HiTechCloud vCWAF
Cloud Firewall
HiTechCloud vCWAF is a next-generation firewall service on a cloud computing platform, combining AI/ML-Powered NGFW, application control, user identification, deep packet inspection, IPS, Sandbox, URL Filtering, DNS Security and VPN.
AI/ML NGFWIPS/IDSSandboxDNS SecurityIPSec/SSL VPN
Next-Generation Firewall
Protect cloud data and workloads with a next-generation firewall.
vCWAF acts as a defense-in-depth layer for Cloud Server, VPC/DPC, VMware Cloud and Kubernetes. It lets businesses control North-South and East-West traffic, segment security zones, detect malware, filter web content, protect DNS and establish secure VPN connections.
Security capabilities
Control, detect and block threats across the entire cloud environment.
01
Intelligent recognition capability
Control traffic by application, user and content to enforce policy more precisely than a traditional firewall.
02
Proactive threat prevention
Combines IPS, anti-virus, anti-spyware and vulnerability protection to reduce the risk of exploitation on servers and applications.
03
Malware analysis using a sandbox
Send suspicious content to a dedicated analysis environment to help detect APTs, unknown malware and anomalous behavior.
04
IPSec VPN & SSL VPN
Secure connectivity between data centers, branch offices, remote users and cloud regions over Site-to-Site or Client-to-Site VPN.
05
Advanced URL Filtering
Classifies, filters and protects web sessions against malicious sites, phishing, command-and-control traffic and inappropriate content.
06
DNS Security
Detect and block attacks over DNS, limit DNS tunneling and add a real-time protection layer to your systems.
07
Distributed Firewall
Protects east-west traffic between virtualized workloads, suited to VPC/DPC, VMware Cloud and heavily segmented systems.
08
Easy policy management
Centralizes security policy with support for zones, address/service objects, logging, alerting and monitoring system integration.
Key features
A set of firewall, networking and operational features suited to modern cloud infrastructure.
Networking Services
- IPv4/IPv6
- Static Routing, BGP, OSPF
- Policy Based Routing
- SD-WAN
- NAT/PAT
- QoS
- IPSec VPN, SSL VPN
Gateway Security
- Stateful L3/L7 Rules
- Application Control
- User Identity
- Deep Packet Inspection
- IPS/IDS
- Malicious IP Filtering
- URL Filtering
Advanced Threat Prevention
- Anti-Virus
- Anti-Spyware
- Anti-Malware
- Cloud Sandboxing
- DNS Security
- IoT Security
- Data Loss Protection
Operations
- High Availability
- Syslog/SNMP/Netflow
- Email Alert
- Security Profile
- Policy Recommendation
- Centralized Management
- 24/7 Support
Solution line
Choose a Cloud Firewall by vendor, performance, features and deployment platform.
Palo Alto NGFW
Suited to systems that require an ML-Powered NGFW, application and user identification, WildFire Sandbox, Advanced URL Filtering, and DNS Security.
- VCF1, VCF2, VCF3
- Basic, Gold, Platinum
- Supports IPsec/SSL VPN
- Up to 10,000 firewall policies
Fortinet NGFW
Optimizes cost and performance, with support for Security Fabric, IPS, AMP, FortiSandbox Cloud, Web Security, Anti-Spam, and advanced add-ons.
- VCF02, VCF04, VCF08
- Basic to Enterprise
- SD-WAN, IPS, AMP
- Up to 200,000 firewall policies
VMware Native Firewall
Protects North-South and East-West traffic directly within the VMware Cloud environment, with distributed firewall and advanced threat prevention.
- Standard, Advance, Premium
- By throughput or vCPU
- Distributed Firewall
- Suited to VMware VPC/DPC
Deployment model
From a minimal setup to high availability for business-critical systems.
Standalone
A primary firewall for systems that need lower cost, a simple architecture, or a standby environment.
High-Availability
One active and one passive firewall, increasing availability for business-critical systems.
VPC/DPC
Protects virtualized server systems in a Virtual Private Cloud or Dedicated Private Cloud.
Cloud Server & Kubernetes
Deploy for VMware/OpenStack Cloud Servers or Kubernetes clusters that need access and traffic control.
vCWAF pricing
Choose a Cloud Firewall plan by vendor, resources, throughput and security features.
FAQ
Frequently asked questions about Cloud Firewall.
HiTechCloud advises on sizing, vendor selection, the HA model, licensing, deployment VMs and a Cloud Firewall operating plan based on your actual infrastructure.
What is HiTechCloud vCWAF?
vCWAF is a virtualized cloud firewall/NGFW service that protects cloud infrastructure through application, user and network traffic control, IPS, malware inspection, URL and DNS filtering, and VPN.
Does the price include the VPS to install the firewall on?
The packages cover the firewall license and service cost. VPS or infrastructure resources for the deployment are quoted separately, based on the actual architecture.
Can customers manage the firewall themselves?
Yes. Customers can manage firewall policy themselves. HiTechCloud provides consulting, deployment, handover and technical support.
Which firewall product lines does vCWAF support?
HiTechCloud advises on the Palo Alto, Fortinet and VMware native firewall lines, matched to your budget, performance needs, security features and the cloud platform you run.
Are VPN and redundancy models supported?
Yes. Depending on the plan, the solution can support IPSec VPN, SSL VPN, site-to-site, client-to-site and a high-availability model for greater availability.
HiTechCloud Security
Get a consultation
Need advice on the right Cloud Firewall plan?
Get advice on choosing Palo Alto, Fortinet or VMware Native Firewall based on performance, security features, deployment model and budget.
