Advanced Application and Infrastructure Security & Availability
Scalable high-performing firewall, IPsec VPN, secure web gateway, DNS over HTTPS (DoH), and Carrier-Grade NAT with integrated DDoS protection for your networks and customers
Key benefits of Thunder CFW
Case Study
Tier-1 Cable Provider Protects Subscriber Privacy with Encrypted DNS at Scale with A10 Networks Thunder CFW
As the use of encrypted DNS grows, this cable operator can assure subscriber privacy and security without sacrificing performance or impacting the user experience. The company deployed encrypted DNS protocol, DNS over HTTPS (DoH) with Thunder CFW.
Key Features of Thunder CFW
-
DNS over HTTPS (DoH)
Leverage DNS security capabilities to protect infrastructure from several DNS attack sources
Keep existing DNS components unchanged, and ensure secure connectivity and protocol translation
Maintain high performance and scale of high volume DoH traffic with providing industry-leading DNS Queries per second (QPS)
-
Gi/SGi Firewall
- Comprehensively protect mobile infrastructure with a consolidated carrier-class Gi/SGi firewall, CGNAT, application visibility and control, and integrated DDoS protection solution on a single platform
- The Gi/SGi firewall is an ultra-high performance and hyperscale firewall with a rich set of features to protect subscribers and shield mobile network services
- Protect investments in existing IPv4-based infrastructure with CGNAT while transitioning to IPv6 with a comprehensive set of IPv6 transition technologies
- The built-in GTP firewall enables the telecom operators to protect the mobile core infrastructure against threats in GTP and SCTP traffic
-
Intelligent Traffic Steering
- Route traffic only through selected value-added services that a user has subscribed to, thereby optimizing the utilization of resources
- Traffic can be steered through different services based on user ID, application ID and other attributes such as radio access type (RAT), IMSI etc.
-
Secure Web Gateway
- Gain full control and visibility of your traffic with the flexibility to deploy as an explicit or transparent proxy
- Reduce risks and gain granular user-level control with subscriptions to URL filtering, application visibility and control and threat intelligence
- Ensure compliance with privacy standards using multi-layered security services and high-speed logging for SIEM integration
- Leverage SSL Insight technology to decrypt outbound SSL traffic, enabling the “Secure Decrypt Zone” to inspect traffic in clear-text and prevent data exfiltration by integrating with leading security solutions
-
Data Center Firewall
- Eliminate traditional performance bottlenecks while protecting your data center assets with hundreds of Gbps of firewall throughput along with hundreds of millions of concurrent sessions
- Consolidate security and application delivery controller functionality in one solution to reduce CAPEX and OPEX
- Enable multi-tenant environments with A10 Networks’ Application Delivery Partitions (ADPs)
-
IPsec VPN
- Securely interconnect remote sites over the internet using high-performance, hardware-based IPsec cryptography
- Securely connect cell towers and central sites in a service provider infrastructure
- Improve agility and reduce data center footprint and operating costs through consolidation of firewall and IPsec VPN capabilities in a single platform
-
Analytics and Management
- Gain real-time, actionable insights into application and network service statistics with A10 Harmony Controller for faster troubleshooting
- Manage multi-site deployments from a central location
- Simplify management and configuration with on-box AppCentric Templates (ACTs)
Centralized Analytics & Actionable Insights
The Harmony™ Controller delivers centralized management and per-app analytics for different applications. The extensible nature of the platform enables on-demand installation of Harmony apps to better focus on the specific use cases of traffic visibility, security analytics and connected Intelligence.
Additional Options
Additional services, products, solutions in which you may be interested.
Harmony Controller
- Gain comprehensive, real-time and actionable insights with application-level visibility
- Simplify operations and increase agility
- Centrally-manage deployment and security policy implementation
Subscriptions for Enterprises
- Web categorization for:
- URL filtering
- Selective bypass
-Threat investigator - Application visibility and control
- Threat intelligence
Subscriptions for Service Providers
- Application visibility and control to granularly identify and categorize application traffic
- Threat intelligence to identify and block malicious IP addresses on the internet
Additional Resources
SOLUTION BRIEF
Solution Brief
SOLUTION BRIEF