Help Center/ Cloud Firewall/ User Guide/ CFW Protection/ Enabling VPC Border Traffic Protection/ Enterprise Router Mode (Old)/ Enabling or Disabling a VPC Border Firewall
Updated on 2026-07-15 GMT+08:00
View PDF
Share

Enabling or Disabling a VPC Border Firewall

A new firewall is disabled by default. Traffic passes through the enterprise router without being forwarded to the new firewall. You can enable or disable a VPC border firewall as needed.

Prerequisites

  • You have purchased the CFW professional edition.
  • You have configured an enterprise router.

Constraints

  • Only the professional edition supports inter-VPC firewall protection.

Procedure

  1. Log in to the CFW console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. (Optional) Switch to another firewall instance. If there are multiple firewall instances, you can select a desired instance from the drop-down list in the upper left corner of the page.
  4. In the navigation pane, choose Assets > Inter-VPC Border Firewalls.
  5. In the Operation column, click Enable Protection or Disable Protection.
Parent Topic: Enterprise Router Mode (Old)