Alibaba Cloud Cloud Firewall

Alibaba Cloud Cloud Firewall is a cloud-native firewall-as-a-service that centrally manages and protects traffic for resources running on Alibaba Cloud. It is designed for cloud environments, so customers do not need to deploy or scale firewall appliances themselves.

Cloud Firewall controls traffic at several boundaries: internet firewall for inbound and outbound internet traffic, VPC firewall for traffic between virtual private clouds and across Cloud Enterprise Network connections, NAT firewall for outbound traffic from private resources, and host firewall for east-west traffic between instances. It combines access control policies with intrusion prevention, virtual patching, threat intelligence, and detection of compromised hosts and outbound malicious connections. Asset discovery and traffic visualization show which services are exposed to the internet, while logs integrate with Alibaba Cloud Simple Log Service for analysis and audit.

Organizations use Cloud Firewall to reduce their cloud attack surface, segment workloads, block intrusions and meet China's Multi-Level Protection Scheme (MLPS) and other compliance requirements for cloud network security.