Thunder Convergent Firewall (CFW)

THUNDER CONVERGENT FIREWALL (CFW)
Advanced Application and Infrastructure Security & Availability

Scalable high-performing firewall, IPsec VPN, secure web gateway, DNS over HTTPS (DoH), and Carrier-Grade NAT with integrated DDoS protection for your networks and customers

A10 Thunder® Convergent Firewall (CFW) is the first converged security solution for service providers, cloud providers and large enterprises that includes integrated application delivery and security solutions in a single, standalone product.

Modern service providers, web giants, enterprises and cloud platforms aim to consolidate carrier-grade solutions to defend global networks, secure infrastructure, encrypt data and protect customers.

A high-performance, all-inclusive security product, A10 Thunder Convergent Firewall (CFW) is the cost-effective approach
for strengthening security postures and protecting network perimeters without the need for disparate point products.

A10 Thunder CFW features a data center firewall, site-to-site IPsec VPN, carrier class firewall for mobile infrastructure security, and secure web gateway for enterprise,
mobile network operators and other service providers. Thunder CFW includes all Thunder ADC, CGN and SSLi features.

Thunder CFW uncovers threats in SSL traffic and secures high-value assets in the data center from network and DDoS attacks.
The scalable security solution also protects mobile core infrastructure and enables service providers and enterprises to encrypt data at massive scale in the cloud.

Thunder CFW is built on A10’s market- proven ACOS platform that delivers
scalable form factors and cost structures that make economic sense. Offering unmatched performance and scalability with the industry’s best data center footprint for integrated security and application networking needs, Thunder CFW reduces an organization’s total cost of ownership (TCO).

5G Security & Scale
- The ultra-high performance and scale of Thunder CFW enables mobile operators to get ready for the emerging hyperscale demands of 5G and IoT
- The consolidation of multiple security features ensures protection against 4G/LTE threats as well as emerging 5G security threats
- The consolidation of functions helps achieve lower latency as compared to individual point products

Consolidates Services
- Consolidates data center firewall, IPsec VPN, load balancer and secure web gateway solutions for enterprise deployments
- Consolidates Gi/SGi firewall, GTP firewall, IPsec VPN, intelligent traffic steering and Carrier Grade NAT (CGNAT) solutions for service providers

Increases ROI
- Reduces both CAPEX and OPEX by consolidating functions that typically require deployment of multiple, disparate point products
- Enables service providers to rapidly provision and deliver new revenue-generating services

DNS over HTTPS (DoH)
- Leverage DNS security capabilities to protect infrastructure from several DNS attack sources
- Keep existing DNS components unchanged, and ensure secure connectivity and protocol translation
- Maintain high performance and scale of high volume DoH traffic with providing industry-leading DNS Queries per second (QPS)

Gi/SGi Firewall
- Comprehensively protect mobile infrastructure with a consolidated carrier-class Gi/SGi firewall, CGNAT, application visibility and control, and integrated DDoS protection solution on a single platform
- The Gi/SGi firewall is an ultra-high performance and hyperscale firewall with a rich set of features to protect subscribers and shield mobile network services
- Protect investments in existing IPv4-based infrastructure with CGNAT while transitioning to IPv6 with a comprehensive set of IPv6 transition technologies
- The built-in GTP firewall enables the telecom operators to protect the mobile core infrastructure against threats in GTP and SCTP traffic

Intelligent Traffic Steering
- Route traffic only through selected value-added services that a user has subscribed to, thereby optimizing the utilization of resources
- Traffic can be steered through different services based on user ID, application ID and other attributes such as radio access type (RAT), IMSI etc.

Secure Web Gateway
- Gain full control and visibility of your traffic with the flexibility to deploy as an explicit or transparent proxy
- Reduce risks and gain granular user-level control with subscriptions to URL filtering, application visibility and control and threat intelligence
- Ensure compliance with privacy standards using multi-layered security services and high-speed logging for SIEM integration
- Leverage SSL Insight technology to decrypt outbound SSL traffic, enabling the “Secure Decrypt Zone” to inspect traffic in clear-text and prevent data exfiltration by integrating with leading security solutions

Data Center Firewall
- Eliminate traditional performance bottlenecks while protecting your data center assets with hundreds of Gbps of firewall throughput along with hundreds of millions of concurrent sessions
- Consolidate security and application delivery controller functionality in one solution to reduce CAPEX and OPEX
- Enable multi-tenant environments with A10 Networks’ Application Delivery Partitions (ADPs)

IPsec VPN
- Securely interconnect remote sites over the internet using high-performance, hardware-based IPsec cryptography
- Securely connect cell towers and central sites in a service provider infrastructure
- Improve agility and reduce data center footprint and operating costs through consolidation of firewall and IPsec VPN capabilities in a single platform

Analytics and Management
- Gain real-time, actionable insights into application and network service statistics with A10 Harmony Controller for faster troubleshooting
- Manage multi-site deployments from a central location
- Simplify management and configuration with on-box AppCentric Templates (ACTs)

PRODUCT : THUNDER CFW PHYSICAL APPLIANCE 

PRODUCT : vTHUNDER CFW VIRTUAL APPLIANCE

---

BROCHURE DOWNLOAD

---

	A10 Thunder CFW Datasheet
	A10 vTHUNDER Software For Virtual & Cloud Infrastructure Datasheet
	A10  Flexpool Capacity Pooling Datasheet