Brush Up on Your Defense With hundreds of lines code to check - and vulnerabilities often subtle and hard to find - a serious data breach is often the first sign that a web application has problems. The Barracuda Web Application Firewall quickly protects web servers from data breaches and websites from defacement without administrators waiting for clean code or even knowing how an application works. Scan In. Scan Out. Placed between the Internet and the web servers, the Barracuda Web Application Firewall scans all web input to block attacks from ever touching the servers. The Barracuda Web Application Firewall also scans outbound traffic providing highly effective data loss prevention (DLP). With features that optimize application delivery and availability, the affordable Barracuda Web Application Firewall is a necessary solution for web-application delivery. Secure Default policies deliver instant protection. Continuously updated threat profiles protect against SQL injections, cross-site scripting (XSS,) OS command injections, session tampering, buffer overflows, XML attacks, DoS and other expert attacks. Affordable This solution consolidates web app security, access control and traffic optimization in one affordable appliance. With no per-app or per-service fees, this is the best value for defending web servers in the industry. Easy to Use With 15 minute setup, an intuitive web UI for administration and reporting and automatic updates for firmware and security definitions, administration is trouble free end-to-end. High Performance Content caching, data compression and SSL acceleration optimize application performance while reducing impact on servers. Integrated load balancing further optimizes performance and provides high availability. Access Control User authentication via LDAP, RADIUS and other technologies supports enforcement of granular policies for access to applications by user groups and individuals. Reporting Creating reports is fast and straightforward including the option to schedule reports for automatic delivery via email on a recurring basis. Reports formatted for PCI DSS compliance are standard.