Cloud Firewall
Download
Focus Mode
Font Size
Which Protocols Does CFW Support?
The Internet Firewall (bypass mode) currently supports the TCP protocol.
The Internet Firewall (inline mode) currently supports TCP, UDP, ICMP, HTTP, HTTPS, SMTP, SMTPS, TLS/SSL, DNS, and FTP protocols.
The NAT Firewall supports TCP, UDP, ICMP, HTTP, HTTPS, SMTP, SMTPS, DNS, and FTP protocols.
The VPC Firewall supports TCP, UDP, ICMP, HTTP, HTTPS, SMTP, SMTPS, DNS, and FTP protocols.
How Does CFW Protect the UDP Protocol?
The Internet Firewall (inline mode) supports UDP protection.
The Internet Firewall (bypass mode) does not support UDP protection.
Does CFW Provide Redundancy?
The Internet Firewall uses cluster deployment, while the NAT Firewall and VPC Firewall use primary/secondary deployment by default.
Does CFW Support Single-AZ High Availability?
There are two scenarios. The Internet Firewall is deployed on physical machines in a cluster to achieve a multi-active mechanism and is not affected by AZs. The NAT Firewall and VPC Firewall use virtualization technology and currently support cross-region AZ deployment. During disaster recovery switchover, the system synchronizes session tables to ensure uninterrupted connections. The connection delay is approximately 10 seconds, primarily because it takes several seconds to determine whether an AZ is abnormal through the heartbeat mechanism.
What Should I Do If the CFW Console Page Keeps Refreshing and I Cannot Access It After Purchasing CFW?
For users performing authorization for the first time, try accessing the Asset Center page. A prompt box will appear on the page to guide you through role authorization. After authorization is complete, you can access the CFW console normally.
Does CFW Support Protection for Tencent Cloud Direct Connect to IDC Data Centers and Deployment in Physical Data Centers?
Tencent CFW is SaaS-based and cannot be deployed in physical data centers.
How to View the Current CFW Version
1. Log in to the CFW console, choose Firewall Toggle > NAT Edge Toggle/VPC Edge Toggle > Firewall Instance in the left sidebar.
2. On the Firewall Instance tab, click the instance ID to go to the firewall instance details page and view the CFW engine version.
Help and Support
Was this page helpful?
You can also Contact sales or Submit a Ticket for help.
Help us improve! Rate your documentation experience in 5 mins.
Feedback