Barracuda Networks 4 - Manual (Page 42)

40 Barracuda Backup Service Administrator’s Guide
Barracuda Backup Service Security
The Barracuda Backup Server is deployed behind your corporate firewall and is protected by the same
security as your primary data sources.
Communication and Configuration
Administration and backup configuration that is set using the Barracuda Backup Service Web
interface is sent to the Barracuda Backup Server via a 256-bit encrypted VPN tunnel. The Barracuda
Backup Server uses HTTPS port 443 to send status updates to the Barracuda Backup Service. Data
transfers are initiated by the Barracuda Backup Server rather than by Barracuda Cloud Storage or a
remote Barracuda Backup Server.
Data Transmission and Storage
Data transferred between your network and Barracuda Cloud Storage or between your network and a
remote Barracuda Backup Server is always encrypted. File parts are AES 256-bit symmetrically
encrypted before they are stored, and they remain encrypted until a restore is requested.
Management Access
Monitor Activity
You can check the user activity page periodically for authentication attempts, changes to settings, and
updates to account information. Go to the
ADMIN > User Activity page to see all activity for an
account, including logins and when a user has enabled or disabled replication.
Restrict Logins by IP Address
You can restrict access to the Barracuda Backup Service to one or more IP addresses. On the ADMIN
> Users page, click the Edit graphic ( ) to edit a user. You can enter an IP address or a range.
Secure Network Access
HTTPS is always used for secure Web browser communication with the Barracuda Backup Service.
Encryption
Data transfers between the local Barracuda Backup Server and a remote Barracuda Backup Server are
always encrypted. The most aggressive combination of symmetrical and asymmetrical encryption in
the industry keeps your data stored in a format that nobody but you can access. The United States
government recently approved 192-bit AES encryption as the preferred method for protecting top-
secret information. The Barracuda Backup Service solution starts with even higher 256-bit AES
encryption.
In addition, Barracuda Networks has developed a proprietary advanced digital cataloging system that:
• Breaks down your data into small pieces and tracks the changes of these parts over time, and
• Strips the original meta identifiers from your files.