- Getting Started
- Product Introduction
- Purchase Guide
- Operation Guide
- Best Practices
- Troubleshooting
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Access Control APIs
- AddNatAcRule
- DescribeNatAcRule
- ModifyNatAcRule
- ModifyEnterpriseSecurityDispatchStatus
- ModifyTableStatus
- ModifySequenceRules
- ModifyAllRuleStatus
- ModifyAcRule
- DescribeTableStatus
- DescribeRuleOverview
- DescribeAcLists
- CreateAcRules
- SetNatFwDnatRule
- ExpandCfwVertical
- DescribeNatFwVpcDnsLst
- DescribeNatFwInstancesInfo
- DescribeNatFwInstance
- DescribeNatFwInfoCount
- AddAcRule
- Enterprise Security Group APIs
- Firewall Status APIs
- Intrusion Defense APIs
- Other APIs
- DescribeBlockIgnoreList
- ModifyStorageSetting
- ModifyNatSequenceRules
- DescribeGuideScanInfo
- ModifyBlockTop
- DescribeUnHandleEventTabList
- DescribeTLogIpList
- DescribeTLogInfo
- DescribeBlockStaticList
- DescribeBlockByIpTimesList
- SetNatFwEip
- ModifyResourceGroup
- ModifyNatFwSwitch
- ModifyNatFwReSelect
- ModifyAssetScan
- DescribeSourceAsset
- DescribeNatFwInstanceWithRegion
- DeleteVpcInstance
- DeleteResourceGroup
- CreateNatFwInstance
- DescribeResourceGroupNew
- CreateNatFwInstanceWithDomain
- DescribeIPStatusList
- Data Types
- Error Codes
- FAQs
- Service Level Agreement
- CFW Policy
- Getting Started
- Product Introduction
- Purchase Guide
- Operation Guide
- Best Practices
- Troubleshooting
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Access Control APIs
- AddNatAcRule
- DescribeNatAcRule
- ModifyNatAcRule
- ModifyEnterpriseSecurityDispatchStatus
- ModifyTableStatus
- ModifySequenceRules
- ModifyAllRuleStatus
- ModifyAcRule
- DescribeTableStatus
- DescribeRuleOverview
- DescribeAcLists
- CreateAcRules
- SetNatFwDnatRule
- ExpandCfwVertical
- DescribeNatFwVpcDnsLst
- DescribeNatFwInstancesInfo
- DescribeNatFwInstance
- DescribeNatFwInfoCount
- AddAcRule
- Enterprise Security Group APIs
- Firewall Status APIs
- Intrusion Defense APIs
- Other APIs
- DescribeBlockIgnoreList
- ModifyStorageSetting
- ModifyNatSequenceRules
- DescribeGuideScanInfo
- ModifyBlockTop
- DescribeUnHandleEventTabList
- DescribeTLogIpList
- DescribeTLogInfo
- DescribeBlockStaticList
- DescribeBlockByIpTimesList
- SetNatFwEip
- ModifyResourceGroup
- ModifyNatFwSwitch
- ModifyNatFwReSelect
- ModifyAssetScan
- DescribeSourceAsset
- DescribeNatFwInstanceWithRegion
- DeleteVpcInstance
- DeleteResourceGroup
- CreateNatFwInstance
- DescribeResourceGroupNew
- CreateNatFwInstanceWithDomain
- DescribeIPStatusList
- Data Types
- Error Codes
- FAQs
- Service Level Agreement
- CFW Policy
Billing overview
Paid editions of Tencent Cloud Firewall include Premium Edition, Enterprise Edition, and Ultimate Edition. To meet the needs of different customers with different asset scales, the editions differ in their feature modules and default specifications. The Premium Edition, Enterprise Edition, and Ultimate Edition support elastic scaling based on performance specifications and asset scale. The billing details are listed below:
Note：
- Please note that you cannot downgrade your Cloud Firewall subscription after purchase.
- Enterprise security groups are available on all current editions, but will be unavailable for some editions in the future. Tencent Cloud will notify you of any changes to the feature in advance. The changes will have no impact on your usage during the subscription period.
| Billing | Premium Edition | Enterprise Edition | Ultimate Edition | Elastic scaling |
|---|---|---|---|---|
| Billing mode | Monthly subscription | Monthly subscription | Monthly subscription | Not supported |
| Basic price | 420 USD/month | 1,450 USD/month | 3,900 USD/month | Not supported |
| Available subscription period | 6 months, 1 year, 2 years, 3 years, 5 years | 1 month, 3 months, 6 months, 1 year, 2 years, 3 years, 5 years | Not supported | |
| Discount | Not supported | |||
| Edge firewall bandwidth | Default value: 20 Mbps; Maximum value: 200 Mbps | Default value: 100 Mbps; Maximum value: 1 Gbps | Default value: 300 Mbps; Maximum value: 30 Gbps | Extra bandwidth fee: 16 USD/Mbps/month. |
| Internet access control | 1,000 L4/L7 outbound rules and 1,000 L4/L7 inbound rules | 2,000 L4/L7 outbound rules and 2,000 L4/L7 inbound rules | 5,000 L4/L7 outbound rules and 5,000 L4/L7 inbound rules | Not supported |
| Region blocking for Internet access control | Not supported | Supported | Supported | Not supported |
| Number of public IP addresses for edge firewall | 10 | 50 | 200 | 1 public IP address for 1 Mbps of bandwidth |
| Number of regions for edge firewall | 1 | 3 | 5 | Not supported |
| NAT firewall throughput | Match edge firewall bandwidth | Match edge firewall bandwidth | Match edge firewall bandwidth | Match edge firewall bandwidth |
| Number of NAT firewall instances | 1 | 3 | 5 | Not supported |
| Inter-VPC firewall | Not supported | Inter-VPC firewall features can be purchased for a bandwidth of 1 to 2 Gbps | Inter-VPC firewall features can be purchased for a bandwidth of 1 to 20 Gbps | 749 USD/month for 1 Gbps bandwidth |
| Honeypot | 1; scalable | 3; scalable | 5; scalable | 99 USD/month for each honeypot |
| Log analysis (analysis and 6-month storage): up to 50 GB of logs are stored for 7 days by default | Minimum purchase amount: 1,000 GB; Maximum value: 100,000 GB | Minimum purchase amount: 1,000 GB; Maximum value: 100,000 GB | Minimum purchase amount: 1,000 GB; Maximum value: 100,000 GB | Elastic scaling: 0.13 USD/GB/month; the storage period is identical to the subscription period |
| Traffic visualization | Supported | Supported | Supported | Not supported |
| Intrusion prevention system (IPS) (intelligent intrusion prevention) | Supported | Supported | Supported | Not supported |
| Blocklist | 4,000 entries | 10,000 entries | 20,000 entries | Not supported |
| Threat intelligence integration (automatic blocking of malicious outgoing requests) | Supported | Supported | Supported | Not supported |
| Enterprise security group | Supported for a limited time | Supported | Supported | Not supported |
| Security baseline | Not supported | Not supported | Supported | Not supported |
Purchase method
- Go to the Cloud Firewall purchase page and select a package according to your demands. You can also customize your billable items, and your fees are automatically calculated.
- After selection, click "Place Order" and complete the payment.
Note：
Cloud Firewall offers a trial edition to verified enterprise users. You can apply for a free trial on the Product Overview page. A verified individual user can upgrade to a verified enterprise user to try Cloud Firewall.
Resource deletion upon expiration
- You cannot go to the console after your subscription expires.
- All your protection will be disabled 7 days after your subscription expires. Traffic protection will be disabled, but your configurations will be retained and you can renew your subscription to restore your configurations.
- All your Cloud Firewall resources will be deleted 14 days after your subscription expires. Your configurations will be deleted and cannot be recovered. In this case, you have to re-purchase and configure again.
Refund policy
Cloud Firewall is subject to Tencent Cloud's Cloud Service Refund Policy and offers an unconditional refund within 5 days of purchase. If you need a refund, please submit a ticket. You cannot request a refund 5 days after purchase.
Next steps
After you purchase Cloud Firewall, you can use it in the following ways:
- Method 1: Log in to the Cloud Firewall console to perform operations.
- Method 2: Use CFW with APIs. For more information, please see API Documentation.
Yes
No
Was this page helpful?