CFW Best Practice Summary

Purchasing CFW via API

Purchasing and Querying CFW via API

Batch migration policy

Migrating Security Policies to CFW in Batches

Using CFW together with other cloud services such as WAF

Configuration Suggestions for Using CFW with WAF, Advanced Anti-DDoS, and CDN

Using CFW and Enterprise Router to Protect VPN Traffic

Configuring an access control policy

Allowing Internet Traffic Only to a Specified Port

Allowing Outbound Traffic from Cloud Resources Only to a Specified Domain Name

Configuring a Protection Rule to Protect Traffic Between Two VPCs

Configuring a Protection Rule to Protect SNAT Traffic

Automatically Importing IP Blacklist Items Based on Threat Intelligence Sources

Using an Enterprise Router to Protect Traffic Between Some VPCs

Configuring intrusion prevention

Using CFW to Defend Against Access Control Attacks

Using CFW to Defend Against Hacker Tools

Using CFW to Defend Against Suspicious DNS Activities

Using CFW to Defend Against Trojans

Using CFW to Defend Against Vulnerability Exploits

Using CFW to Defend Against Worms

Using CFW to Accurately Trace Private IP Addresses in a NAT Gateway Environment

Log audit

Using CFW to Audit Domain Name Access Behavior in Outbound Traffic

Enterprise project management

Using CFW to Protect Enterprise Resources

Multi-account management

Using CFW to Protect EIPs Across Accounts

Using CFW to Protect VPCs Across Accounts

Security and governance

CFW Security Best Practices