CyberIndexBeta

Product

Carrier-class Gi/SGi and data-centre firewall combined with CGNAT, DDoS protection and application delivery on ACOS, sold as hardware, vThunder virtual and cThunder container. Thunder CFW is a consolidated network security platform for application and infrastructure solutions. For example, if you already deploy a firewall in front of application services that are protected by a load balancer or ADC, Thunder CFW allows you to consolidate both functions into a single platform. It also provides deployment flexibility, allowing you to move Thunder CFW instances across supported cloud environments while using the same pooled capacity. It is available as a container image, a hardware appliance and a virtual appliance.

Current Version
ACOS 7.0.3
Market
EnterpriseService Provider
Licence
Paid
Price
Quote
Record Created
2026-09-20
Last Updated
2026-10-20

Vendor

A10 Networks was founded in San Jose in 2004 and listed in 2014, and its business is high-throughput traffic handling: application delivery controllers, load balancers and the security functions that make sense at that point in the network. Thunder CFW, the convergent firewall listed here, is part of that family — a firewall built for carrier and data-centre scale, sold alongside Thunder ADC for application delivery and Thunder TPS for absorbing denial-of-service attacks. Much of its business is with mobile operators, where the volumes involved are the whole engineering problem. It is a network infrastructure vendor. What it does is not what the endpoint laboratories test, and its rows here record the product rather than a detection score. Vendor page →

Country
United States
Headquarters
San Jose, United States
Year Established
2004
Customers
7,000 organisations
Users
Not known
Revenue
$290.6M (2025)

Platforms

Containernative
Hardware Appliancenative
Virtual Appliancenative

Target Market

Enterprise secondaryService Provider primary

Capabilities

Stateful Inspectionkeynative
Intrusion Prevention (IPS)keynative
Intrusion Detection (IDS)Not known
SSL/TLS Inspectionkeynative
VPN Gatewaykeynative
SD-WANNot known
Application Controlkeynative
High AvailabilityNot known
Deep Packet Inspectionnative
Central Management Consolenative

3 of 10 not yet known — not recorded, which is not the same as not supported.

Specifications

Firewall TypeNetwork (NGFW / UTM)

4 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • ACOS 7.0.3platform not recorded

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-09-20. Everything below is what has changed since.

  • 2026-10-20Pricing plan addedPrice: price on requestevidence
  • 2026-10-14New versionNew version: ACOS 7.0.3evidence
  • 2026-10-07Capability addedDeep Packet Inspection: built inevidence
  • 2026-10-07Capability addedApplication Control: built inevidence
  • 2026-10-07Capability addedVPN Gateway: built inevidence
  • 2026-10-07Capability addedIntrusion Prevention (IPS): built inevidence
  • 2026-10-06Capability addedCentral Management Console: built inevidence
  • 2026-10-06Capability addedSSL/TLS Inspection: built inevidence
  • 2026-10-06Capability addedStateful Inspection: built inevidence
  • 2026-09-20Product updatedSold to: Service Providerevidence
  • 2026-09-20Platform addedRuns on Containerevidence
  • 2026-09-20Platform addedRuns on Virtual Applianceevidence
  • 2026-09-20Product createdNew product, listed in Network Firewallevidence
  • 2026-09-20Platform addedRuns on Hardware Applianceevidence
  • 2026-09-20Product updatedAlso sold to: Enterpriseevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.