After you purchase Cloud Firewall, you can protect assets and traffic on the Internet boundary, between VPCs, and between VPCs and on-premises data centers (IDCs). This allows you to establish the first line of network defense for your cloud services. This topic describes how to purchase Cloud Firewall.
Prerequisites
Your Alibaba Cloud account must be real-name verified. For more information, see Which users need to complete account verification?.
To purchase the Subscription edition of Cloud Firewall, you must use an account that has completed enterprise real-name verification.
Familiarize yourself with the features and billing methods of different Cloud Firewall editions.
To view the features of different Cloud Firewall editions, see Edition overview or Features.
For more information about the billing of the Subscription edition of Cloud Firewall, see Subscription 2.0.
For more information about the billing of the Pay-As-You-Go edition of Cloud Firewall, see Pay-As-You-Go 2.0.
Activate Cloud Firewall
You can activate the Subscription or Pay-As-You-Go edition of Cloud Firewall based on your business requirements.
Activate the Subscription edition
Go to the Cloud Firewall purchase page and set Product Type to Subscription 2.0.
Configure the specifications and then click Buy Now to complete the payment.
Configuration item
Description
Edition
Select the Cloud Firewall edition that you want to purchase. After you select an edition, you can view the description on the page to learn about the features of different editions.
Automatic Protection For Internet Assets
Select whether to automatically protect all Internet assets with the firewall.
Number Of Additional Firewall Instances
If the number of instances provided by the edition is insufficient for your business, you can purchase additional instances for the Internet border, VPC border, and NAT border.
NoteCloud Firewall Premium Edition does not support VPC firewalls.
Scalable Bandwidth
If the bandwidth provided by the edition is insufficient for your business, you can purchase additional bandwidth for the Internet border, VPC border, and NAT border.
NoteCloud Firewall Premium Edition does not support VPC firewalls.
Elastic Traffic
The burstable traffic feature is enabled by default and cannot be disabled. If your actual service bandwidth exceeds the purchased bandwidth, the excess traffic is billed on a pay-as-you-go basis. The price is USD 0.06/GB.
Sensitive Data Leak Detection
Select whether to enable sensitive data detection for outbound connections.
Log Analysis
Select whether to enable the log analysis feature for Cloud Firewall.
By default, Cloud Firewall stores audit logs for the last 7 days. To store logs for a longer period, meet compliance requirements, or export logs, you must enable the log analysis feature. This feature lets you store log data for a custom period of 7 to 730 days.
NoteFor more information, see Log Analysis and Billing of the Log Analysis Feature.
Log Storage Capacity
Duration
Select the subscription duration and select whether to enable Auto Renewal.
NoteIf you enable auto-renewal, the renewal cycle corresponds to the subscription duration. For example, if you purchase a 6-month subscription and enable Auto Renewal, the service is automatically renewed for 1 month upon expiration.
Activate the Pay-As-You-Go edition
Go to the Cloud Firewall purchase page and set Product Type to Pay-As-You-Go.
On the Cloud Firewall (Pay-As-You-Go) page, configure the specifications.
Billing Cycle: The default is Daily.
Automatic Asset Protection: Specifies whether to enable automatic asset protection.
If you enable Automatic Asset Protection, Cloud Firewall automatically adds your public assets to its protection scope after you activate the pay-as-you-go Cloud Firewall. This enables the firewall and attack protection to reduce the security risks of your public assets.
NoteAfter you activate Cloud Firewall, if you do not need automatic asset protection, you can go to the Cloud Firewall console and turn off the Automatic Protection for New Assets switch. For more information, see Internet firewall.
Read and accept the Cloud Firewall (Pay-As-You-Go) Terms of Service. Then, click Buy Now and complete the payment.
After you purchase a pay-as-you-go Cloud Firewall instance, Alibaba Cloud settles the bill for the previous day at 18:00 every day based on your actual usage. You are not charged if you do not use the service.
Next steps
After you purchase Cloud Firewall, you can refer to documents such as Getting started with the Subscription edition to configure intrusion prevention policies, view network traffic analysis, and configure access control policies.
More operations
View the service edition and remaining protection period of Cloud Firewall
On the upper-right corner of the Overview page, you can view the edition information of Cloud Firewall and perform quick operations such as renewal and upgrade. For more information, see Data overview.
Renew the Cloud Firewall service
When a Subscription edition of Cloud Firewall expires, it no longer provides security protection. To ensure continuous protection, you must renew the service before its expiration date.
Upgrade and downgrade
To ensure the features of your Cloud Firewall edition meet your business requirements, Upgrade and downgrade edition and its configurations as needed.
Seamlessly switch between Pay-As-You-Go and Subscription
You can Change the billing method of Cloud Firewall between subscription and pay-as-you-go based on your business requirements.
Release Cloud Firewall
To release the Cloud Firewall instance, follow the instructions in Release an instance.