Apply intelligent policies

Limits

Cloud Firewall automatically generates intelligent policies only for the Internet firewall.

You must manually create access control policies for internal and VPC firewalls. For more information, see Access control on an internal firewall between ECS instances and Access control for outbound and inbound traffic on the Internet firewall.

Procedure

1. Log on to the Cloud Firewall console.
2. In the left-side navigation pane, click Access Control.
3. On the Internet Firewall tab, click Outbound Policies or Inbound Policies based on your business requirements.
4. Find the Intelligent Policy section and click View Recommended Policy.
5. In the Intelligent Policy Recommendation panel, select and apply intelligent policies.
   

   The Intelligent Policy Recommendation panel lists the inbound and outbound access control policies that Cloud Firewall recommends for all your public IP addresses. You can click View Details in the Actions column to view all the intelligent policies that Cloud Firewall recommends for the public IP address and also Recommendation Reason. If a large number of policies are recommended, you can filter them by Recommendation Type and Destination.

   Note We recommend that you allow access to the open ports that provide services for an open public IP address on the Internet firewall and deny access to other ports. This reduces the exposure of your assets to the Internet.

   You can select one of the following methods to apply intelligent policies to your assets:

   Warning Before you apply an intelligent policy, make sure that you understand its meaning and the possible impacts on services.
   • In the list of recommended intelligent policies, select one or more policies and click Apply Selected.
   • In the list of recommended intelligent policies, find the required policy and click Apply Policy in the Actions column.