What is the Cloud Firewall security hosting service-Cloud Firewall(Cloud Firewall)-阿里云帮助中心

Alibaba Cloud Firewall provides a security hosting service. After you subscribe to the Cloud Firewall security hosting service, Alibaba Cloud security experts can help you configure access to Cloud Firewall and optimize mitigation policies. You also receive services such as security event response, security consulting, security training, case sharing, and security report analysis. This topic describes the security hosting service for Cloud Firewall.

Scenarios

The Cloud Firewall security hosting service is a fully managed service that is backed by the Alibaba Cloud Security Services team. This service helps you use Cloud Firewall to implement fine-grained control over data access behavior, reduce security risks, and decrease operations and maintenance (O&M) workloads.

The Cloud Firewall security hosting service is suitable for the following scenarios:

You have activated Alibaba Cloud Firewall but lack continuous service monitoring capabilities or dedicated security engineers to handle security vulnerabilities.
You require professional assistance for service operation.

Service content

The Cloud Firewall security hosting service provides comprehensive support for accessing and using Cloud Firewall. The following table describes the service content.

Service type	Description
Access configuration	Helps you organize your network architecture, VPC, and routing information, and collect policy configuration requirements. Helps you configure intrusion prevention and virtual patches for vulnerabilities. Product adaptation and validation, including access testing. Helps you optimize Accurate Access Control policies on Cloud Firewall. Adjusts relevant configurations when services protected by Cloud Firewall change.
Mitigation policy optimization	Provides diagnosis and troubleshooting services based on your feedback when abnormal service traffic is detected on Cloud Firewall. Optimizes security mitigation policies and configurations based on attack and defense logs. Adjusts mitigation policies and provides solutions to help you mitigate the impact of security events. Provides suggestions for Cloud Firewall mitigation settings, such as troubleshooting, accurate access control rules, and intrusion prevention rules.
Monitoring and alerting	Implements automated monitoring and event alerting for important security events and abnormal events caused by attacks. Provides alerts for new IP assets and for IP assets that are not protected by Cloud Firewall. Triggers an overuse alert when the usage of a product specification reaches 85% of its quota. The alert applies to all specifications on the Cloud Firewall sales page, such as the number of protectable public IP addresses and the Number of VPC Firewalls. Provides compromise analysis services based on logs of Cloud Firewall.
Security reports	Provides standardized monthly reports for the Cloud Firewall security hosting service.

Security event response time

After you subscribe to the Cloud Firewall security hosting service, the service team responds to emergency assistance requests based on the following priority levels. The priority levels are ranked from 1 to 5 in descending order.

Risk Level	Priority	Definition	Response time
Danger	1	Core services are severely impaired or completely unavailable.	15 minutes
Urgent	2	A non-global exception occurs in core services.	30 minutes
High	3	Non-core services are severely impaired or unavailable.	2 hours
Medium	4	A non-global exception occurs in non-core services.	4 hours
Low	5	Routine technical consultation.	8 hours

Service delivery methods

The following table describes the service delivery methods for the Cloud Firewall security hosting service.

Category	Description
Service delivery method	Remote online service.
Service language	Chinese and English.
Service period	The service period is the same as the subscription period of your Cloud Firewall. Note If your Cloud Firewall subscription expires, the security hosting service can no longer be provided.
Supported service channels	Email DingTalk Phone

Prerequisites

Make sure that you have purchased the log analysis feature for Cloud Firewall. For more information, see Activate the log analysis feature.

Important

Some security hosting service tasks, such as mitigation policy optimization, monitoring and alerting configuration, and security report customization, require the log analysis feature of Cloud Firewall. If you have not purchased this feature, the previously mentioned security hosting services may not be available.

Pricing and sales

Due to the nature of the service support system and the required human resource investment, the Cloud Firewall security hosting service is non-refundable.

The Cloud Firewall security hosting service is available on a subscription basis and can be renewed monthly or annually. You can purchase the Cloud Firewall security hosting service as needed.