Firewall
Our network-based, fault-tolerant, stateful packet filtering firewall service lets customers block all incoming and outgoing traffic that isn't expressly permitted.
-
Protection from unwanted traffic
The firewall lets you protect hosts from packet-filtering workload by preventing unwanted traffic from reaching them.
-
Effective and transparent
Rule-based packet filtering is an effective and transparent technique we use for our firewall. We support TCP, UDP, and ICMP protocols.
-
Reducing the attack surface
The firewall reduces the surface for attacks by filtering traffic that isn't expected on protected hosts.
-
Fault-tolerant
Our firewall service is built with high availability in mind, so the hardware, network links, and power feed - everything is redundant.
-
Prevent data leaks
Our firewall protects your network from leaking data, which can be caused by software misconfiguration on your hosts.
-
Stateful
Our firewall monitors TCP handshakes and drops all packets which aren't associated with properly established sessions.
How it works
A firewall is a network security system that monitors and controls the incoming and outgoing network traffic based on predetermined security rules. A firewall typically establishes a barrier between a trusted internal network and an untrusted external network, like the Internet.
We provide a network-based, fault-tolerant, stateful packet filtering firewall service used to block all incoming and outgoing traffic that isn't expressly permitted. Being a network-based type,our firewall protects networks. Each firewall instance you create in the customer portal is protecting a separate VXLAN. You virtually move your servers' public network interfaces to the protected VXLAN if you need them in a protected network.
Our firewall service is built with high availability in mind: the service itself is a HA cluster of hardware firewall nodes. Each node has two hot-swappable PSUs with two separate power feeds, three NICs totaling five network ports. Each node has 20Gbps of bandwidth to the Internet, with network links, network switches, and network routers, all redundant, thanks to our L3 fabric network.
A network-layer packet filtering type means our firewall inspects Internet Protocol packets for matches to your predetermined rules.
Our firewall is stateful – it keeps a registry of properly established TCP sessions and drops network packets that aren't associated with those sessions. Our firewall can help you mitigate certain threats, with a limited TCP SYN/ACK attack being an example of such a threat.
Our firewall is easy to use. All configuration can be done using a simple, self-explanatory one-page wizard in the customer portal's section on Firewalls.
Pricing
How it works
A firewall is a network security system that monitors and controls the incoming and outgoing network traffic based on predetermined security rules. A firewall typically establishes a barrier between a trusted internal network and an untrusted external network, like the Internet.
We provide a network-based, fault-tolerant, stateful packet filtering firewall service used to block all incoming and outgoing traffic that isn't expressly permitted. Being a network-based type,our firewall protects networks. Each firewall instance you create in the customer portal is protecting a separate VXLAN. You virtually move your servers' public network interfaces to the protected VXLAN if you need them in a protected network.
Our firewall service is built with high availability in mind: the service itself is a HA cluster of hardware firewall nodes. Each node has two hot-swappable PSUs with two separate power feeds, three NICs totaling five network ports. Each node has 20Gbps of bandwidth to the Internet, with network links, network switches, and network routers, all redundant, thanks to our L3 fabric network.
A network-layer packet filtering type means our firewall inspects Internet Protocol packets for matches to your predetermined rules.
Our firewall is stateful – it keeps a registry of properly established TCP sessions and drops network packets that aren't associated with those sessions. Our firewall can help you mitigate certain threats, with a limited TCP SYN/ACK attack being an example of such a threat.
Our firewall is easy to use. All configuration can be done using a simple, self-explanatory one-page wizard in the customer portal's section on Firewalls.
Have a specific project?
Do you have a specific project, need to make changes to a specific configuration, or have different needs? Get in touch to discuss other options.