IBM Cloud Hardware Firewall
Appliance upstream of classic infrastructure servers that filters traffic with stateful packet inspection before it reaches them.
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| defaultAction | enum | allow | deny | no | — | inherited |
| intrusionPrevention | boolean | — | no | — | inherited |
| logging | boolean | — | no | — | inherited |
| managed | boolean | — | no | false | ▸ true |
| maxRules | integer | — | no | 79 | inherited |
| ruleCount | integer | — | no | — | inherited |
| stateful | boolean | — | no | — | ▸ true |
| throughputMbps | integer | — | no | — | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "firewall", component: "ibm-firewall" }Cloud Firewallalibaba-cloud-firewallNetwork ACLalibaba-network-aclECS Security Groupalibaba-security-groupNetwork ACLaws-network-aclAWS Network Firewallaws-network-firewallAmazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallSecurity groupaws-security-groupMicrosoft Entra Internet Accessazure-entra-internet-accessAzure Firewallazure-firewallNetwork Security Groupazure-network-security-groupNetwork security perimeterazure-network-security-perimeterCloudflare DNS Firewallcloudflare-dns-firewallCloudflare Gatewaycloudflare-gatewayCloudflare Network Firewallcloudflare-network-firewallGeneric firewallfirewallFirewall appliancefirewall-applianceFortinet FortiGatefortigateMikroTik RouterOSmikrotik-routerosnftablesnftablesOPNsenseopnsensePalo Alto Networks NGFWpalo-alto-ngfwpfSensepfsenseSnortsnortSuricatasuricataVyOSvyosDigitalOcean Cloud Firewallsdigitalocean-cloud-firewallCloud IDSgoogle-cloud-idsCloud NGFWgoogle-cloud-ngfwSecure Web Proxygoogle-secure-web-proxyVPC Security Groupibm-security-groupNetworkPolicyk8s-network-policyNetwork Firewalloci-network-firewallNetwork Security Groupoci-network-security-groupSecurity Listoci-security-listSecurity Groupoutscale-security-group
# yaml-language-server: $schema=../../schema/component.schema.json # IBM Cloud Hardware Firewall: an appliance placed upstream of classic infrastructure servers that # "blocks unwanted traffic from a server before the traffic ever reaches the server", using # stateful packet inspection, with up to 79 rules and interface speeds of 100, 200, 1000 and # 2000 Mbps ("About Hardware Firewall"). End of marketing 17 December 2025, end of support # 31 December 2026. No default rule posture is documented, so defaultAction is left unset. schemaVersion: "1" type: "component" id: "ibm-firewall" kind: "firewall" provider: "ibm" docs: "https://cloud.ibm.com/docs/hardware-firewall-shared?topic=hardware-firewall-shared-about-hardware-firewall-shared" defaults: managed: true stateful: true properties: throughputMbps: type: "integer" maxRules: type: "integer" default: 79