Thunder CFW

Thunder CFW uncovers threats in SSL traffic and secures high-value assets in the data center from the network and DDoS attacks. The scalable security solution also protects mobile core infrastructure and enables service providers and enterprises to encrypt data at a massive scale in the cloud. Thunder CFW is built on A10’s market-proven ACOS platform that delivers scalable form factors and cost structures that make economic sense. Offering unmatched performance and scalability with the industry’s best data center footprint for integrated security and application networking needs, Thunder CFW reduces an organization’s total cost of ownership (TCO).

In this scenario, a mobile service provider deploys the Gi/SGi firewall to secure communication between the evolved packet core (EPC) and the internet to protect the mobile core infrastructure. Integrated carrier-grade NAT enables carriers to manage communication with both IPv4 and IPv6 address protocols. Built-in DDoS protection safeguards the NAT IP pools to avoid service interruption. Harmony Controller provides centralized management and analytics for Gi Firewall solution.

Features and Benefits

Carrier Class Firewall

Protect subscribers and shield mobile core infrastructure from cyber attacks and signaling storms at the Gi/SGi, GTP/Roaming and RAN to ensure uninterrupted operations. Built on A10’s proven Thunder CGN technology, the firewall combines the security of a carrier-grade firewall with integrated DDoS protection features to serve as a carrier-grade networking solution for mobile network operators.

• Comprehensive Mobile Core Protection
• IPv4 Preservation and  IPv6 Transition
• High-Performance, Scalable Firewall 
• Granular Visibility and Reporting

Data Center Firewall

Unite application delivery control and security on a single platform to reduce hardware and operating costs. The high-performance data center firewall includes a Layer 4 firewall with integrated DDoS protection and server load-balancing to protect data center assets from the inside out.

• Achieve Unprecedented  Firewall Performance
• Consolidate Application Delivery  and Security
• Protect Multi-Tenant Environments

Secure Web Gateway

Eliminate the SSL blind spot in corporate defenses, restrict access to undesirable websites, and identify malicious traffic with our secure web gateway. This feature combines A10’s SSL Insight® technology, URL filtering, and a multi-layered security approach to protect users from modern, encrypted cyberthreats.

• Decrypt Once, Inspect Multiple Times
• Gain Superior Control with URL Filtering
• Block Known Web Threats

IPsec VPN

Encrypt data at a massive scale — including in the cloud — with this highspeed, site-to-site IPsec VPN designed for enterprises and service providers. In mobile networks, it can be deployed as a security gateway to enable secure backhaul between the RAN nodes and the core network. The policy-based IPsec VPN also enables high-capacity client-to-site VPN deployment to support remote access clients in the enterprise networks.

• Encrypt Data at Unparalleled Speeds
• Consolidate IPsec VPN, Firewall  and Application Delivery