Cloud Firewall
SaaS firewall enforcing access control and intrusion prevention at the Internet, VPC, NAT, host and DNS borders.
- Provider
- alibabacloud
- Kind
- Firewall
- Category
- Security
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| defaultAction | enum | allow | deny | no | — | inherited |
| firewallType | enum | internet | vpc | nat | host | dns | no | — | inherited |
| intrusionPrevention | boolean | — | no | — | ▸ true |
| logging | boolean | — | no | — | inherited |
| managed | boolean | — | no | false | ▸ true |
| ruleCount | integer | — | no | — | inherited |
| stateful | boolean | — | no | — | inherited |
| threatIntelligence | boolean | — | no | true | inherited |
| virtualPatching | boolean | — | no | true | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "cloud-firewall", component: "alibaba-cloud-firewall" }Network ACLalibaba-network-aclECS Security Groupalibaba-security-groupNetwork ACLaws-network-aclAWS Network Firewallaws-network-firewallAmazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallSecurity groupaws-security-groupMicrosoft Entra Internet Accessazure-entra-internet-accessAzure Firewallazure-firewallNetwork Security Groupazure-network-security-groupNetwork security perimeterazure-network-security-perimeterCloudflare DNS Firewallcloudflare-dns-firewallCloudflare Gatewaycloudflare-gatewayCloudflare Network Firewallcloudflare-network-firewallGeneric firewallfirewallFirewall appliancefirewall-applianceFortinet FortiGatefortigateMikroTik RouterOSmikrotik-routerosnftablesnftablesOPNsenseopnsensePalo Alto Networks NGFWpalo-alto-ngfwpfSensepfsenseSnortsnortSuricatasuricataVyOSvyosDigitalOcean Cloud Firewallsdigitalocean-cloud-firewallCloud IDSgoogle-cloud-idsCloud NGFWgoogle-cloud-ngfwSecure Web Proxygoogle-secure-web-proxyIBM Cloud Hardware Firewallibm-firewallVPC Security Groupibm-security-groupNetworkPolicyk8s-network-policyNetwork Firewalloci-network-firewallNetwork Security Groupoci-network-security-groupSecurity Listoci-security-listSecurity Groupoutscale-security-group
# yaml-language-server: $schema=../../schema/component.schema.json # Cloud Firewall: SaaS firewall that isolates and controls traffic across cloud network borders. # The Cloud Firewall documentation describes unified security isolation and control across the # Internet border, VPC border, NAT border, host border and DNS border, integrating the Internet # firewall, VPC firewall, NAT firewall, host firewall and DNS firewall; it states that Cloud Firewall # integrates an intrusion prevention system (IPS) using real-time traffic inspection, virtual patching, # outbound threat protection and threat intelligence correlation, and that an enabled VPC firewall # filters traffic using deep packet inspection, intrusion prevention, threat intelligence, virtual # patching and access control policies. No default access control action is stated, so none is set. schemaVersion: "1" type: "component" id: "alibaba-cloud-firewall" kind: "firewall" provider: "alibabacloud" docs: "https://www.alibabacloud.com/help/en/cloud-firewall/cloudfirewall/user-guide/introduction-of-intrusion-protection-principle" defaults: managed: true intrusionPrevention: true properties: firewallType: type: "enum" values: ["internet", "vpc", "nat", "host", "dns"] threatIntelligence: type: "boolean" default: true virtualPatching: type: "boolean" default: true