Billing related | Premium Edition | Enterprise Edition | Ultimate Edition | Elastic scaling |
Billing Mode | Yearly/monthly subscription | Yearly/monthly subscription | Yearly/monthly subscription | Not supported |
Base price | 420 USD/month | 1,450 USD/month | 3,900 USD/month | Not supported |
Available purchase duration | 1 month, 3 months, 6 months, 1 year, 2 years, 3 years | | | Not supported |
Discount | Purchase for 6 months or less: Original price Purchase 1 year: 15% off Purchase 2 years: 30% off Purchase 3 years: 50% off | | | Not supported |
North-South Bandwidth: Can be allocated to serial firewalls for the Internet boundary and NAT Firewalls | Default 20Mbps, scalable to 200Mbps | Default 100Mbps, scalable to 1Gbps | Default 300Mbps, scalable to 60Gbps | Prepaid scaling: 16 USD/Mbps/month |
| | | | Postpaid scaling: elastic protection for NAT Border Firewall at 2.41 USD/Mbps/day Note: |
Public IP address quantity | 10 | 50 | 200 | For every 1Mbps scaled in North-South Bandwidth, the number of public IP addresses supported increases by one. |
Number of general instances: Can be used to create Internet serial Firewall, NAT Border Firewall Instance, and VPC Border Firewall instances | 1 | 2 | 3 partitions | Supports scaling, 430 USD/unit/month |
Number of Access Control Rules: Can be used to create Internet Border Firewall, NAT Border Firewall, and VPC Border Firewall Access Control rules. | Internet Firewall and NAT Boundary Firewall each have 1,000 rules. | Internet Border Firewall, NAT Border Firewall, and VPC Border Firewall each have 2,000 rules. | Internet Border Firewall, NAT Border Firewall, and VPC Border Firewall each have 5,000 rules. | Internet Border Firewall Access Control rules, NAT Border Firewall Access Control rules, VPC Border Firewall Access Control rules, Intrusion Defense blocklist number of blocked IP addresses, Intrusion Defense allowlist strategy, and Enterprise Security Group number of scaling rules at 0.2 USD/rule/month, supports purchasing CFW general rule extensions. |
Intrusion Defense blocklist number of blocked IP addresses | 4,000 entries | 10,000 entries | 20,000 entries | |
Intrusion Defense allowlist strategy | 4,000 entries | 10,000 entries | 20,000 entries | |
Enterprise-grade Security Group | 100 entries | 1,000 entries | 2,000 entries | |
Geo-blocking for Internet Access Control | Supported. | Supported | Supported | Not supported |
VPC firewall bandwidth | Not supported | Default 100Mbps, scalable up to 200Gbps+1,000Mbps | Default 300Mbps, scalable up to 200Gbps+1,000Mbps | Prepaid scaling: Expand 10Mbps for the VPC Border Firewall: 12 USD/month Expand 1Gbps for the VPC Border Firewall: 749 USD/month |
| | | | Postpaid scaling: Elastic Protection for VPC Border Firewall 0.09 USD/Mbps/day Note: Firewall instances below 1Gbps are lightweight instances and do not include the feature of Intrusion Defense. Postpaid scaling feature requires submitting a ticket for application. |
Network Detection and Response | Not supported | Supported | Supported | Prepaid scaling: 0 - 2 Gbps: 1,388 USD/Gbps/month 3 - 9 Gbps: 1,180 USD/Gbps/month 10 - 19 Gbps: 972 USD/Gbps/month 20 - 49 Gbps: 694 USD/Gbps/month 50 Gbps and above: 416 USD/Gbps/month |
| | | | Postpaid scaling: Elastic Analysis: USD 83.3/Gbps/day |
Log analysis | CFW stores logs by default for 7 days with 50 GB. If you need to store logs for a longer period or meet compliance requirements, you need to enable the Log Analysis feature. The Log Analysis feature costs USD 99/set/month and includes 1,000 GB of log storage. | | | Not supported |
Log storage (Scalable after Log analysis is purchased) | Scalable storage range: 1,000~100,000 GB | Scalable storage range: 3,000~100,000 GB | Scalable storage range: 5,000-100,000 GB | Prepaid scaling: Scaling for Log storage: 0.13 USD/GB/month |
| | | | Postpaid scaling: 0 - 5120 GB (inclusive of 5120): 0.006 USD/GB/day Above 5120 GB: 0.004 USD/GB/day |
Traffic Visualization | Supported | Supported | Supported | Not supported |
Intrusion Defense (IPS) (Intelligently blocks intrusive activities) | Supported | Supported | Supported | Not supported |
Address Template | 10 | 10 | 10 | Quantity of extension templates: 4.8USD/unit/month |
Integration of Threat Intelligence (Automatically blocks malicious outbound connections) | Supported | Supported | Supported | Not supported |
Security baseline | Not supported | Not supported | Supported | Not supported |
Network honeypot | Supported, expandable after the main package is purchased, priced at 99 USD/unit/month. | | | Not supported |
Was this page helpful?
You can also Contact sales or Submit a Ticket for help.
Help us improve! Rate your documentation experience in 5 mins.
Feedback