No, the 210 doesn't include SSL inspection or an integrated Ethernet bridge. It can still filter HTTPS sites by domain and category, but it can't decrypt and inspect the content of encrypted sessions. The Web Security Gateway 310 adds an Ethernet bridge and a first level of SSL inspection, and the 410 adds full SSL inspection across the board.

Yes. Advanced Threat Protection is available as a subscription add-on. It runs suspicious files through full system emulation in an isolated environment before they reach your network and checks them against Barracuda's global threat intelligence, so it catches ransomware and zero-day malware that category filtering alone would miss.

An Ethernet bridge lets an appliance sit directly inline on the wire between your network and the internet. Without one, the 210 deploys as a proxy, forward or transparent, in front of your users instead of bridged inline. It's a simpler setup for a small office and one reason the 210 is priced and sized the way it is.

Up to 100 concurrent users. Once you're past that, or you need SSL inspection along the way, the 310 and 410 step up in both user count and throughput while keeping the same content filtering and management console, so moving up doesn't mean relearning the product.

Yes. The Barracuda Web Security Agent installs on Windows and Mac laptops and enforces the same content policy whether someone is in the office, at home, or on a hotel network, so remote work doesn't create a gap in coverage.