CFW Instances Have Protection Policies Attached

Rule Details

Application Scenarios

After protection is enabled, CFW allows all traffic by default. You need to configure appropriate access control policies to manage and control traffic between internal servers and the Internet, prevent internal threats from spreading, and increase the depth of security strategies. For details, see Configuring Protection Rules to Block or Allow Internet Border Traffic. You can configure protection rules in the following scenarios:

• Protect the traffic of public network assets at the Internet border.
• Protect the traffic of private network assets at the Internet border.
• Protect the access traffic between VPCs, or between a VPC and an IDC.

Solution

Configure protection rules for your CFW instances.

Rule Logic

• If protection rules are configured for a CFW instance, this instance is compliant.
• If no protection rules are configured for a CFW instance, this policy is non-compliant.