Which Dimensions of Access Control Are Supported by CFW?

CFW allows you to configure ACL policies based on a 5-tuple, IP address group, service group, domain name, application, blacklist, and whitelist. You can also configure ACL policies based on the intrusion prevention system (IPS). The IPS works in observation or block mode. In block mode, CFW detects and blocks traffic that matches the IPS rules. For details, see Configuring Access Control Policies.