Purchasing Yearly/Monthly Cloud Firewall

Prerequisites

The current account has the BSS Administrator and CFW FullAccess permissions.

Constraints

• CFW can be used only in the region where it was purchased. To use CFW in another region, switch to that region and purchase it. For details about the regions where CFW is available, see Function Overview.

Editions

For details about the feature differences between editions, see Editions.

Standard Edition Firewalls

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. In the navigation pane on the left, click and choose Security & Compliance > Cloud Firewall. The Dashboard page will be displayed.
4. Click Buy CFW and configure parameters on the Buy CFW page. For more information, see Table 1.

   Table 1 Parameters for purchasing the standard edition CFW

   Parameter		Description
   Billing Mode		Yearly/Monthly
   Region		Region where the CFW is to be purchased. NOTICE: CFW can be used in the selected region only. To use CFW in another region, switch to the corresponding region and then purchase it. For details about the regions where CFW is available, see Can CFW Be Used Across Clouds or Regions?
   Edition	-	Select the standard edition.
   	Add EIP Protection Capacity	(Optional) Number of additional EIPs to be protected. Value range: 0 to 2000. NOTE: Configure additional capacities to purchase. For example, 20 EIPs are protected by the standard edition (included in the package fee) by default. If you have 65 EIPs, you only need to enter 45.
   	Add Internet Border Protection Bandwidth	(Optional) Additional peak inbound or outbound traffic. The value range is 0 to 5000 Mbit/s per month. (The value must be an integer multiple of 5.) NOTE: Configure additional capacities to purchase. For example, up to 10 Mbit/s is protected by the standard edition (included in the package fee) by default. If your protection traffic is 200 Mbit/s, you only need to enter 190. The protection traffic is determined based on the maximum inbound or outbound traffic, whichever is higher.
   Advanced Settings	Firewall Name	Firewall name. It must meet the following requirements: Only letters (A to Z and a to z), numbers (0 to 9), spaces, and the following characters are allowed: -_ The value can contain 1 to 48 characters.
   	Enterprise Project	Enterprise project. Select the enterprise project that you belong to from the drop-down list. The purchased CFW instance then belongs to that enterprise project and protects all resources in that project. This option is only available if you have enabled enterprise projects, or if you are logged in using an enterprise master account. To use this function, enable Enterprise Center. You can use an enterprise project to centrally manage your cloud resources and members by project. NOTE: Value default indicates the default enterprise project. Resources that are not allocated to any enterprise projects under your account are displayed in the default enterprise project.
   	Tags	You can use a tag for multiple cloud resources. You are advised to predefine tags in TMS. For details, see Resource Tag Overview. If your organization has configured a tag policy for CFW, you need to add tags in compliance with the policy. If a tag does not comply with the tag policies, firewall instance creation may fail. Contact your organization administrator to learn more about tag policies.
   Required Duration		Service duration. After selecting a duration, you can select Auto-renew. If you select and agree to service auto renewal, the system automatically generates a renewal order based on the subscription period and renews the service before it expires. Note the Auto-Renewal Rules when enabling auto-renewal.

5. Confirm the information and click Buy Now.
6. Confirm the order details, select I have read and agreed to the Huawei Cloud Firewall Service Statement, and click Next.
7. Select a payment method and pay for your order.

Professional Edition Firewalls

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. In the navigation pane on the left, click and choose Security & Compliance > Cloud Firewall. The Dashboard page will be displayed.
4. Click Buy CFW and configure parameters on the Buy CFW page. For more information, see Table 2.

   Table 2 Parameters for purchasing a professional edition CFW

   Parameter		Description
   Basic settings	Billing Mode	Yearly/Monthly
   	Region	Region where the CFW is to be purchased. NOTICE: CFW can be used in the selected region only. To use CFW in another region, switch to the corresponding region and then purchase it. For details about the regions where CFW is available, see Can CFW Be Used Across Clouds or Regions?
   Edition	-	Edition. Select the professional edition.
   	Add EIP Protection Capacity	(Optional) Number of additional EIPs to be protected. Value range: 0 to 2000. NOTE: Configure additional capacities to purchase. For example, 50 EIPs are protected by the standard edition (included in the package fee) by default. If you have 65 EIPs, you only need to enter 15.
   	Add Internet Border Protection Bandwidth	(Optional) Additional peak inbound or outbound traffic. The value range is 0 to 10,000 Mbit/s per month. (The value must be an integer multiple of 5.) NOTE: Configure additional capacities to purchase. For example, up to 50 Mbit/s per month is protected by the standard edition (included in the package fee) by default. If your protection traffic is 200 Mbit/s per month, you only need to enter 150. The protection traffic is determined based on the maximum inbound or outbound traffic, whichever is higher.
   	Add VPCs	(Optional) Select the number of VPCs to be expanded. The value ranges from 0 to 1000. NOTE: Only the professional edition supports inter-VPC protection. By default, two VPCs are protected by the professional edition (included in the package fee). If you have three VPCs, you only need to enter 1. For each VPC you add, the protected peak traffic increases by 200 Mbit/s.
   Advanced Settings	Enterprise Project	Enterprise project. Select the enterprise project that you belong to from the drop-down list. The purchased CFW instance then belongs to that enterprise project and protects all resources in that project. This option is only available if you have enabled enterprise projects, or if you are logged in using an enterprise master account. To use this function, enable Enterprise Center. You can use an enterprise project to centrally manage your cloud resources and members by project. NOTE: Value default indicates the default enterprise project. Resources that are not allocated to any enterprise projects under your account are displayed in the default enterprise project.
   	Firewall Name	Firewall name. It must meet the following requirements: Only letters (A to Z and a to z), numbers (0 to 9), spaces, and the following characters are allowed: -_ The value can contain 1 to 48 characters.
   	Tags	You can use a tag for multiple cloud resources. You are advised to predefine tags in TMS. For details, see Resource Tag Overview. If your organization has configured a tag policy for CFW, you need to add tags in compliance with the policy. If a tag does not comply with the tag policies, firewall instance creation may fail. Contact your organization administrator to learn more about tag policies.
   Required Duration		Service duration. After selecting a duration, you can select Auto-renew. If you select and agree to service auto renewal, the system automatically generates a renewal order based on the subscription period and renews the service before it expires. Note the Auto-Renewal Rules when enabling auto-renewal.

5. Confirm the information and click Buy Now.
6. Confirm the order details, select I have read and agreed to the Huawei Cloud Firewall Service Statement, and click Next.
7. Select a payment method and pay for your order.