tencent cloud

Tencent Cloud Firewall

DocumentationTencent Cloud FirewallGetting Started

Getting Started

Download
Focus Mode
Font Size
Last updated: 2026-07-22 14:35:14
This document provides a learning path for users who are new to Tencent Cloud Firewall (CFW).

1. Getting Familiar with CFW Basics

What features does CFW have?
Why do I choose CFW?
What are the application scenarios for CFW?
What are the common concepts for CFW?

2. Understanding Billing and Purchase

Tencent Cloud Firewall (CFW) provides three paid editions: Premium Edition, Enterprise Edition, and Ultimate Edition. The feature capabilities and quota limits are progressively enhanced across these editions, and the price increases accordingly. For details, see Billing Overview.
For details on purchase methods, see Purchase Methods.

3. Quick Start

After purchasing CFW, you can refer to the following quick start steps:
1. Enable Firewall Toggle: Enable the Internet Boundary, NAT Boundary, or VPC Firewall toggle based on your protection requirements.
2. Configure Access Control Rules: Configure inbound/outbound rules in Access Control to manage traffic in a fine-grained manner.
3. Enable Intrusion Defense: This enables Intrusion Defense features such as Threat Intelligence and Basic Defense.
4. View Assets and Risks: View your cloud asset information in the Asset Center and view security inspection results in the Risk Center.
5. View Alarms and Logs: Handle security events in the Alarm Center, and search and analyze logs in Log Auditing.

4. Using CFW

After purchasing CFW, you can log in to the CFW console to perform operations. For details, see the Operation Guide.

5. Console Feature Overview

If Needed
Reference
Use AI agents for knowledge-based Q&A, conversational report generation, and more.
Configure the corresponding Firewall Toggle for your public IP addresses and associated cloud assets.
Perform traffic management and security protection for private network assets, or forward network traffic based on SNAT and DNAT.
NAT Firewall Toggle (Cluster Mode)
NAT Firewall Toggle (Primary/Secondary Mode)
Automatically detect VPC information and interconnection relationships, and establish a CFW Toggle between each pair of interconnected VPCs.
VPC Firewall Toggle (Cluster Mode)
VPC Firewall Toggle (Primary/Secondary Mode)
View and manage the relevant data and information of each asset in the CFW console.
View and handle security event alarms and blocked access.
Visually view traffic access and bandwidth conditions within a specified time range.
Configure Access Control rules based on conditions such as IP address, domain name, and geographic location.
Implement micro-segmentation control for the private network based on asset groups.
Detect unknown risks beyond Access Control rules and perform Intrusion Defense rule detection on north-south traffic.
Continuously collect, store, and analyze all traffic data in the network to detect network attack threats.
Deploy a high-fidelity decoy service to lure attackers into scanning or intrusion, proactively discovering latent threats in the private network.
View CFW-related logs.
View the details of all traffic logs stored in the past 6 months, and perform log search and query based on search statements.
Use features in Common Tool, such as address templates, rule backup, TAT, network packet capture tool, simulated dial test, and policy backup and rollback.

6. FAQs for Beginners

Which protocols does CFW support for protection?
What does peak bandwidth refer to? Does it refer to upstream bandwidth or downstream bandwidth?
Will my business be affected if the service bandwidth exceeds the peak bandwidth limit?
How long are CFW logs stored by default? What is the maximum storage capacity?
In Interception Mode, under what conditions does automatic interception occur? Why are there still alarms when Interception Mode is enabled?
Why was the malicious IP address not intercepted?
Will my business be affected by operations such as toggling, scaling out, adding CAM authorization, or enabling/disabling Intrusion Defense in CFW?
Does CFW support configuration modification?
Can I renew CFW after it expires? Will the resources be reclaimed by the system after expiration?

6. Feedback and Suggestions

If you encounter any issues or have suggestions while using Tencent Cloud Firewall and its services, you can provide feedback through the following channels. A dedicated specialist will follow up to resolve your problem.
If you find any issues with the product documentation, such as broken links, incorrect content, or API errors, you can click Document Feedback on the right side of the page or select the problematic content to provide feedback.
If you encounter any product-related issues, you can contact us or submit a ticket for assistance.
Previous Topic: Announcement on the Adjustment of CFW Billing ModeNext Topic: Product Overview

Help and Support

Was this page helpful?

Help us improve! Rate your documentation experience in 5 mins.

Feedback