All Products
Search
Document Center

Cloud Firewall:Product overview

Last Updated:Dec 01, 2025

This topic describes the CFW and Network Detection and Response (NDR) services to help you quickly get started with Cloud Firewall.

Introduction to Cloud Firewall

Cloud Firewall consists of the CFW and NDR services.

  • CFW is a cloud security solution that provides firewalls as a service. CFW implements centralized security isolation and traffic control for your cloud assets at the Internet, virtual private cloud (VPC), and host boundaries. CFW is the first line of defense to protect your workloads in Alibaba Cloud.

    For more information about the features of CFW, see What is Cloud Firewall?

  • NDR is a cloud-native network detection and response service of the Alibaba Cloud public cloud. NDR detects and responds to advanced cyber threats in a quick manner based on bypass mirroring for network traffic and by leveraging features such as traffic filtering, full traffic retention, association and tracing, and threat analysis. NDR is the last line of defense to protect the traffic of your assets in the cloud.

    For more information about the features of NDR, see What is NDR?

Get started with Cloud Firewall

Category

CFW

NDR

Learn about Cloud Firewall

  • What is NDR?

  • Functions and features

  • Benefits

  • Common scenarios

  • Basic Concepts

  • Supported regions

Purchase Cloud Firewall

Purchase a CFW subscription and enable the NDR service

Use Cloud Firewall

  • Access management

  • Threat analysis

  • Behavior analysis

  • Backtracking analysis

  • Log analysis

API operations

List of operations by function

None