Alibaba Cloud Firewall centrally manages the policies that control the traffic from the Internet to your businesses. It also controls the traffic between VPC networks, the traffic on Express Connect instances, and the traffic generated by VPN-based remote access. Cloud Firewall is embedded with an Intrusion Prevention System (IPS) and can detect outbound connections from your assets. Alibaba Cloud Firewall can also visualize network traffic and access between businesses as well as can store network traffic logs generated within the last six months.
- Easy Activation You can quickly activate Cloud Firewall without complex network configuration or image file installation. The firewalls are deployed in clusters to ensure high reliability. Smooth capacity expansion is supported.
- Unified Public IP Management Cloud Firewall centrally manages public IP addresses. It enables access control based on IP addresses, ports, domains, or applications. Micro-segmentation between ECS instances is supported.
- Embedded Intrusion Prevention System (IPS) IPS is developed based on the defense capabilities of Alibaba Cloud accumulated over the past ten years. It provides threat intelligence about the entire network at a low false positive rate. IPS can also block malicious requests. Cloud firewalls and IPS are required in classified protection evaluation.
- Victim Server Detection and Unusual Activity Interception Cloud Firewall detects victim servers and automatically intercepts outbound connections and other unusual network activities started by these servers. It also collects and analyzes all traffic data in real time.