TopFirewall: Your digital bouncer – managed by conova

Our sophisticated security solutions protect you from unwanted attackers. Our experts design an individual security concept based on your requirements. Your advantage: You enjoy complete security with low running costs as well as access to our certified specialists’ know-how.

We design, manage and maintain your TopFirewall system for you. This includes: hardware exchange, regular software updates, daily backups and proactive monitoring. The conova security experts work closely with your IT team to guarantee that everything is set up according to your specific needs.

Anführungsstriche der conova Corporate Identity
  • Secure: sophisticated, individual security solution
  • Reliable: proactive monitoring around the clock
  • Current: regular security updates
  • Automatic: maintenance and license management by conova
  • Professional: security experts work closely with your own IT
  • Constant: 24/7 protection by certified specialists
  • Combinable with TopCloud
TopFirewall 1)SMLXL
Firewall throughput2 Gbit/s3.2 Gbit/s4.8 Gbit/s8.5 GBit/s
SD-WAN-throughput720 Mbit/s800 Mbit/s1.5 Gbit/s2.1 GBit/s
Concurrent Sessions80,000150,000300,000400,000
Physical Ports5x 1000Base-T12x 1000Base-T
4x 1G SFP
12x 1000Base-T
4x 1G SFP
8x 1000Base-T
2x 10G SFP+
Protected IPs & C2S/S2S VPNsunlimitedunlimitedunlimitedunlimited
FeaturesIPSec VPN | Application Firewall | Traffic Shaping | Quality of Service (QoS) | URL Filter
SSL VPN + mobile VPN AppOptionalOptionalOptionalOptional
Malware ProtetionOptionalOptionalOptionalOptional
Advanced Threat Protection 2)OptionalOptionalOptionalOptional
LTE Backup 3)OptionalOptionalOptionalOptional
selection of an availability zone 4)OptionalOptionalOptionalOptional
 included support hours4 hours7 Std.9 Std.14 Std.
Configuration changesvia the hourly
via the hourly
via the hourly
via the hourly
Price per monthupon requestupon requestupon requestupon request
Set-up costs (one-time expense)upon requestupon requestupon requestupon request

1) These models are physical firewalls. For further details regarding our virtualized firewall solutions, please refer to the TopFirewall virtual data sheet.
2) conova uses the Barracuda Cloud for the ATP service (see: This requires an upload of data and the upstream bandwidth is charged.
3) Excluding data contract and SIM-card. Mobile phone reception required.
4) Choose from the following availability zones: VZ-DC4, VZ-DC5 in the Salzburg city area, VZ-DC6 in the region of southern Salzburg.

• All performance data according to manufacturer information maximally up to the above values.
• Firewalls located at the customer site require on-site contact, which is available in the selected SLA period. Error diagnostics and – if possible – troubleshooting are done remotely. Replacement of firewalls at the customer site is done by means of shipping the replacement hardware on the next working day. Provision of a cold standby or cluster firewall at the customer site is optional. On-site exchange by conova is only done through a separate agreement. Site-2-site tunnel monitoring is available optionally if the customer can be reached by phone during the SLA period.

Contract details:
• Minimum contract period 36 months.
• Errors and changes reserved.

We would be happy to advise you!