Product feature and documentation change log - Cloud Firewall

This topic describes the release notes for features and documentation of Cloud Firewall.

2023

Release date	Feature	Change type	Edition
2023-11-15	Access control for virtual private cloud (VPC) firewalls is optimized.	Feature iteration	Enterprise Edition and Ultimate Edition
2023-11-07	You can set validity periods for access control policies on the Internet firewall, VPC firewalls, and NAT firewalls.	New feature	All editions
2023-11-02	The Security Center vulnerability scan address book is available in recommended intelligent address books.	New feature	All editions
2023-11-01	NAT Firewall is available in the Singapore region.	New feature	Premium Edition, Enterprise Edition, and Ultimate Edition
2023-11-01	Cloud Firewall displays prompts for web scanner server IP addresses from Security Center.	New feature	All editions
2023-09-19	NAT Firewall is generally available.	New feature	Premium Edition, Enterprise Edition, and Ultimate Edition
2023-08-08	Intrusion prevention is enhanced to defend against proxy-based attacks. Cloud Firewall displays originating IP addresses and the X-Forwarded-For header field to help trace attack sources.	Feature iteration	All editions
2023-08-08	The weekly report feature is available for Cloud Firewall (pay-as-you-go).	New feature	Cloud Firewall that uses the pay-as-you-go billing method
2023-08-03	Cloud Firewall can protect the elastic IP addresses (EIPs) of Network Load Balancer (NLB) instances.	Feature iteration	All editions
2023-08-02	Automatic asset protection is available for Cloud Firewall (pay-as-you-go).	New feature	Cloud Firewall that uses the pay-as-you-go billing method
2023-07-25	The log audit feature is available for Cloud Firewall (pay-as-you-go). Logs are retained for seven days by default.	New feature	Cloud Firewall that uses the pay-as-you-go billing method
2023-07-20	Cloud Firewall can protect the EIPs of Application Load Balancer (ALB) instances.	Feature iteration	All editions
2023-07-18	When creating a VPC firewall for a Basic Edition transit router, you can allocate a custom CIDR block to the VPC created for the firewall.	Feature iteration	Enterprise Edition and Ultimate Edition
2023-07-04	Pay-as-you-go savings plans are available for Cloud Firewall. Use savings plans to offset billable items and reduce costs.	New feature	Cloud Firewall that uses the pay-as-you-go billing method
2023-06-30	VPC Firewall billing is simplified. Charges are based on the number of VPC firewalls you create, not the quota consumed.	Feature iteration	Enterprise Edition and Ultimate Edition
2023-05-15	VPC firewalls can protect traffic from VPN gateways deployed with Cloud Enterprise Network (CEN) transit routers.	Feature iteration	Enterprise Edition and Ultimate Edition
2023-05-04	Cloud Firewall is available in the Philippines (Manila) region.	Feature iteration	All editions
2023-03-17	You can switch the billing method for Cloud Firewall from pay-as-you-go to subscription.	New feature	Cloud Firewall that uses the pay-as-you-go billing method
2023-01-09	Multi-account management is available in the Premium Edition, Enterprise Edition, and Ultimate Edition.	Feature iteration	Premium Edition and Enterprise Edition

Before 2023

2022

Release date	Feature	Description	Change type	Edition
2022-11-09	VPC Firewall	Automatic traffic redirection mode is supported when configuring a VPC firewall for an Enterprise Edition transit router of a CEN instance.	New feature	Enterprise Edition and Ultimate Edition
2022-11-08	Cloud Firewall release	Subscription-based Cloud Firewall can be manually released.	New feature	Premium Edition, Enterprise Edition, and Ultimate Edition
2022-10-27	Settings	Notifications for log storage capacity can be configured.	New feature	Premium Edition, Enterprise Edition, and Ultimate Edition
2022-09-26	Log analysis	Switches to filter sub-types of Internet traffic logs and VPC traffic logs are available.	New feature	Premium Edition, Enterprise Edition, and Ultimate Edition
2022-08-11	Specifications	The Quota for Additional Policy parameter is available on the purchase page.	New feature	Premium Edition, Enterprise Edition, and Ultimate Edition
2022-08-03	Specifications	The Protected VPC Traffic parameter is available on the purchase page.	New feature	Enterprise Edition and Ultimate Edition
2022-08-01	VPC Firewall	The Start Check Now button is available for VPC firewalls.	New feature	Enterprise Edition and Ultimate Edition
2022-02-25	Overview	Traffic topology visualization is supported.	New feature	Enterprise Edition and Ultimate Edition
2022-01-11	Security gateway	Cloud Firewall is upgraded.	Feature iteration	All editions
2022-01-11	Supported regions	VPC Firewall is available in more regions.	New feature	Enterprise Edition and Ultimate Edition

2021

Release date	Feature	Description	Change type	Edition
2021-12-22	Multi-account management	VPC firewalls and CEN instances across different Alibaba Cloud accounts can be managed centrally.	New feature	Ultimate Edition
2021-11-29	Log audit	Policy IDs can be used to search for traffic logs on the Log Audit page.	New feature	Premium Edition, Enterprise Edition, and Ultimate Edition
2021-11-29	Outbound connection	SSL traffic analysis is supported on the Outbound Connection page.	New feature	Premium Edition, Enterprise Edition, and Ultimate Edition
2021-11-22	VPC Firewall	API operations for VPC firewalls are released.	New feature	Enterprise Edition and Ultimate Edition
2021-11-17	VPC Firewall	If a VPC where WUYING Workspace is deployed connects to a Basic Edition transit router, you can enable VPC firewalls for other VPCs connected to that transit router.	New feature	Enterprise Edition and Ultimate Edition
2021-09-30	Log storage	The minimum duration for custom log storage is 7 days.	Feature iteration	Enterprise Edition and Ultimate Edition
2021-08-17	Address book management	Address books can be exported.	Feature iteration	All paid editions
2021-07-30	Multi-account management	Multiple Alibaba Cloud accounts can be added as members through multi-account management.	Feature iteration	Ultimate Edition
2021-07-22	Log storage	Log storage duration can be customized.	New feature	Enterprise Edition and Ultimate Edition
2021-07-21	Supported regions	Cloud Firewall is available in the US (Silicon Valley) region.	Feature iteration	All paid editions
2021-07-19	Attack prevention	A new API operation for attack prevention is released: DescribeVulnerabilityProtectedList.	New feature	All paid editions
2021-07-06	Multi-account management	API operations for multi-account management are released, including AddInstanceMembers.	New feature	All paid editions
2021-07-02	Access control policies	A new API operation for access control policies is released: ModifyControlPolicyPosition.	New feature	All paid editions
2021-06-24	Overview	The Overview page is updated.	Feature iteration	All paid editions
2021-04-23	Intrusion prevention	Geographic locations of attackers are displayed in the Intrusion Prevention module.	Feature iteration	All paid editions
2021-04-16	VPC Firewall	Traffic passing through custom routes of CEN transit routers can be protected.	New feature	Enterprise Edition and Ultimate Edition
2021-03-31	Multi-account management	Multi-account management is supported.	New feature	Ultimate Edition
2021-02-25	Vulnerability prevention	The Vulnerability Prevention page is optimized.	Feature iteration	Enterprise Edition and Ultimate Edition
2021-02-06	Supported regions	Internet Firewall is available in the UK (London) region. Secure forward proxies are supported in the China (Chengdu) region.	Feature iteration	All paid editions
2021-02-05	Overview	The Overview page is updated.	Feature iteration	All paid editions
2021-01-28	Traffic analysis	Traffic analysis details can be downloaded.	Feature iteration	All paid editions
2021-01-19	Prevention configuration	IPS block modes are supported for intrusion prevention, allowing you to block intrusions based on different modes.	New feature	All paid editions
2021-01-19	Supported regions	Internet Firewall is available in the China (Guangzhou) region.	Feature iteration	All paid editions

2020

Release date	Feature	Description	Change type	Edition
2020-12-29	Intrusion prevention	Attack payloads are included in IPS blocking records.	New feature	All paid editions
2020-12-10	Access control	Access control policies can be located by searching for IP addresses.	Feature iteration	All paid editions
2020-12-10	Internet Firewall	Policy IDs are provided for the Internet firewall.	Feature iteration	All paid editions
2020-12-10	Internet Firewall	The policy export feature is introduced.	New feature	All paid editions
2020-12-03	Address books	Cloud asset types are displayed under the Cloud Address Books option for inbound access control policies.	Feature iteration	All paid editions
2020-12-03	Overview	Display of brute-force attack and scanning risk statistics on the Overview page is optimized.	Feature iteration	All paid editions
2020-12-03	Access control	Lists on the Access Control page are optimized.	Feature iteration	All paid editions
2020-11-19	Auto-renewal	Auto-renewal is supported.	New feature	All paid editions
2020-07-30	Security group check	Security group configuration checks are supported.	New feature	All paid editions
2020-06-04	Internet Firewall	The strict mode of access control policies is optimized.	Feature iteration	All paid editions
2020-06-04	Policy backup and rollback	Policy rollback is supported.	New feature	Enterprise Edition and Ultimate Edition
2020-04-16	Breach awareness	The Breach Awareness page is introduced.	Feature iteration	All paid editions
2020-03-19	Internal Firewall	Enterprise policy groups are supported.	New feature	Enterprise Edition and Ultimate Edition
2020-03-19	Internet Firewall	Strict mode for access control policies is supported.	New feature	All paid editions
2020-02-21	Outbound connection	Mining activities over outbound connections are displayed.	New feature	All paid editions
2020-02-21	Vulnerability prevention	The most commonly encountered vulnerabilities are displayed.	New feature	All paid editions
2020-02-21	Alerting	The alerting feature is optimized.	New feature	All paid editions
2020-02-21	Internal Firewall	Internal firewalls are optimized.	New feature	Enterprise Edition and Ultimate Edition

2019

Release date	Feature	Description	Change type	Edition
2019-12	Internet Firewall	Default allow policies are supported. You can change default inbound policies from Deny to Allow for security groups.	New feature	All paid editions
2019-12	Internet Firewall	When Destination Type of an access control policy is set to Domain Name, Cloud Firewall resolves domain names and displays the results.	New feature	All paid editions
2019-12	VPC Firewall	The VPC firewall creation page is updated.	Feature iteration	All paid editions
2019-10	Log reports	Log reports are supported. Subscribe to reports and view traffic data collected by the log analysis feature.	New feature	All paid editions
2019-09	Intelligent policies	Intelligent policies can be delivered to protect your networks and hosts against security threats.	New feature	All paid editions
2019-05	Internet Firewall	Region-based blocking is supported, allowing access only from specified regions to prevent unauthorized logons and brute-force attacks.	New feature	All paid editions
2019-01	Internet exposure	Internet access control is supported. Cloud Firewall analyzes access relationships among services and displays results without any configuration.	New feature	Enterprise Edition

2018

Release date	Feature	Description	Change type	Edition
2018-08	Prevention configuration	The IPS whitelist feature is introduced. Create IPS whitelists to allow access only from trusted sources.	New feature	All paid editions