Editions

CFW provides the standard edition, and the professional edition. You can use access control, intrusion prevention, traffic analysis, and log audit functions on the console.

For details about the functions, see Features. For details about the differences, see Editions.

**Table 1** Editions
Edition	Billing Mode	Protected Object	Description
Basic edition	Yearly/Monthly	EIP	Provides refined access control policy configuration for EIPs. Meets log query requirements.
Standard edition	Yearly/Monthly	EIP	Meets graded protection requirements. Provides network security protection to defend against network intrusions and server compromises.
Professional edition	Pay-per-use Yearly/Monthly	EIP VPC	Meets graded protection or key event assurance requirements. Provides network security protection to defend against network intrusions and server compromises, and control the accesses between internal networks.

**Table 2** Editions
Feature		Standard	Professional (Yearly/Monthly)	Professional (Pay-per-Use)
Protected object	IPv4	√	√	√
Protected object	IPv6	×	×	×
Protection specifications	Protected EIPs	20 (can be increased to 2000)	50 (can be increased to 2000)	1000 (upper limit)
	Protected VPCs	×	2 (can be increased to 500)	20 (upper limit)
	Internet Border Protection Bandwidth	10 Mbit/s (can be increased to 2000 Mbit/s)	50 Mbit/s (can be increased to 2000 Mbit/s)	1 Gbps
	VPC Border Protection Bandwidth	×	200 Mbit/s (can be increased with the number of VPCs)	1 Gbps
Access traffic control	ACL access control for public network assets (based on IP addresses, domain names, domain groups, and geographical locations)	√	√	√
	North-south traffic protection and cloud resource (such as EIP) protection against risks on the Internet	√	√	√
	North-south traffic audit and log query	√	√	√
	East-west traffic protection, asset protection between VPCs, and full traffic analysis	×	√	√
	East-west traffic monitoring to obtain inter-VPC traffic data in real time	×	√	√
Protection policies	Intrusion prevention system (IPS)	√	√	√
	Custom IPS signature database	×	√	√
	Virtual patching	√	√	√
	Sensitive directories and reverse shells	√	√	√
	Antivirus	×	√	√