5G Firewall (5GFW)

The BroadForward 5G Firewall (5GFW) is a complete, software‑based signaling security solution that protects 5G Standalone networks against attacks, unauthorized senders, malformed messages, topology exposure and other signaling‑layer threats.

Deployment options:

Bare metal
Virtual machine
Container
Cloud

Features:

Unrivaled flexibility
Transparent mode support
Comprehensive SBA protection
Fully GSMA FS.36 compliant
Unified security suite
Flexible deployment models
Completely GUI‑based
Active anomaly detection
Carrier‑grade

Latest firewall requirements

Firewall technology has evolved from fixed, black‑box rule sets into flexible, multi‑access security solutions capable of adapting to new threats and new network technologies. Many existing security products, however, do not provide consistent protection across 2G, 3G, 4G and 5G, nor do they offer the flexibility required to comply with the latest industry recommendations.

With the rise of signaling‑layer attacks, governments and regulators worldwide are demanding more stringent security measures. Industry bodies such as the GSMA have published new guidelines, including FS.36, to address threats emerging during the transition to 5G Standalone.

Years of BFX in production

0 +

Operators running BFX globally

GSMA GLOMO winner

0 x

Trusted by

Multi-tenancy

One SEPP instance, multiple operators, full traffic separation.

Each tenant manages their own inbound and outbound N32 routes via the onboard API, no shared configuration, no cross-tenant visibility.

Lorem ipsum dolor sit amet. Et fuga totam eum galisum sint est cupiditate molestiae in error dolor ea ducimus dolores. Sed fugiat optio sed mollitia voluptas aut praesentium voluptatem.

Id dolor accusantium eum quod repellendus est laboriosam maxime et recusandae assumenda. Et quisquam consequatur et totam quos est corrupti maxime nam molestiae mollitia quo dolores eligendi.

Trusted by professionals

See for yourself why professionals choose BroadForward.

An elegant and innovative solution to a legacy problem of critical voice networks — fulfils an immediate market need

This not only saves money, but critically speeds time to market

An elegant and innovative solution to a legacy problem of critical voice networks — fulfils an immediate market need

This not only saves money, but critically speeds time to market

One of the few independent signaling experts successful in winning business from operators looking for a multi-technology signaling platform

BroadForward’s solutions have already strengthened our signaling capabilities, driving greater operational efficiency

One of the few independent signaling experts successful in winning business from operators looking for a multi-technology signaling platform

Specifications

Everything you need to evaluate, in one place

Interfaces & protocols

N32 Interfaces N32C and N32F with TLS
N32 Interfaces Registration, service discovery, subscription & notification
Peer discovery Dynamic via DNS for remote SEPP
Monitoring Onboard gRPC interface for HTTP traffic forwarding
TLS Up to version 1.3
PRINS Supported

Security & filtering

3GPP compliance TS 33.501
Certificate management Create, upload/download, validity checking
Routing Flexible routing on any parameter
Traffic control Egress/Ingress limitation
5G firewalling GSMA FS.36 (roadmap)
Load balancing Supported

Get more product information

Download the latest datasheet for the BroadForward SEPP and share it with your team for a complete technical overview.

Full technical specifications and feature list
Deployment architecture and integration overview

FAQ

We are happy to help you with any questions.

Deployment

From first call to full control without disrupting your network

BroadForward SEPP is 100% software-based and hardware-agnostic. No proprietary operating systems, no specialised appliances. Every deployment model runs identical, full-featured software, your choice of platform is an operational decision, not a capability tradeoff.