Updated on 2026-07-15 GMT+08:00

Disabling VPC Border Protection

Scenario

If your workloads are blocked by mistake, you can temporarily disable the VPC border firewall. The firewall does not check any traffic while it is disabled.

If you no longer need VPC border traffic protection, manually restore the configuration of the enterprise router after disabling the protection. For details, see Restoring the Enterprise Router Configuration After VPC Border Protection Is Permanently Disabled.

Impacts on Services

After the firewall is disabled, traffic at the VPC border will not be protected. Exercise caution when performing this operation.

Disabling a VPC Border Firewall (New Edition)

  1. Log in to the CFW console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. (Optional) Switch to another firewall instance. If there are multiple firewall instances, you can select a desired instance from the drop-down list in the upper left corner of the page.
  4. In the navigation pane, choose Assets > Inter-VPC Border Firewalls.
  5. Click the next to Firewall Status and click OK in the displayed dialog box to enable the VPC border firewall.

Disabling a VPC Border Firewall (Old)

  1. Log in to the CFW console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. (Optional) Switch to another firewall instance. If there are multiple firewall instances, you can select a desired instance from the drop-down list in the upper left corner of the page.
  4. In the navigation pane, choose Assets > Inter-VPC Border Firewalls.
  5. In the Operation column of a policy, click Disable Protection.