPN and branch connectivity management features make my work easier by connecting branch offices and the head office, along with cloud resources over time. For example, currently, one of my biggest clients has their head office in Bangalore and branch offices in Mumbai, Hyderabad, and Pune, with users working remotely from home. They share ERP and a file server in the head office or Azure cloud, so instead of using one internet access between the offices, Barracuda CloudGen Firewall creates an encrypted VPN tunnel between these locations, such as from the Mumbai office to the Bangalore office and Hyderabad office to Bangalore office. Remote users connect securely to the computer network.
When branch offices face unstable internet connectivity and users complain that business applications are slow, I review the traffic through Barracuda CloudGen Firewall. I identified the bandwidth and heavy non-business traffic that affects critical applications. I also use traffic shaping policy control and prioritize business applications and VPN traffic, which improved performance quickly without requiring new hardware or extra internet service provider changes. The logs also help confirm the malicious traffic causing the issue.
What needs improvement?
Improvement areas for Barracuda CloudGen Firewall include addressing advanced setup complexity and needing in-depth documentation. Some advanced scenarios require clear examples, so they need to work more on documentation. Initial deployment also takes time, so if they address the initial deployment aspect, that advanced setup complexity would be another important area to improve.
For how long have I used the solution?
I worked with Barracuda CloudGen Firewall for approximately one and a half years, mainly from a network security and branch connectivity perspective.
What do I think about the stability of the solution?
Barracuda CloudGen Firewall offers very good stability.
What do I think about the scalability of the solution?
Its scalability is high, making it suitable for SMB, mid-size businesses, and distributed branch connectivity environments.
How are customer service and support?
The customer support for Barracuda CloudGen Firewall is good. I would rate customer support at seven point five out of ten.
Which solution did I use previously and why did I switch?
I previously used basic firewalls with separate VPN solutions before switching to Barracuda CloudGen Firewall.
How was the initial setup?
Initial deployment takes time, so if they address the initial deployment aspect, that advanced setup complexity would be another important area to improve.
What was our ROI?
For return on investment, if an organization has more than one office, they should consider this solution because it significantly improves branch productivity and reduces connectivity issues, providing strong, secure remote access. These are the main three points for return on investment that I have noticed.
What's my experience with pricing, setup cost, and licensing?
Overall, the pricing for Barracuda CloudGen Firewall is mid to premium depending on size, bandwidth, and security subscriptions.
Which other solutions did I evaluate?
Before choosing Barracuda CloudGen Firewall, I evaluated other options, including Fortinet FortiGate , SonicWall, Cisco Meraki, and WatchGuard Firebox .
What other advice do I have?
I had one branch where users reported that application access was slow. I checked the traffic and found bandwidth overused by streaming traffic, applied policy control, and prioritized VPN and business application traffic. The users saw an improvement on the same day. Overall, Barracuda CloudGen Firewall helped us securely connect with branch offices and remote users through encrypted VPN tunnels while managing bandwidth and failover links to keep business applications stable.
Since I started using Barracuda CloudGen Firewall, I have noticed stable branch connectivity, better secure remote access, and faster troubleshooting of network issues, along with reduced downtime for WAN issues and improved security visibility across offices. It provides better control of internet traffic. Regarding reduced downtime for WAN issues, it is around thirty to forty percent according to my experience.
For organizations considering Barracuda CloudGen Firewall, it is essential to evaluate not just firewall security but also WAN optimization and VPN experiences if they have multiple offices or remote users. Barracuda CloudGen Firewall is a very practical choice for organizations requiring both security and reliable branch connectivity. It is very useful where networking and security teams need one platform. I give this solution a rating of eight out of ten.
Tej D.
Impressive Automation and Easy Cloud Integration with Deep Threat Protection
Reviewed on Mar 20, 2026
Review provided by G2
What do you like best about the product?
Its automation feature is very impressive. Integration in the cloud is very easy. Central management system with deep threat protection.
What do you dislike about the product?
All the things are nice features are also good, but it is costly. and the learning curve is steep.
What problems is the product solving and how is that benefiting you?
Cybersecurity. Packet tracing and log monitoring. Threat detection.
Mariusz Banasiak
Security has protected our data centers but support gaps and limited expertise remain challenging
Reviewed on Feb 24, 2026
Review provided by PeerSpot
What is our primary use case?
Barracuda CloudGen Firewall is used to protect data in two data centers, including headquarters and data center H5O.
What is most valuable?
I am using calls functionality from DLP forwarding calls and SSL inspection in Barracuda CloudGen Firewall , and all of those are necessary to be used. I cannot qualify which is more important than others, but it is a complete product, and I am using all features.
What needs improvement?
I don't know about the centralized management console for managing policies in Barracuda CloudGen Firewall. We are not using it, and I don't know what that is. My vendor didn't provide me information about such a feature.
There are a lot of functionalities already present, but the problem is whether there is knowledge about the functionalities or stability.
Barracuda can make improvements for the next generation firewall product. In general, it is a very rare product in our market. More training and more learning for customers on how to use these products are needed. We are suffering from a lack of engineers in our market, so I am considering changing the product to a more popular one because it is not easy to recommend Barracuda, even this great product, but nobody uses it in Poland, and it is not easy to do anything. I know just one company which is supporting us.
Concerning the effectiveness of the filtering capabilities in Barracuda CloudGen Firewall, it happens sometimes that the classifications are misleading with wrong categorizations of what they use into the games or something into categories when it is definitely not in the category. I don't know from what reasons, but maybe it could be adjusted.
For how long have I used the solution?
I have been working with Barracuda CloudGen Firewall since 2016 in one location, and in the second one, it has been three years.
What do I think about the stability of the solution?
For stability, I would rate the next generation firewall stability of the product an eight.
What do I think about the scalability of the solution?
Regarding scalability and the ability to scale and expand with Barracuda CloudGen Firewall, there is no issue, so I would rate it a ten.
How are customer service and support?
I would rate the technical support for Barracuda CloudGen Firewall a six, as in the past, it was definitely better, but recently it has not been as good.
Which solution did I use previously and why did I switch?
I compared Barracuda CloudGen Firewall mainly with FortiGate.
How was the initial setup?
For the initial setup of Barracuda CloudGen Firewall, it was a bit more complex than simple; I would rate it at six on a scale from one to ten.
What about the implementation team?
I used a third-party company for the integration and setup of Barracuda CloudGen Firewall. I have some knowledge about the product and in-house capability, but I am relying on the third-party company for the purposes of integrations and new products.
Which other solutions did I evaluate?
The key reason I chose Barracuda over FortiGate is that I have been using Barracuda since 2016 or even 2015, and I am just used to it. It is stable, it is working, and there are no issues. However, to develop and use new features, I am lacking specialists, which is why it is not easy to expand with Barracuda CloudGen Firewall.
What other advice do I have?
I do not use the SD WAN capabilities of Barracuda CloudGen Firewall.
Threat protection feature in Barracuda CloudGen Firewall is working. I have not had much experience with other products, so I didn't support any issues with that module. It is working just fine.
I was a long-time strong fan of this product, but unfortunately, I will change the vendor for another one. Therefore, I cannot recommend it. If someone can set up things in-house with specialists, then it is quite a good product. There are not so many critical incidents, but probably mostly because it is not so popular. The pain point for me is support. In general, with a small scale, I was able to manage it myself, but with a wider scale, it is not possible to rely on in-house specialists, and there is no specialist available on the market. I would give this review an overall rating of seven.
Phakedi Mphela
Optimizes bandwidth with SD-WAN and threat protection but needs faster support and automation
Reviewed on Feb 24, 2026
Review provided by PeerSpot
How has it helped my organization?
Barracuda CloudGen Firewall SD-WAN capabilities have helped optimize our customers' bandwidth usage significantly because we are moving from MPLS to SD-WAN.
What is most valuable?
The most valuable features in Barracuda CloudGen Firewall are the functionality of DPI and IDS, ATP, and we also use it in an SD-WAN operation as well, so it works well in the SD-WAN feature.
In terms of our routing and VPN capabilities, Barracuda CloudGen Firewall performs well.
The threat protection features of Barracuda CloudGen Firewall are good, and I appreciate their reporting capabilities. It is a very good tool to have, especially when you are using IDS and IPS to block SQL injection, buffer overflow attacks, and similar threats in real-time.
We use the cloud centralized management console for managing security policies.
What needs improvement?
There is room for improvement in terms of response time and first-level support quality.
Barracuda CloudGen Firewall needs to learn from FortiManager and Palo Alto, as I see that they have automation and their reporting is easier to generate compared to Barracuda CloudGen Firewall.
I would like to see built-in endpoint integration in the next release of Barracuda CloudGen Firewall, including EDR. They need to improve or at least have an AI-assisted traffic analyzer alert. Their support can be improved as well.
What do I think about the stability of the solution?
We have not had any issues while integrating Barracuda CloudGen Firewall with third-party solutions because the professional support was really helpful with the integration.
How are customer service and support?
I rate the technical support by Barracuda a four out of ten.
How was the initial setup?
The initial setup for Barracuda CloudGen Firewall is quite easy.
What about the implementation team?
The integration of Barracuda CloudGen Firewall with other products is good because we required assistance and professional help from the Barracuda team to come and help us, which was beneficial.
We have not had any issues while integrating Barracuda CloudGen Firewall with third-party solutions because the professional support was really helpful with the process.
Which other solutions did I evaluate?
The pricing for Barracuda CloudGen Firewall is a bit pricey compared to Palo Alto or Fortinet.
Jennifer Bernice
Centralized firewall management has saved time and improved network security across locations
Reviewed on Feb 20, 2026
Review from a verified AWS customer
What is our primary use case?
My main use case for Barracuda CloudGen Firewall is to secure our company's main and backup internet connections, and we also use it for failover of our main internet to our backup. We recently replaced a WatchGuard Firebox with this firewall because the cost of maintenance was high on the WatchGuard, and the management of Barracuda CloudGen Firewall was much simpler and could be done without a locally installed client.
You can manage Barracuda CloudGen Firewall from anywhere with Barracuda Cloud Control, even running firmware updates from your phone on all your Barracuda devices. It makes my job so much easier.
A specific situation where Barracuda CloudGen Firewall helped me manage my internet connections and made my job easier is when we switched to Barracuda CloudGen Firewall model F400. Coming from an older command line managed firewall, the F400 has made management of our firewalls much easier, and it is our primary firewall solution.
We use Barracuda CloudGen Firewall to watch real-time traffic, which is easy to do when trying to troubleshoot user issues getting to a particular service. Ease of management is a significant advantage. You can remotely manage it from anywhere with cloud control.
What is most valuable?
The best features Barracuda CloudGen Firewall offers include extreme customization for any environment and support for all configuration with firewall rules. Security features such as hardware-level antivirus and advanced threat protection, as well as SSL inspection, ensure all traffic passes through the appliance.
Control Center is far superior to other products for globally managing numerous firewalls and creating and deploying templates on the fly.
These features have improved security and prevented any cybersecurity threats before they attack our system, making things easier for my team day-to-day.
The VPN connections have never been easier. Once configured within Control Center, drag and drop is all that is needed to connect to internet-connected firewalls easily.
Barracuda CloudGen Firewall has positively impacted my organization by allowing us to control the entire network from one location, hence saving a lot of time from moving from one location to another. All services and processes work very well and are reliable, with high uptime.
For MSPs looking to deploy and control numerous firewalls with ease, this is the best product available.
Since switching to Barracuda CloudGen Firewall, we have saved time of 30 to 40 percent because we are able to control the network from one location. We have also saved costs of 20 percent because we do not have to move from one location to another to control the network.
What needs improvement?
Barracuda CloudGen Firewall could be improved as it has a very high learning curve. It is definitely not a one and done firewall, as a one and done firewall requires a lot of dedicated time to get the machine running the way you want.
To improve Barracuda CloudGen Firewall, there should be a lot of tutorials and videos online to help new users. Multiple ways to configure for the same service or feature takes time to determine your customized build.
In addition to previous points, the interface can sometimes be clunky when trying to determine how it is organized or arranged.
For how long have I used the solution?
I have been using Barracuda CloudGen Firewall for the past three and a half years.
What do I think about the stability of the solution?
Barracuda CloudGen Firewall is very stable.
What do I think about the scalability of the solution?
Barracuda CloudGen Firewall is highly scalable and grows with my organization's needs.
How are customer service and support?
For the few times that I have been able to reach out to customer support, they have been proactive and supportive.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
Before Barracuda CloudGen Firewall, I previously used SonicWall.
How was the initial setup?
My experience with pricing, setup cost, and licensing is that the cost was effective and affordable.
What was our ROI?
I have seen a return on investment with Barracuda CloudGen Firewall, as it makes our environment more secure through the robust security features it offers. It has drastically reduced the amount of infections from cybersecurity threats and makes managing close to 50 clients or more for our engineers much easier, hence saving a lot of time and cost.
Which other solutions did I evaluate?
Before choosing Barracuda CloudGen Firewall, I evaluated WatchGuard as another option.
What other advice do I have?
I deduct those two points because it has a very complex and steep learning curve to get started, but it is very highly customizable and can control the entire network from one location. That is what makes it receive a rating of eight, hence saving time and cost.
The security features such as hardware-level antivirus and advanced threat protection, as well as SSL inspection, ensure all traffic passes through the appliance to increase security and prevent cybersecurity threats on time.
Barracuda CloudGen Firewall is deployed in my organization using a hybrid cloud setup.
We purchased Barracuda CloudGen Firewall through the AWS Marketplace .
We do utilize the advanced threat features to provide the first layer for virus through malware detection and prevention before the traffic ever gets to the antivirus software that is used on each workstation.
My advice for others looking into using Barracuda CloudGen Firewall is that anyone that has a business or stores client's data must have a next-generation firewall with zero exemptions. If you have multiple sites, configuring a VPN between them takes less than a minute to configure. These devices have many more features than their competitors but often cost less. Barracuda CloudGen Firewall is very cost-effective, and I highly recommend it. I rate Barracuda CloudGen Firewall an eight out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud