Purchasing Yearly/Monthly CFW

Yearly/Monthly payment is a prepaid billing mode and is cost-effective for long-term use.

You can purchase multiple firewalls in a region and assign them different resources and policies.

Prerequisites

To use an IAM user, ensure the IAM user has been granted the BSS Administrator and CFW FullAccess permissions. For details, see Creating a User Group and Granting Permissions.

Constraints

CFW can be used only in the region where it was purchased. To use it in another region, switch to that region and purchase it.
The pay-per-use billing mode cannot be changed to yearly/monthly for CFW.

Editions

CFW supports the yearly/monthly (prepaid) and pay-per-use billing modes.

Yearly/Monthly CFW instances support the standard edition, and professional edition.
Pay-per-use CFW instances support the professional edition.

The application scenarios for different editions are as follows:

Standard: Suitable for SMEs that need to defend against network intrusions and server compromises, or need to obtain Multi-Layer Protection Scheme (MLPS) certification.
Professional: Suitable for large and medium-sized enterprises that need to defend against network intrusions and server compromises, control internal network security, obtain MLPS certification, or have key event assurance requirements.

For details about the differences between editions, see Editions.

Purchasing CFW

Perform the following operations to purchase a firewall instance of the desired edition.

Standard Edition Firewalls

Log in to the CFW console.
Click in the upper left corner of the management console and select a region or project.

Click Buy CFW and configure parameters on the Buy CFW page. The following table describes parameters.

**Table 1** Parameters for purchasing the standard edition CFW
Parameter		Description
Basic Settings	Billing Mode	Select Yearly/Monthly.
Basic Settings	Region	Region where the CFW is to be purchased. CFW can be used in the selected region only. To use CFW in another region, switch to the corresponding region and then purchase it. For details about the regions where CFW is available, see Can CFW Be Used Across Clouds or Regions?
Edition		Select the standard edition.
Extended Packages	Protected EIPs	(Optional) The number of additional EIPs to be protected. Value range: 0 to 2,000. Configure additional capacities to purchase. For example, 20 EIPs are protected by the standard edition (included in the package fee) by default. If you have 65 EIPs, you only need to enter 45.
Extended Packages	Internet Border Protection Bandwidth	(Optional) Additional peak inbound or outbound traffic. The value range is 0 to 50,000 Mbit/s per month. (The value must be an integer multiple of 5.) Configure additional capacities to purchase. For example, up to 10 Mbit/s is protected by the standard edition (included in the package fee) by default. If your protection traffic is 200 Mbit/s, you only need to enter 190. The protection traffic is determined based on the maximum inbound or outbound traffic, whichever is higher.
Resource Management	Firewall Name	Firewall name. It must meet the following requirements: Only letters (A to Z and a to z), numbers (0 to 9), and the following characters are allowed: -_ The value can contain 1 to 48 characters.
	Enterprise Project	Enterprise project. In the drop-down list, select an enterprise project. The firewall will be put under that enterprise project for billing management, but its protection scope will not be affected. The firewall can protect the resources of all enterprise projects. This option is only available if you have enabled enterprise projects, or if you are logged in using an enterprise master account. To use this function, enable Enterprise Center. You can use an enterprise project to centrally manage your cloud resources and members by project. Value default indicates the default enterprise project. The original resources of your account and the resources that are not allocated to any enterprise projects under your account are displayed in the default enterprise project. In some regions, the All Projects option is available. This option is used only for resource query. Do not select this option when purchasing a firewall instance.
	Tags	(Optional) You can use a tag for multiple cloud resources. You are advised to predefine tags in TMS. For details, see Resource Tag Overview. If your organization has configured a tag policy for CFW, you need to add tags in compliance with the policy. If a tag does not comply with the tag policies, firewall instance creation may fail. Contact your organization administrator to learn more about tag policies.
Required Duration		Service duration. After selecting a duration, you can select Auto-renew. If you select and agree to service auto-renewal, the system automatically generates a renewal order based on the subscription period and renews the service before it expires. Note the Auto-Renewal Rules when enabling auto-renewal.

Confirm the information and click Next.
Confirm the order details, read and agree to the agreement, and click Pay.
Select a payment method and pay for your order.

Professional Edition Firewalls

Log in to the CFW console.
Click in the upper left corner of the management console and select a region or project.

Click Buy CFW and configure parameters on the Buy CFW page. Below are the parameter details.

**Table 2** Parameters for purchasing the professional edition CFW
Parameter		Description
Basic Settings	Billing Mode	Yearly/Monthly. You will be billed based on the selected period.
Basic Settings	Region	Region where the CFW is to be purchased. CFW can be used in the selected region only. To use CFW in another region, switch to the corresponding region and then purchase it. For details about the regions where CFW is available, see Can CFW Be Used Across Clouds or Regions?
Edition		Edition. Select the professional edition.
Extended Packages	Protected EIPs	(Optional) The number of additional EIPs to be protected. Value range: 0 to 2,000. Configure additional capacities to purchase. For example, 50 EIPs are protected by the professional edition (included in the package fee) by default. If you have 65 EIPs, you only need to enter 15.
	Internet Border Protection Bandwidth	(Optional) Additional peak inbound or outbound traffic. The value range is 0 to 50,000 Mbit/s per month. (The value must be an integer multiple of 5.) Configure additional capacities to purchase. For example, up to 50 Mbit/s per month is protected by the professional edition (included in the package fee) by default. If your protection traffic is 200 Mbit/s per month, you only need to enter 150. The protection traffic is determined based on the maximum inbound or outbound traffic, whichever is higher.
	Protected VPCs	(Optional) Select the number of VPCs to be expanded. The value ranges from 0 to 1,000. Only the professional edition supports inter-VPC protection. By default, two VPCs are protected by the professional edition (included in the package fee). If you have three VPCs, you only need to enter 1. For each VPC you add, the protected peak traffic increases by 200 Mbit/s.
Resource Management	Firewall Name	Firewall name. It must meet the following requirements: Only letters (A to Z and a to z), numbers (0 to 9), spaces, and the following characters are allowed: -_ The value can contain 1 to 48 characters.
	Enterprise Project	Enterprise project. In the drop-down list, select an enterprise project. The firewall will be put under that enterprise project for billing management, but its protection scope will not be affected. The firewall can protect the resources of all enterprise projects. This option is only available if you have enabled enterprise projects, or if you are logged in using an enterprise master account. To use this function, enable Enterprise Center. You can use an enterprise project to centrally manage your cloud resources and members by project. Value default indicates the default enterprise project. The original resources of your account and the resources that are not allocated to any enterprise projects under your account are displayed in the default enterprise project. In some regions, the All Projects option is available. This option is used only for resource query. Do not select this option when purchasing a firewall instance.
	Tags	(Optional) You can use a tag for multiple cloud resources. You are advised to predefine tags in TMS. For details, see Resource Tag Overview. If your organization has configured a tag policy for CFW, you need to add tags in compliance with the policy. If a tag does not comply with the tag policies, firewall instance creation may fail. Contact your organization administrator to learn more about tag policies.
Required Duration		Service duration. After selecting a duration, you can select Auto-renew. If you select and agree to service auto-renewal, the system automatically generates a renewal order based on the subscription period and renews the service before it expires. Note the Auto-Renewal Rules when enabling auto-renewal.

Confirm the information and click Next.
Confirm the order details, read and agree to the agreement, and click Pay.
Select a payment method and pay for your order.

Effective Conditions

After the purchase is successful, you can view the purchased firewall edition on the Dashboard page of the console.

References

Check the basic information and overall protection capabilities of a firewall instance. For details, see Cloud Firewall Dashboard.
If the current firewall specifications cannot meet service requirements, you can upgrade the firewall edition or purchase an extended package. For details, see Upgrading a CFW and Modifying CFW Extended Packages.
For details about how to purchase a firewall in pay-per-use mode, see Purchasing Pay-per-Use CFW.
If you no longer need the firewall, unsubscribe from it. For details, see Unsubscribing from CFW.

Parent Topic: Purchasing and Modifying CFW

Previous topic: Purchasing and Modifying CFW

Next topic: Purchasing Pay-per-Use CFW