OCI Network Firewall

OCI Network Firewall is a cloud-native, next-generation firewall and intrusion prevention service built natively into Oracle Cloud Infrastructure to deliver advanced Layer 7 traffic inspection, threat prevention, and packet filtering across virtual cloud networks (VCNs). Powered by industry-leading Palo Alto Networks technology and delivered as a fully managed, turnkey OCI service, OCI Network Firewall protects cloud workloads without requiring customers to deploy, license, and maintain third-party firewall virtual machine clusters.

The service provides comprehensive inline security inspection, evaluating north-south internet traffic and east-west inter-VCN communications. Key capabilities include stateful network filtering, Layer 7 application inspection (App-ID), intrusion prevention system (IPS) with threat signature updates, URL filtering based on web categories, bidirectional SSL/TLS forward proxy decryption, and custom security rulesets. Because it is natively managed by OCI, the firewall automatically scales with traffic demands, features built-in high availability across availability domains, and streams real-time threat logs directly into OCI Logging.

OCI Network Firewall integrates with OCI Virtual Cloud Network (VCN) routing, OCI Transit Routing, OCI Logging, OCI Monitoring, and third-party SIEM platforms such as Splunk and Microsoft Sentinel. Primary enterprise use cases include inspecting inbound internet traffic before it reaches production databases and application tiers, enforcing egress web filtering to stop data exfiltration, isolating sensitive workloads in transit routing topologies, and achieving compliance with PCI-DSS and HIPAA network perimeter standards. OCI Network Firewall delivers enterprise-grade NGFW protection with cloud-native simplicity and high throughput.