Icon Close country selection

Thunder CFW

A10 Thunder® Convergent Firewall (CFW) is the first consolidated security solution for service providers, cloud providers and large enterprises that includes integrated application delivery and security solutions in a single, standalone product.


Modern service providers, web giants, enterprises, and cloud platforms aim to consolidate carrier-grade solutions to defend global networks, secure infrastructure, encrypt data and protect customers. A high-performance, all-inclusive security product, A10 Thunder Convergent Firewall (CFW) is the cost-effective approach for strengthening security postures and protecting network perimeters without the need for disparate point products. A10 Thunder CFW features a data center firewall, IPsec VPN, carrier-class firewall for mobile infrastructure security,  and secure application delivery, carrier-grade networking, web gateway for enterprise, mobile network operators, and other service providers. Thunder CFW includes all Thunder ADC, CGN, and SSLi features.

Thunder CFW uncovers threats in SSL traffic and secures high-value assets in the data center from the network and DDoS attacks. The scalable security solution also protects mobile core infrastructure and enables service providers and enterprises to encrypt data at a massive scale in the cloud. Thunder CFW is built on A10’s market-proven ACOS platform that delivers scalable form factors and cost structures that make economic sense. Offering unmatched performance and scalability with the industry’s best data center footprint for integrated security and application networking needs, Thunder CFW reduces an organization’s total cost of ownership (TCO).


In this scenario, a mobile service provider deploys the Gi/SGi firewall to secure communication between the evolved packet core (EPC) and the internet to protect the mobile core infrastructure. Integrated carrier-grade NAT enables carriers to manage communication with both IPv4 and IPv6 address protocols. Built-in DDoS protection safeguards the NAT IP pools to avoid service interruption. Harmony Controller provides centralized management and analytics for Gi Firewall solution.


Features and Benefits


Carrier Class Firewall

Protect subscribers and shield mobile core infrastructure from cyber attacks and signaling storms at the Gi/SGi, GTP/Roaming and RAN to ensure uninterrupted operations. Built on A10’s proven Thunder CGN technology, the firewall combines the security of a carrier-grade firewall with integrated DDoS protection features to serve as a carrier-grade networking solution for mobile network operators.

  • Comprehensive Mobile Core Protection
  • IPv4 Preservation and  IPv6 Transition
  • High-Performance, Scalable Firewall 
  • Granular Visibility and Reporting


Data Center Firewall

Unite application delivery control and security on a single platform to reduce hardware and operating costs. The high-performance data center firewall includes a Layer 4 firewall with integrated DDoS protection and server load-balancing to protect data center assets from the inside out.

  • Achieve Unprecedented  Firewall Performance
  • Consolidate Application Delivery  and Security
  • Protect Multi-Tenant Environments


Secure Web Gateway

Eliminate the SSL blind spot in corporate defenses, restrict access to undesirable websites, and identify malicious traffic with our secure web gateway. This feature combines A10’s SSL Insight® technology, URL filtering, and a multi-layered security approach to protect users from modern, encrypted cyberthreats.

  • Decrypt Once, Inspect Multiple Times
  • Gain Superior Control with URL Filtering
  • Block Known Web Threats



Encrypt data at a massive scale — including in the cloud — with this highspeed, site-to-site IPsec VPN designed for enterprises and service providers. In mobile networks, it can be deployed as a security gateway to enable secure backhaul between the RAN nodes and the core network. The policy-based IPsec VPN also enables high-capacity client-to-site VPN deployment to support remote access clients in the enterprise networks.

  • Encrypt Data at Unparalleled Speeds
  • Consolidate IPsec VPN, Firewall  and Application Delivery

IT solutions


Test a product

On local martkets Bakotech Group operates through a well-established partner network, including over 1,000 active dealers. Key IT-integrators and are involved in the realization of large-scale projects concerning implementing solutions for end-customers from various segments of business. Bakotech's business strategy is True Value Added Distribution or in other words - project oriented distribution.

We are providing our partners with a wide range of services such as PR, co-marketing activities, pre post-sales support, trainings for partners and end-customers, PoC, PoV, solution consulting, implementation support and technical support.

Contact Us

Bakotech Sp. z o.o.

ul. Drukarska 18/5

30-348 Kraków


Dane firmy

VAT ID 6762466740

REGON 122894922

KRS 0000467615


ph. +48 12 340 90 30


Privacy policy

Subscribe to stay updated

Would you like to stay updated on the current IT and InfoSec news? About BAKOTECH events like webinars, trainings and conferences? Please, leave your e-mail:
Error occured. Please check the form fields and try again.
This address is already in our database.
The subscription has been added. Thank you!
© Bakotech - 2022. All rights reserved

The website uses cookies to deliver services in accordance with the Cookies Policy. You can define the conditions for storing or accessing the cookie mechanism in your browser.

I accept