|
Thunder CFW
The Thunder CFW product line can be used as:
A powerful secure web gateway: integrated URL filtering, A10 Networks SSL Insight (SSLi) and explicit proxy capabilities to enhance the security of enterprise systems by high-speed decryption of SSL traffic and restrictions on access to bad websites.
A high-performance data center firewall (DCFW): integrated DDoS attack protection and carrier-grade NAT (CGN) capabilities for mobile operators to protect mobile infrastructure with advanced policies.
A scalable Gi/SGi firewall: integrated DDoS attack protection and carrier-grade NAT (CGN) capabilities for mobile operators to protect mobile infrastructure with advanced policies.
A high-speed end-to-end IPSec VPN solution: Helps enterprises and operators decrypt data in the cloud or on a large scale.
The Thunder CFW product family is based on A10 Networks' highly scalable ACOS platform (Advanced Core Operating System) and is based on Symmetric Scalable Multi-Core Processing (Symmetric Scalable Multi-Core Processing). Unparalleled performance and a wide range of deployment options (physical, virtual and cloud environments). With a data center-efficient design and a compact device architecture, the Thunder CFW product family delivers an integrated application network and security solution that maximizes rack space and minimizes power and cooling costs.
The Thunder CFW uses the A10 Harmony architecture to provide open, standard programming capabilities for rapid integration with management and orchestration systems for consistent policies and centralized monitoring. The A10 Networks aGalaxy centralized management system helps organizations configure, monitor and troubleshoot all A10 Thunder solutions including Thunder CFW.
Products and advantages
Whether it's a business, carrier or mobile operator, the A10 Thunder CFW provides a high-performance, versatile solution for its applications, customers and infrastructure.
Secure web gateway
SSL traffic is decrypted multiple times at a time: Thunder CFW helps security devices perform encrypted traffic checks, reducing SSL blind spots in corporate defense systems. Using SSL Insight technology, Thunder CFW decrypts SSL traffic and forwards it to third-party security devices for inspection. The Thunder CFW solution helps the security infrastructure in the enterprise reproduce defenses.
Prevent data breaches and enforce evolution: Thunder CFW seamlessly integrates with third-party data breach prevention (DLP) solutions through industry-standard ICAP. The Thunder CFW can send decrypted traffic to the DLP server for inspection before the intercepted traffic is forwarded to the client or server. According to the results of the DLP server check, Thunder CFW enforces release or rejection policies on traffic, effectively preventing data leakage and infection threats.
Equipped with high-quality URL classification service: Thunder CFW customer optional URL filtering service to improve staff efficiency and mitigate web-based attack threats. Whether Thunder CFW can monitor and block access to malicious websites, including malware, spam and phishing sites. Through collaboration with Webroot, the A10 URL Classification Service can classify more than 460 million domain names and 13 billion URLs into 83 categories, helping companies block malicious website access and prevent online attacks from threatening their customers.
Extend the lifecycle of your security infrastructure: Thunder CFW with integrated load balancing capabilities helps organizations maximize operational time, improve the performance of their security infrastructure, and offload compute-intensive tasks such as SSL decryption and ICAP for firewalls and other security devices The resulting pressure allows these devices to better detect and defend against attacks.
Data center firewall
Unparalleled firewall performance: Thunder CFW uses A10's ACOS (Advanced Core Operating System) to achieve high performance in a compact device form, helping companies block large-scale new security threats. Combined with shared memory architecture and flexible traffic acceleration (FTA) technology, data center firewalls eliminate traditional performance bottlenecks while protecting data center assets with extremely high throughput and concurrent connection rates.
Reduce operational and capital expenditures: By consolidating multiple services on a single platform, customers can reduce the amount of equipment purchased and reduce rack space, power and cooling energy. The Thunder CFW data center firewall not only provides security features, but also further integrates network and application delivery capabilities to help organizations reduce single-function devices in the data center, reducing hardware and operational costs.
Protecting the multi-tenant environment: Thunder CFW uses the A10 Harmony architecture to fully implement programmable security for the data center. A10 Harmony implements unified policy control, supporting 100% full-featured RESTful APIs and centralized monitoring. In addition, Thunder CFW has a range of features that support multi-tenancy, such as application delivery partitions (ADPs).
Gi/SGi firewall
Large-scale deployment and multiple functions in a compact form factor: Thunder CFW with integrated Gi/SGi firewall capabilities, with the scalability and security protection required by mobile operator networks to support large-scale sessions and high-speed per second Connection rate to meet current and future traffic demands. At the same time, Thunder CFW can help mobile operators efficiently guard infrastructure such as GGSN and PGW in the core network.
Thunder CFW integrates carrier-grade NAT capabilities to help mobile operators retain IPv4-based infrastructure investments and support multiple IPv6 migration technologies such as NAT64/DNS64, enabling users to access resources regardless of the IP version they use. Smooth migration of IPv6 networks. Integrated Application Layer Gateways (ALGs) ensure application accessibility and operational transparency through address translation, and multi-function Thunder CFW support for IPv4 retention and IPv6 migration, which significantly simplifies operational tasks.
To protect the mobile infrastructure, the Thunder CFW Gi/SGi firewall granulates network resources to help mobile operators intercept network attacks and unauthorized access. It has a rich set of stateful firewall features to protect users while helping LTE data and control plane services stay away from multiple threats. Thunder CFW also secures its own resources, such as network address translation (NAT) resource pools, to ensure that features are not discounted.
End-to-end IPSec VPN
Ultra-high-speed decryption of data: Thunder CFW helps enterprises and operators deploy large-scale VPNs. Each Thunder CFW platform can support thousands of VPN tunnels, extensive encryption algorithms and data integrity methods. Enterprises can deploy Thunder CFWs next to existing VPN devices or use Thunder CFW devices to build new VPN networks.
IPSec VPN, firewall and application delivery integration: Thunder CFW consolidates data center firewalls, Gi/SGi firewalls and IPSec VPNs on the same platform. Whether using data center firewalls for secure interconnection between data centers or establishing high-speed VPN connections in the cloud, Thunder CFW provides a comprehensive network and security platform to reduce energy and operating costs in customer data centers.
management
Comprehensive, Scalable Management: Thunder CFW appliances have a range of options to help customers streamline and automate management tasks, reduce management costs and ensure that complex tasks are accurately completed in the first place. In addition to the industry-standard command line CLI and web graphical interface GUI, Thunder CFW also supports a full-featured RESTful API that integrates quickly with third-party management interfaces to efficiently operate one or more Thunder CFWs. For larger deployments, customers can also use the aGalaxy centralized management system for large-scale, cross-location, multi-device daily operation and maintenance.
Thunder CFW supports role-based granular access control to help customers establish users and groups and grant read-only or read-write rights to a partition or management interface. To effectively scale load balancing capabilities, the A10 Networks aVCS Virtual Rack System puts multiple devices in a virtual chassis and operates as a single device from a single point of management.
product description
Thunder CFW product line
Thunder CFW meets the needs of a variety of deployment environments. Each Thunder CFW product features a flexible Advanced Core Operating System (ACOS) architecture that delivers the accuracy and efficiency of unique shared memory, as well as 64-bit scalability and advanced stream processing.
• Thunder CFW hardware device:
-- The A10 Thunder CFW product line ranges from 25Gbps entry-level models to 220Gbps high-performance models in a single, rack-mount form factor to meet the demanding needs of a wide range of network environments.
-- All models support dual power supplies and feature solid state drives (SSDs) and easy-to-expand detachable accessories to ensure high availability.
-- All product models benefit from the A10's FTA technology, and some models also use FPGAs to support hardware-optimized FTA processing, providing highly scalable flow distribution and distributed denial of service (DDoS) protection.
-- Some models are equipped with switching and routing processors for high speed network processing. Its dedicated security processor supports SSL offload and enables out-of-band monitoring and management through a remote management interface.
-- Each unit delivers the best unit rack performance, while the highest level of 80 PLUS Platinum certified power supply ensures a green solution and reduces power costs. With high-density 1Gbps, 10Gbps, 40Gbps and 100Gbps ports, Thunder CFW meets the highest network bandwidth requirements.
The aGalaxy intelligent unified management platform helps enterprises centrally monitor, configure and troubleshoot all Thunder CFWs deployed.
|
