Barracuda CloudGen Firewall vs. ContentProtect

I would say a small business with a basic firewall and security needs would be a perfect fit for the Barracuda CloudGen firewall. I know that they soon end up leaving the NG models and are moving forward with the F series firewall. I think the F series is a much more difficult to manage device and doesn’t offer simplistic configuration or use and lacks cloud control so I don’t understand the move on Barracuda’s part to nix a great easy to manage the firewall. I do think that the NG line is maybe too simple for bigger businesses and would lack some main features that they would require.

Incentivized

If you are looking for something relatively inexpensive to lock down specific computers, it would be a useful tool. If the computers themselves aren't too locked down, implementation and management shouldn't be too difficult.

Incentivized

• The management software is excellent. It make it much easier to manage the firewalls than some of the other vendors.
• Watching real-time traffic is easy to do when trying to troubleshoot a users issues getting to a particular service.
• Support from Barracuda has been excellent. We rate their phone and online remote support as being the best in the business.
• We like the QoS and Traffic shaping of the NG Firewalls. They help is manage our limited bandwidth, so that business critical resources are available over lesser critical resources.
• Integration with Active Directory makes it easy to identify users activities in logs.

Incentivized

• The client is relatively light weight and doesn't impact other applications.
• The client isn't easily bypassed, so the user's are kept under restrictions.
• The configuration is relatively simple and easy to deploy.

Incentivized

• Very complex and steep learning curve to get up to speed.
• Multiple ways to configure for the same service or feature. Takes time to determine "your" customized build.
• Interface can sometimes be clunky when trying to determine how it's organized or arranged. Again, steep learning curve.

• Our primary policy is a restricted list, so that does as advertised. We had one location that had blocks based on categories (adult, illegal, etc). We continually had issues with sites getting completely blocked due to unrelated content. For example, Yahoo had a beer ad on the page, alcohol was blocked, so Yahoo became blocked for the period of time that ad was displayed. We had this happen multiple times and eventually switched to a different solution at that location.
• I've had issues with their cloud portal not working. I don't have to edit our configuration often, but on numerous occasions, i was unable to get the configuration page to load after login, sometimes for days. The platform just wasn't stable when I needed it to be.
• We run many of our remote rooms as frozen (after logoff they reset to the image). This works fine most times, but when content protect needs a configuration change pushed down, someone needs to go 'thaw' the computers, download the updated configuration, and re-'freeze' the computer. It would be nice if that information was just dynamic from the cloud and didn't need to be pulled down.
• The categorization used for policies is very limited and not flexible or easily customizable.
• I could never get the usage reporting to work.

Incentivized

Easy enough to use and configure using the management UI. Reporting from the web filter is a little clunky, and not very user friendly. To be perfectly honest, once it's set up and running, there isn't a lot to do from the day-to-day side of things, which is not a bad thing.

I could go on and on about how good Barracuda's support really is. I have yet to have a problem they didn't help me fix and I always learn something when talking with them. The story that best describes my overall experience with Barracuda's support is this: When I first put in the xSeries they had a problem with a policy route. There was a bug in the code and in the one situation I was it, it just would not work. I went up the levels of support and they couldn't fix it. Well, next thing I know I am on the phone with 2 of the guys that programmed the thing and they work out the solution in no time and get me going. That is support. That is what I have come to expect from Barracuda. If the tech on the phone doesn't know the answer, they do not stop until they find it. Grant it, I also have to admit I do not call support with every problem, I try to work it out on my own first as that is how I learn best, so when I do call support it is going to be complicated.

Incentivized

Our Cisco firewall was always difficult to make any changes against. It had no user-friendly GUI interface. We were calling technical support most of the time whenever we needed to make any changes. The Barracuda CloudGen Firewall has a GUI interface which we are looking forward to getting better acquainted with as we move off of our old Cisco. Of course, Barracuda's technical support is always there and is top notch!

At the time ContentProtect was selected, Forcepoint (Websense at the time) didn't have an inexpensive or cloud type product. The same can be said with Cisco, at that time. Recently, we have reevaluated and are going to be transitioning to Forcepoint's mobile client and removing ContentProtect from our environment. The cost is actually now less and we will be able to get both more dynamic control and also give us more detailed reporting on the traffic from clients.

Incentivized

• We saved multiple thousands of dollars the first year out with the firewall in maintenance fees. We paid for the firewall and 3 years of service and still saved money.
• The ease of management allows me to do my job more efficiently. I save a lot of time when doing my day to day job because I can get to my firewall virtually anywhere.
• I feel a lot safer and my business more secure knowing that I have configured things the way they need to be and it was simple and not overly complicated.

Incentivized

• It was a relatively inexpensive and simple solution when we needed one relatively quickly, which is a positive. The inexpensive price has kept it in the environment.
• The lack of reliable reporting has lead to the need for an alternate monitoring solution in a few cases. Network level reporting was used, which is a separate expense, configuration.
• Time has been lost waiting on the portal and then troubleshooting support tickets when sites that shouldn't have been blocked have been blocked. It has resulted in changes for locations that needed dynamic category filtering as opposed to a finite list.
• The blocking of sites based on add traffic or sub-sites (rather than just blocking that content like other solutions) has resulted in downtime during classes when those sites were listed in the lesson plan and had previously worked.

Incentivized