Purchase Instructions

Download

Mode fokus

Ukuran font

Terakhir diperbarui: 2026-07-15 16:09:01

This document describes how to purchase and scale the CFW instance plans on Tencent Cloud.
Note:
CFW supports trials for enterprise-verified users. If needed, go to the CFW console to start a trial. Individual-verified users can update their personal verification information to apply for a trial.
After the trial resources in the CFW console expire, the system does not automatically renew them.
Purchasing CFW
1. Go to the CFW purchase page and select a plan edition based on your actual needs.
Plan Edition
Applicable Scope
Premium Edition
Provides basic north-south traffic protection capabilities and is suitable for small and medium-sized enterprises.
Enterprise Edition
Builds upon the Premium Edition by supporting east-west traffic protection (VPC boundary) and internet geo-blocking, and is suitable for medium-sized enterprises.
Ultimate Edition
Builds upon the Enterprise Edition by providing enhanced capabilities such as security baseline and dedicated resource deployment, and is suitable for large enterprises or guarantee for important periods scenarios.
Note:
For details on the features supported by each edition and the default specifications, see Billing Overview.
2. Select a CFW specification extension based on your actual needs.
Specification Extension Name
Specification Extension Description
Add-on North-South Bandwidth
CFW's protection capability for public network traffic. Creating an Internet Firewall and a NAT Firewall consumes north-south bandwidth.
Add-on VPC Boundary  Firewall Bandwidth
The total protection bandwidth of the VPC Firewall. Creating a VPC Firewall protects dedicated lines, VPNs, and CCN.
Add-on General Instance Count
The maximum number of instances that CFW supports creating. It can be used to create Internet Firewalls, NAT Firewalls, and VPC Firewalls.
Adding one serial firewall region consumes one general-purpose instance quota.
Adding one NAT Firewall consumes one general-purpose instance quota.
Adding one VPC Firewall consumes one general-purpose instance quota.
Note:
The specification extensions supported by each plan edition vary. For the specific supported features, refer to the information displayed on the CFW purchase page.
3. Select a CFW feature extension based on your actual needs.
Feature Extension Name
Feature Extension Description
Log Analysis Extension
Each firewall edition provides 50 GB of log storage, retaining logs for 7 days. If you need to retain logs for more than 6 months, enabling the Log Analysis extension extends the log retention period to 6 months and adds 1000 GB of log storage.
General Rule Extension
General rules can be used to create Intrusion Defense blocklists, Internet Firewall rules, NAT Firewall rules, VPC Firewall rules, Enterprise Security Groups, and Intrusion Defense allowlists. The main plan includes a certain number of rules. For details, see the edition details.
Address Template Extension
Supports batch management of common addresses, allowing you to create IP address, domain, and protocol-port address templates for configuring Internet, NAT, and VPC Firewall rules. The main plan includes 10 address templates.
NDR
The NDR feature can collect, store, and analyze all traffic data in the network in real time, detect network attack threats, and restore transmitted files to improve network security.
Network Honeypot
The Network Honeypot deployed in the Tencent Cloud honeynet does not occupy network space. Its exposure probes are deployed in the network to implement "traps" within the business system.
Note:
The feature extensions supported by each plan edition vary. For the specific supported features, refer to the information displayed on the CFW purchase page.
4. Select a CFW protection duration based on your actual needs. Options include continuous monthly billing, 1 month, 3 months, 6 months, 1 year, 2 years, 3 years, and 5 years.
Note:
If you select continuous monthly billing, you must select auto-renewal. After the service expires, it is automatically renewed on a monthly basis to provide continuous protection for your assets.
5. After completing the configuration, click Buy Now. After payment is made, the instance plan purchase is completed.
Scaling CFW
If you did not select all configurations when purchasing CFW, or if you need to extend existing specifications, you can follow the steps below.
1. Log in to the CFW console and select Overview in the left sidebar.
2. In the upper-right corner of the Overview page, click Expand.
3. Select the corresponding specification extension or feature extension based on your needs.
4. After completing the configuration, click Buy Now. After payment is made, the extended configuration purchase is completed.
﻿
﻿
﻿

Bantuan dan Dukungan

Apakah halaman ini membantu?

Anda juga dapat Menghubungi Penjualan atau Mengirimkan Tiket untuk meminta bantuan.

masukan

tencent cloud

Tencent Cloud Firewall

Purchase Instructions

Purchasing CFW

Scaling CFW

Bantuan dan Dukungan

Plan Edition	Applicable Scope
Premium Edition	Provides basic north-south traffic protection capabilities and is suitable for small and medium-sized enterprises.
Enterprise Edition	Builds upon the Premium Edition by supporting east-west traffic protection (VPC boundary) and internet geo-blocking, and is suitable for medium-sized enterprises.
Ultimate Edition	Builds upon the Enterprise Edition by providing enhanced capabilities such as security baseline and dedicated resource deployment, and is suitable for large enterprises or guarantee for important periods scenarios.

Specification Extension Name	Specification Extension Description
Add-on North-South Bandwidth	CFW's protection capability for public network traffic. Creating an Internet Firewall and a NAT Firewall consumes north-south bandwidth.
Add-on VPC Boundary Firewall Bandwidth	The total protection bandwidth of the VPC Firewall. Creating a VPC Firewall protects dedicated lines, VPNs, and CCN.
Add-on General Instance Count	The maximum number of instances that CFW supports creating. It can be used to create Internet Firewalls, NAT Firewalls, and VPC Firewalls. Adding one serial firewall region consumes one general-purpose instance quota. Adding one NAT Firewall consumes one general-purpose instance quota. Adding one VPC Firewall consumes one general-purpose instance quota.

Feature Extension Name	Feature Extension Description
Log Analysis Extension	Each firewall edition provides 50 GB of log storage, retaining logs for 7 days. If you need to retain logs for more than 6 months, enabling the Log Analysis extension extends the log retention period to 6 months and adds 1000 GB of log storage.
General Rule Extension	General rules can be used to create Intrusion Defense blocklists, Internet Firewall rules, NAT Firewall rules, VPC Firewall rules, Enterprise Security Groups, and Intrusion Defense allowlists. The main plan includes a certain number of rules. For details, see the edition details.
Address Template Extension	Supports batch management of common addresses, allowing you to create IP address, domain, and protocol-port address templates for configuring Internet, NAT, and VPC Firewall rules. The main plan includes 10 address templates.
NDR	The NDR feature can collect, store, and analyze all traffic data in the network in real time, detect network attack threats, and restore transmitted files to improve network security.
Network Honeypot	The Network Honeypot deployed in the Tencent Cloud honeynet does not occupy network space. Its exposure probes are deployed in the network to implement "traps" within the business system.