Cloud Firewall - Support IPS Private IP Tracing Based on NAT Session Logs
Jan 09 2025
Cloud FirewallContent
Target customers: enterprises that deploy Internet NAT gateways for resources in virtual private clouds (VPCs) and want to prevent private IP addresses from being exposed and enterprises that want to quickly identity the private IP addresses of assets such as Elastic Compute Service (ECS) instances that are being attacked or initiating illegal outbound connections. Features released: Users can enable the IPS private IP tracing feature on the IPS Configuration page of the Cloud Firewall console. This allows the system to automatically associate the session logs of NAT gateways with IPS attack logs of Cloud Firewall and analyze the logs. Then, the system can automatically associate a five-tuple network flow in a specific capture window in each NAT session log with each IPS event log recorded by Cloud Firewall to identify at-risk private IP addresses in minutes.
Help Document
https://www.alibabacloud.com/help/cloud-firewall/cloudfirewall/user-guide/prevention-configuration