WAF01002 - On-premise Deployment

WAF01002 - On-premise Deployment

Sizing and Licensing

Training Video Transcript

Welcome, my name is Christoph and I am a technical trainer at Barracuda Campus. In this video, you will learn
about sizing and licensing of both physical and virtual Barracuda Web Application Firewalls.

© Barracuda Networks Inc., Revision: 7/14/2022 1

 WAF01002 - On-premise Deployment

Hardware Sizing

Throughput
1060

960 All features

860

660

460 Restricted features

360

Capacity

Training Video Transcript

When it comes to choosing the right hardware model, there are four factors you should keep in mind. They are
the throughput, the capacity that your web application requires, the number of backend servers you want to
address, and the features that your web application requires.

Generally, you can say the higher the model number is, the higher the capacity of the WAF is.

This means the higher the model number, the more cores and RAM there will be, which of course also increases
the throughput and the number of sessions it can handle simultaneously. The higher the model number, the
more backend servers are supported by the WAF.
The feature set is another critical point when choosing the right model, as the smallest models do not support
the full feature set.

Model 360 and 460, for example, do not support virus scans for file upload. Starting from model 660, the full
feature set is supported.

The difference between these appliances is mainly the capacity they can handle. So the higher the appliance
model, the more RAM and CPUs it will have. In addition, the larger models have more Ethernet interfaces, and
some of them also support multiport or fiber ports.

© Barracuda Networks Inc., Revision: 7/14/2022 2

 WAF01002 - On-premise Deployment

VX Sizing

Throughput

V960

V860 All features

V760

V660

V460 Restricted features

V360

Capacity

Training Video Transcript

The sizing of Virtual WAFs is very similar to hardware appliances:

generally, the higher the model number, the higher the capacity and throughput.

So again, the V360 and V460 offer only a restricted feature set.

The V660 offers the full feature set and is only limited by the number of cores it has. If you require additional
throughput or additional capacity, you need to purchase a license of a larger model.

© Barracuda Networks Inc., Revision: 7/14/2022 3

 WAF01002 - On-premise Deployment

Virtual Deployment
Requires a 64-bit-capable host
Image Type Supported Hypervisors
• VMware ESX and ESXi (vSphere Hypervisor) versions 4+
OVF
• Sun/Oracle VirtualBox and VirtualBox OSE version 3+
• VMware Server 2.x
VMX
• VMware Workstation 6+, Player 3+, and Fusion 3+
XVA • Citrix XenServer 5.5+

VHD • Microsoft Hyper-V

QCOW2 • Kernel-based Virtual Machine (KVM, Nutanix)

Training Video Transcript

If you want to deploy the Barracuda WAF in a virtual environment, we also support different image types that are
available for the most common platforms. The only prerequisite is that the hosts are 64-bit capable.

And of course the host should have enough capacity left for the VMs.
OVF images are supported by VMware ESX and ESXi starting from version 4 and also by Sun/Oracle’s VirtualBox
starting from version 3.
Barracuda also offers VMX images for VMware Server and VMware Workstation as well as VMWare Player and
Fusion.
XVA is available for Citrix XenServer starting from version 5.5.
And Microsoft Hyper-V is supported by VHD images. The WAF can also be deployed on Kernel-based virtual
machines such as KVM or Nutanix with the QCOWD2 format.

© Barracuda Networks Inc., Revision: 7/14/2022 4

 WAF01002 - On-premise Deployment

Virtual & On-Prem Licensing

• Physical Appliances
– Automatic activation
– Can be manually triggered if it
fails
• Virtual Machines
– Open the VM console
– Enter the license token
– Configure the default domain
– Can be re-provisioned

WAF

Training Video Transcript

Licensing works according to the platform you have chosen. If you have a physical appliance↓, the license will be
activated automatically and is tied to the serial number of the WAF. If it fails, you can trigger license activation
again manually.
If you have deployed a virtual WAF,

you have to enter the license token via the VM console and also provide the default domain.
For both license types, physical and virtual, you need to ensure that the VM has access to the internet, so that the
machines can report back to Barracuda and validate the license.

When using a virtual appliance and you find you require more CPUs or RAM, you can easily re-provision the
appliance to a larger model by purchasing the license and then entering the new license token.

© Barracuda Networks Inc., Revision: 7/14/2022 5

 WAF01002 - On-premise Deployment

Thank You

Training Video Transcript

Thanks for watching!

© Barracuda Networks Inc., Revision: 7/14/2022 6