CFW Best Practice Summary

This section summarizes the common application scenarios of Cloud Firewall (CFW) and provides detailed solutions and operation guide to help you easily protect cloud services.

CFW Best Practices

**Table 1** CFW best practices
Category	Reference
Purchasing CFW via API	Purchasing and Querying CFW via API
Batch migration policy	Migrating Security Policies to CFW in Batches
Using CFW together with other cloud services such as WAF	Configuration Suggestions for Using CFW with WAF, Advanced Anti-DDoS, and CDN
Configuring an access control policy	Allowing Internet Traffic Only to a Specified Port
	Allowing Outbound Traffic from Cloud Resources Only to a Specified Domain Name
	Configuring a Protection Rule to Protect Traffic Between Two VPCs
	Configuring a Protection Rule to Protect SNAT Traffic
Configuring intrusion prevention	Using CFW to Defend Against Access Control Attacks
	Using CFW to Defend Against Hacker Tools
	Using CFW to Defend Against Suspicious DNS Activities
	Using CFW to Defend Against Trojans
	Use CFW to Defend Against Vulnerability Exploits
	Using CFW to Defend Against Worms
Enterprise project management	Using CFW to Protect Enterprise Resources
Multi-account management	Using CFW to Protect EIPs Across Accounts
Multi-account management	Using CFW to Protect VPCs Across Accounts