Use Cases

Use these best practices to deploy and manage Cloud Firewall across common network security scenarios.

Cloud Firewall

Best practices for firewall access

• Best practices for protecting traffic between cross-region VPCs in the cloud (automatic traffic redirection)

• Best practices for changing the configurations of a VPC firewall after a transit router is upgraded from Basic Edition to Enterprise Edition

• Protect the outbound traffic of private networks using NAT gateways and NAT firewalls

• Protect traffic between VPCs connected using a CEN transit router (manual traffic redirection)

• Protect specific traffic between VPCs connected using a CEN transit router

• Protect traffic between cross-region VPCs connected using CEN transit routers (manual traffic redirection)

Best practices for traffic analysis

• Identify unusual traffic at the Internet border

Best practices for access control

• Configure access control policies

• Deny access from international regions

• Allow an instance to access a specific domain name

• Configure access to a specific domain name

• Defend against unauthorized access to MongoDB databases

Best practices for attack prevention

• Best practices for database security defense

• Defending against worms

• Best practices for system security defense

• Defend against mining programs

• Best practices of Cloud Firewall based on ATT&CK

Best practices for multi-account management

• Centralized account management with Cloud Firewall

• Use one account to manage Cloud Firewall for multiple accounts

Best practices for security O&M

• Access policies for Cloud Firewall and Bastionhost

NDR

None