Firewall

A stateful packet filter that allows or denies traffic by rule.

Category: Security
Properties: 6
Components: 36
Rules: 0

Properties · 6 defined by this kind

A node of this kind resolves each property from its own props, then the component's defaults, then the default below.

property	type	values	required	default
defaultAction	enum	allow \| deny	no	—
intrusionPrevention	boolean	—	no	—
logging	boolean	—	no	—
managed	boolean	—	no	false
ruleCount	integer	—	no	—
stateful	boolean	—	no	—

Rules for this kind · 0

No rule selects this kind or its category. Governance calls that a recorded gap.

Components · 36

vendor-neutral

Generic firewallfirewallgenericthe kind itself

alibabacloud

Cloud Firewallalibaba-cloud-firewall2 defaults Network ACLalibaba-network-acl2 defaults ECS Security Groupalibaba-security-group3 defaults

aws

Network ACLaws-network-acl5 defaults AWS Network Firewallaws-network-firewall4 defaults Amazon Route 53 Resolver DNS Firewallaws-route53-dns-firewall5 defaults Security groupaws-security-group5 defaults

azure

Microsoft Entra Internet Accessazure-entra-internet-access1 defaults Azure Firewallazure-firewall3 defaults Network Security Groupazure-network-security-group5 defaults Network security perimeterazure-network-security-perimeter2 defaults

cloudflare

Cloudflare DNS Firewallcloudflare-dns-firewall1 defaults Cloudflare Gatewaycloudflare-gateway3 defaults Cloudflare Network Firewallcloudflare-network-firewall3 defaults

default

Firewall appliancefirewall-appliance2 defaults Fortinet FortiGatefortigate4 defaults MikroTik RouterOSmikrotik-routeros4 defaults nftablesnftables4 defaults OPNsenseopnsense4 defaults Palo Alto Networks NGFWpalo-alto-ngfw5 defaults pfSensepfsense4 defaults Snortsnort5 defaults Suricatasuricata5 defaults VyOSvyos3 defaults

digitalocean

DigitalOcean Cloud Firewallsdigitalocean-cloud-firewall3 defaults

gcp

Cloud IDSgoogle-cloud-ids3 defaults Cloud NGFWgoogle-cloud-ngfw5 defaults Secure Web Proxygoogle-secure-web-proxy2 defaults

ibm

IBM Cloud Hardware Firewallibm-firewall2 defaults VPC Security Groupibm-security-group3 defaults

k8s

NetworkPolicyk8s-network-policy3 defaults

oci

Network Firewalloci-network-firewall2 defaults Network Security Groupoci-network-security-group6 defaults Security Listoci-security-list5 defaults

outscale

Security Groupoutscale-security-group2 defaults

Source

1# yaml-language-server: $schema=../schema/kind.schema.json
2# Carries the allow/deny rule set a policy check reads, which load-balancer and network-fabric do not. defaultAction and logging have no default so a rule can flag a filter that never declared its posture.
3schemaVersion: "1"
4type: "kind"
5id: "firewall"
6category: "security"
7properties:
8  defaultAction:
9    type: "enum"
10    values: ["allow", "deny"]
11  stateful:
12    type: "boolean"
13  ruleCount:
14    type: "integer"
15  logging:
16    type: "boolean"
17  intrusionPrevention:
18    type: "boolean"
19  managed:
20    type: "boolean"
21    default: false

The same page as markdown, for an agent: /catalogue/kinds/firewall.md