Thunder® Convergent Firewall (CFW)
Consolidated solution for application delivery and network security
What is A10 Thunder CFW?
A consolidated network security platform for A10’s application and network infrastructure solutions.
There are two packaging options: CFW-ADC for enterprise solution and CFW-CGN for service provider solution. The all-in-one CFW package is still available for previous generation platform that doesn’t support modular licensing.
Enable Secure Interconnection Between Data Centers
CFW-ADC
- Unite application delivery and network security on a single platform to reduce hardware and operating costs.
- The high-performance DCFW includes security features such as stateful firewall, IPsec VPN with advanced server load balancing to protect data center assets from the inside out.
Secure and Scale DNS Infrastructure for Uninterrupted Service
CFW-ADC
- Build resilient and high-performance DNS using DNS load balancing, DNS cache and DNS application firewall (DAF).
- To enhance user-side security and privacy, DNS over HTTPS/TLS encrypts DNS queries.
Protect Users From Modern Encrypted Threats
CFW-ADC
- Eliminate the SSL blind spot in corporate defenses, restrict access to undesirable websites, and identify malicious traffic with a secure web gateway.
- This feature combines SSL Insight® technology, URL filtering, and a multi-layered security approach to protect users from modern, encrypted cyber threats.
Protect Your Mobile Infrastructure
CFW-CGN
- Protect subscribers and shield mobile core infrastructure from cyberattacks and signaling storms at the Gi/SGi, GTP/roaming and RAN to ensure uninterrupted operations
- Built on A10’s proven Thunder CGN technology, the firewall combines the security of a carrier-grade firewall with integrated DDoS protection features.
Key Benefits of A10 Thunder CFW
Network Security Consolidation
- Consolidates stateful firewall, IPsec VPN, load balancer and secure web gateway solutions for enterprises and data centers
- Consolidates Gi/SGi firewall, GTP firewall, IPsec VPN, intelligent traffic steering and CGNAT solutions for service providers
High-performance Service Platform
- ACOS software with HW acceleration enables mobile operators to get ready for the hyperscale demands of 5G and IoT
- The consolidation of functions helps achieve lower network latency as compared to individual point products
Reduce TCO for Better ROI
- Reduces both CAPEX and OPEX by consolidating functions that typically require deployment of multiple, disparate point products
- Enables organizations to rapidly provision and deliver new revenue-generating services
Key Features
Advanced Delivery Controller
High-performance advanced load balancer and application delivery controller that help meet availability and performance demands for both legacy and modern applications
SSL Visibility & Decryption
A comprehensive TLS/SSL decryption solution that enables security devices to efficiently analyze encrypted enterprise traffic and augment Zero Trust strategies
Carrier-Grade Networking
Highly scalable carrier-grade NAT (CGNAT) and IPv6 migration solution that helps extend IPv4 connectivity and enable a smooth transition to IPv6 deployment
Centralized Management with Analytics
A10 Control and Harmony Controller collect comprehensive telemetry from Thunder CFWs and help simplify operations by providing real-time, actionable insights
Network and Application Firewall (FW)
Flexible stateful FW providing L4 network segmentation and application-based control and visibility using DPI. Consolidated FW with ADC/CGN optimizes latency and system resource usage
IPsec VPN
High-capacity IPsec VPN enabling secure interconnection between data centers, site-to-site, clients-to-site, or between the mobile network RAN nodes and the core
Intelligent Traffic Steering
For value-added services or optimizing resoucre usage, traffic can be steered based on various attributes such as user ID, application ID, IMSI, radio access type (RAT), etc.
Available Subscriptions
- Web categorization for URL filtering and selective bypass
- Application visibility (DPI) for fairness user traffic control
- Threat intelligence list to block malicious IPs
Related Product
A10 Control
A10 Control is the next generation of centralized management and control platform for A10 solutions, consolidating existing A10 Harmony Controller and aGalaxy capabilities and more.
Additional Resources
