Sold by: Barracuda Networks
Deployed on AWS
Free Trial
Barracuda CloudGen Firewall for AWS provides SD-WAN to AWS and security to your public cloud deployments. Connect remote VPCs, datacentres, offices and mobile workers while providing user and app-aware segmentation with strong access controls and full visibility of your network traffic.
4.4
Overview
The Barracuda CloudGen Firewall is a purpose-built Cloud Generation Firewall engineered for rapid deployment and operation within dispersed, highly dynamic, and security-critical network environments on AWS. As an AWS Security Competency certified solution, it allows customers to offer secure remote access, secure office-to-cloud connectivity, and cloud network segmentation. The Barracuda CloudGen Firewall also enables branch office direct internet schemes.
Beyond its powerful network firewall, IPS, and VPN technologies, the CloudGen Firewall integrates an extensive set of next generation firewall technologies including comprehensive application control, availability, and traffic flow optimization across the wide area network, web filtering, antivirus, and network access control enforcement
Note: Download the standalone Windows management application Firewall Admin from Barracuda Download portal (https://dlportal.barracudanetworks.com ) to administer your CloudGen Firewall. PAYG licenses are targeted at cloud-on ramp with SD-WAN and network segmentation based use cases and don't include Anti-Virus or Advanced Threat protection. Please use the BYOL version if the latter are required.
Highlights
- Secure Remote Access: Built-in state-of-the-art SD-WAN engine combines multiple remote access and WAN opt technologies to offer optimized and secure access to cloud resources for office and mobile users using any type of device.
- Granular Traffic Control and Visibility: Enterprise-grade firewalling allows segmentation and full visibility of network traffic within VPC and between locations based on application, static or dynamic ports, user identity and many others.
- Comprehensive Threat Protection: Integrated IPS engine provides complete and comprehensive real-time network protection against a broad range of network threats.
Details
Sold by
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux 9.0.6-0250
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
c5n.large Recommended | $1.10 |
t3.medium | $1.10 |
c6a.12xlarge | $3.40 |
t2.2xlarge | $2.86 |
c5n.4xlarge | $5.72 |
c6in.8xlarge | $3.40 |
t2.medium | $1.10 |
c6in.large | $0.95 |
c7i.large | $0.95 |
c7i.8xlarge | $3.40 |
Vendor refund policy
Terminate the instance at any time to stop incurring charges.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
Use the Windows management tool Barracuda Firewall Admin available from the Barracuda Download Portal to connect. The username is "root" and default password is the instance ID. For more information visit https://campus.barracuda.com/doc/170821021/
Resources
Support
Vendor support
Email and Phone Support offered 24x7 without any phone trees. You will actually speak to a live person. Please have your AWS Account ID available when you contact Barracuda Support. Support Phone Numbers:North America - 408 342 5300 Europe - +44 (0) 1256 300 102 Australia - +612 8019 7254 China - +86 400 720 8200 Japan - +81 3 5436 6236 India - +91 804 904 8600 Germany, Austria, Switzerland - +43 (0) 508 100 800 Website:https://www.barracuda.com/support E-mail:support@barracuda.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Barracuda Networks
By Check Point Software Technologies
By Juniper Networks
Top
10
In Device Connectivity
Top
10
In Log Analysis, Network Infrastructure
Top
10
In Migration
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Software-Defined WAN (SD-WAN) Engine
Built-in SD-WAN engine combining multiple remote access and WAN optimization technologies for secure access to cloud resources across office and mobile users.
Intrusion Prevention System (IPS)
Integrated IPS engine providing real-time network protection against a broad range of network threats.
Application-Based Traffic Control
Enterprise-grade firewalling with application-aware segmentation and traffic control based on application identity, ports, and user identity.
Network Access Control
Network access control enforcement capabilities for enforcing security policies across dispersed network environments.
VPN and Secure Connectivity
VPN technologies enabling secure remote access, secure office-to-cloud connectivity, and cloud network segmentation with support for branch office direct internet schemes.
Advanced Threat Prevention Capabilities
Includes firewall, Data Loss Prevention (DLP), Intrusion Prevention System (IPS), application control, IPsec VPN, URL filtering, antivirus, and anti-bot features for multi-layered network security.
Traffic Inspection and Control
Inspects and controls encrypted data flows between on-premises networks and AWS VPCs, including North-South traffic entering and exiting private subnets and East-West traffic between VPCs.
Infrastructure-as-Code Integration
Integrates with infrastructure-as-code tools including Terraform and Ansible for policy automation, with dynamic security policy adaptation based on real-time cloud metadata.
AWS Service Integration
Supports integration with Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, AWS Transit Gateway, AWS Outposts, and Amazon Macie.
Centralized Security Management
Provides unified, centralized management through Check Point Security Management Server with consistent policy, logging, and reporting across AWS, hybrid, and on-premises environments.
Intrusion Detection and Prevention
Intrusion detection and prevention (IPS) capabilities for threat detection and mitigation
Application Security and Visibility
Application visibility and control through AppSecure with L4-L7 security services
VPN and Secure Connectivity
IPsec and full mesh VPN termination services for secure connectivity across on-premises data centers, campuses, branches, and geographically dispersed VPCs
Cloud-Native Integration
Integration with AWS services including Elastic Load Balancer, Auto-Scaling Groups, CloudWatch, Security Hub, Key Management Service, and Gateway Load Balancer (GWLB) with L3 gateway and L4 load balancer capabilities
Advanced Routing and Network Services
Cloud-grade routing capabilities with NAT, firewall, and network address translation services
Standard contract
No
No
No
Customer reviews
Paul M.
Enterprise-Level Firewall at a Great Value, with Unmatched Barracuda Support
Reviewed on May 13, 2026
Review provided by G2
What do you like best about the product?
It is an enterprise level firewall at less than an enterprise cost. I would put them next to Cisco or Juniper any day. They are functional, reliable, quick, and the support from Barracuda is second to NONE.
What do you dislike about the product?
Nothing. I mean they could cost less, but you get what you pay for at the end of the day and when you are protecting a company from people doing things they shouldn't have to do, cost starts to become not as relevant.
What problems is the product solving and how is that benefiting you?
It is securing internet access for our whole agency. We use small firewalls at small facilities to build VPN tunnels back to the main facility. The original problem it solved was an inherent ACL in a Cisco ASA that I needed around for a specific purpose and Cisco was unwilling to do anything to make it work. Barracuda, I could do it out of the box... and that was the old X series firewalls. The cloudgens are light years ahead of them when they stopped making the X's.
Tej D.
Impressive Automation and Easy Cloud Integration with Deep Threat Protection
Reviewed on Mar 20, 2026
Review provided by G2
What do you like best about the product?
Its automation feature is very impressive. Integration in the cloud is very easy. Central management system with deep threat protection.
What do you dislike about the product?
All the things are nice features are also good, but it is costly. and the learning curve is steep.
What problems is the product solving and how is that benefiting you?
Cybersecurity. Packet tracing and log monitoring. Threat detection.
Mariusz Banasiak
Security has protected our data centers but support gaps and limited expertise remain challenging
Reviewed on Feb 24, 2026
Review provided by PeerSpot
What is our primary use case?
Barracuda CloudGen Firewall is used to protect data in two data centers, including headquarters and data center H5O.
What is most valuable?
I am using calls functionality from DLP forwarding calls and SSL inspection in Barracuda CloudGen Firewall , and all of those are necessary to be used. I cannot qualify which is more important than others, but it is a complete product, and I am using all features.
What needs improvement?
I don't know about the centralized management console for managing policies in Barracuda CloudGen Firewall. We are not using it, and I don't know what that is. My vendor didn't provide me information about such a feature.
There are a lot of functionalities already present, but the problem is whether there is knowledge about the functionalities or stability.
Barracuda can make improvements for the next generation firewall product. In general, it is a very rare product in our market. More training and more learning for customers on how to use these products are needed. We are suffering from a lack of engineers in our market, so I am considering changing the product to a more popular one because it is not easy to recommend Barracuda, even this great product, but nobody uses it in Poland, and it is not easy to do anything. I know just one company which is supporting us.
Concerning the effectiveness of the filtering capabilities in Barracuda CloudGen Firewall, it happens sometimes that the classifications are misleading with wrong categorizations of what they use into the games or something into categories when it is definitely not in the category. I don't know from what reasons, but maybe it could be adjusted.
For how long have I used the solution?
I have been working with Barracuda CloudGen Firewall since 2016 in one location, and in the second one, it has been three years.
What do I think about the stability of the solution?
For stability, I would rate the next generation firewall stability of the product an eight.
What do I think about the scalability of the solution?
Regarding scalability and the ability to scale and expand with Barracuda CloudGen Firewall, there is no issue, so I would rate it a ten.
How are customer service and support?
I would rate the technical support for Barracuda CloudGen Firewall a six, as in the past, it was definitely better, but recently it has not been as good.
Which solution did I use previously and why did I switch?
I compared Barracuda CloudGen Firewall mainly with FortiGate.
How was the initial setup?
For the initial setup of Barracuda CloudGen Firewall, it was a bit more complex than simple; I would rate it at six on a scale from one to ten.
What about the implementation team?
I used a third-party company for the integration and setup of Barracuda CloudGen Firewall. I have some knowledge about the product and in-house capability, but I am relying on the third-party company for the purposes of integrations and new products.
Which other solutions did I evaluate?
The key reason I chose Barracuda over FortiGate is that I have been using Barracuda since 2016 or even 2015, and I am just used to it. It is stable, it is working, and there are no issues. However, to develop and use new features, I am lacking specialists, which is why it is not easy to expand with Barracuda CloudGen Firewall.
What other advice do I have?
I do not use the SD WAN capabilities of Barracuda CloudGen Firewall.
Threat protection feature in Barracuda CloudGen Firewall is working. I have not had much experience with other products, so I didn't support any issues with that module. It is working just fine.
I was a long-time strong fan of this product, but unfortunately, I will change the vendor for another one. Therefore, I cannot recommend it. If someone can set up things in-house with specialists, then it is quite a good product. There are not so many critical incidents, but probably mostly because it is not so popular. The pain point for me is support. In general, with a small scale, I was able to manage it myself, but with a wider scale, it is not possible to rely on in-house specialists, and there is no specialist available on the market. I would give this review an overall rating of seven.
Phakedi Mphela
Optimizes bandwidth with SD-WAN and threat protection but needs faster support and automation
Reviewed on Feb 24, 2026
Review provided by PeerSpot
How has it helped my organization?
Barracuda CloudGen Firewall SD-WAN capabilities have helped optimize our customers' bandwidth usage significantly because we are moving from MPLS to SD-WAN.
What is most valuable?
The most valuable features in Barracuda CloudGen Firewall are the functionality of DPI and IDS, ATP, and we also use it in an SD-WAN operation as well, so it works well in the SD-WAN feature.
In terms of our routing and VPN capabilities, Barracuda CloudGen Firewall performs well.
The threat protection features of Barracuda CloudGen Firewall are good, and I appreciate their reporting capabilities. It is a very good tool to have, especially when you are using IDS and IPS to block SQL injection, buffer overflow attacks, and similar threats in real-time.
We use the cloud centralized management console for managing security policies.
What needs improvement?
There is room for improvement in terms of response time and first-level support quality.
Barracuda CloudGen Firewall needs to learn from FortiManager and Palo Alto, as I see that they have automation and their reporting is easier to generate compared to Barracuda CloudGen Firewall.
I would like to see built-in endpoint integration in the next release of Barracuda CloudGen Firewall, including EDR. They need to improve or at least have an AI-assisted traffic analyzer alert. Their support can be improved as well.
What do I think about the stability of the solution?
We have not had any issues while integrating Barracuda CloudGen Firewall with third-party solutions because the professional support was really helpful with the integration.
How are customer service and support?
I rate the technical support by Barracuda a four out of ten.
How was the initial setup?
The initial setup for Barracuda CloudGen Firewall is quite easy.
What about the implementation team?
The integration of Barracuda CloudGen Firewall with other products is good because we required assistance and professional help from the Barracuda team to come and help us, which was beneficial.
We have not had any issues while integrating Barracuda CloudGen Firewall with third-party solutions because the professional support was really helpful with the process.
Which other solutions did I evaluate?
The pricing for Barracuda CloudGen Firewall is a bit pricey compared to Palo Alto or Fortinet.
Jennifer Bernice
Centralized firewall management has saved time and improved network security across locations
Reviewed on Feb 20, 2026
Review from a verified AWS customer
What is our primary use case?
My main use case for Barracuda CloudGen Firewall is to secure our company's main and backup internet connections, and we also use it for failover of our main internet to our backup. We recently replaced a WatchGuard Firebox with this firewall because the cost of maintenance was high on the WatchGuard, and the management of Barracuda CloudGen Firewall was much simpler and could be done without a locally installed client.
You can manage Barracuda CloudGen Firewall from anywhere with Barracuda Cloud Control, even running firmware updates from your phone on all your Barracuda devices. It makes my job so much easier.
A specific situation where Barracuda CloudGen Firewall helped me manage my internet connections and made my job easier is when we switched to Barracuda CloudGen Firewall model F400. Coming from an older command line managed firewall, the F400 has made management of our firewalls much easier, and it is our primary firewall solution.
We use Barracuda CloudGen Firewall to watch real-time traffic, which is easy to do when trying to troubleshoot user issues getting to a particular service. Ease of management is a significant advantage. You can remotely manage it from anywhere with cloud control.
What is most valuable?
The best features Barracuda CloudGen Firewall offers include extreme customization for any environment and support for all configuration with firewall rules. Security features such as hardware-level antivirus and advanced threat protection, as well as SSL inspection, ensure all traffic passes through the appliance.
Control Center is far superior to other products for globally managing numerous firewalls and creating and deploying templates on the fly.
These features have improved security and prevented any cybersecurity threats before they attack our system, making things easier for my team day-to-day.
The VPN connections have never been easier. Once configured within Control Center, drag and drop is all that is needed to connect to internet-connected firewalls easily.
Barracuda CloudGen Firewall has positively impacted my organization by allowing us to control the entire network from one location, hence saving a lot of time from moving from one location to another. All services and processes work very well and are reliable, with high uptime.
For MSPs looking to deploy and control numerous firewalls with ease, this is the best product available.
Since switching to Barracuda CloudGen Firewall, we have saved time of 30 to 40 percent because we are able to control the network from one location. We have also saved costs of 20 percent because we do not have to move from one location to another to control the network.
What needs improvement?
Barracuda CloudGen Firewall could be improved as it has a very high learning curve. It is definitely not a one and done firewall, as a one and done firewall requires a lot of dedicated time to get the machine running the way you want.
To improve Barracuda CloudGen Firewall, there should be a lot of tutorials and videos online to help new users. Multiple ways to configure for the same service or feature takes time to determine your customized build.
In addition to previous points, the interface can sometimes be clunky when trying to determine how it is organized or arranged.
For how long have I used the solution?
I have been using Barracuda CloudGen Firewall for the past three and a half years.
What do I think about the stability of the solution?
Barracuda CloudGen Firewall is very stable.
What do I think about the scalability of the solution?
Barracuda CloudGen Firewall is highly scalable and grows with my organization's needs.
How are customer service and support?
For the few times that I have been able to reach out to customer support, they have been proactive and supportive.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
Before Barracuda CloudGen Firewall, I previously used SonicWall.
How was the initial setup?
My experience with pricing, setup cost, and licensing is that the cost was effective and affordable.
What was our ROI?
I have seen a return on investment with Barracuda CloudGen Firewall, as it makes our environment more secure through the robust security features it offers. It has drastically reduced the amount of infections from cybersecurity threats and makes managing close to 50 clients or more for our engineers much easier, hence saving a lot of time and cost.
Which other solutions did I evaluate?
Before choosing Barracuda CloudGen Firewall, I evaluated WatchGuard as another option.
What other advice do I have?
I deduct those two points because it has a very complex and steep learning curve to get started, but it is very highly customizable and can control the entire network from one location. That is what makes it receive a rating of eight, hence saving time and cost.
The security features such as hardware-level antivirus and advanced threat protection, as well as SSL inspection, ensure all traffic passes through the appliance to increase security and prevent cybersecurity threats on time.
Barracuda CloudGen Firewall is deployed in my organization using a hybrid cloud setup.
We purchased Barracuda CloudGen Firewall through the AWS Marketplace .
We do utilize the advanced threat features to provide the first layer for virus through malware detection and prevention before the traffic ever gets to the antivirus software that is used on each workstation.
My advice for others looking into using Barracuda CloudGen Firewall is that anyone that has a business or stores client's data must have a next-generation firewall with zero exemptions. If you have multiple sites, configuring a VPN between them takes less than a minute to configure. These devices have many more features than their competitors but often cost less. Barracuda CloudGen Firewall is very cost-effective, and I highly recommend it. I rate Barracuda CloudGen Firewall an eight out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud