It is recommended Tencent Cloud International CWPP customer (Pro/Ultimate) to enable those new features and also the Ransomware Defence.
Reference about this product release in mainland china at 2022:
Showing posts with label Tencent Cloud. Show all posts
Showing posts with label Tencent Cloud. Show all posts
Wednesday, August 7, 2024
Thursday, March 21, 2024
Tencent Cloud VPC firewall engine upgrade
It will take several minutes to complete the upgrade and network connect will be interruption.
Sunday, February 18, 2024
Tencent Cloud using 3rd parties firewall for Internet edge firewall solution - Fortinet
Instead of using Tencent Cloud Firewall Service - Internet Edge Firewall, Fortinet Firewall can use for Internet edge firewall solution.
Reference:
FortiGate基于腾讯云平台部署文档
Tencent Cloud using 3rd parties firewall to between VPC firewall solution - Hillstone
Instead of using Palo Alto (PA) Firewall, Hillstone Firewall can use in between VPC to form VPN tunnel to encrypt traffic between VPC and also as a security control point.
Reference:
腾讯云部署云界5.5R9P6版本验证案例
Friday, February 9, 2024
Tencent Cloud - Cloud Firewall (CFW) - Create Object
Under "System Settings" - "Common Tools" - Address template. You can create IP Object, Domain Object and Protocol port Object.
Sunday, February 4, 2024
Tencent Cloud IPv6 support
Tencent Cloud Direct Connect support IPv6 but Cloud Connect Network (CCN) not support IPv6.
Reference:
Tencent Bastion Host Service
This is cannot control by Tencent Cloud VPC firewall. You need to use the "Allowlist Settings" to manage the IP address able to access this service.
Tencent Cloud CVM bypass Cloud Firewall (CFW) to access Internet directly
If a CVM being assigned a Public Internet IP address, it will bypass the Cloud Firewall to access Internet directly. There are several method to control:
- Disable Tencent user account able to assign public IP addresses to CVM by using Tencent account's Cloud Access Management - Polices. Create a policy on CVM to deny "AdjustPublicAddress", "AllocateAddresses" and "AssociateAddress"
- Use "security group" on each CVM to block external connection on port level
Fortinet Fortigate Firewall on Public Cloud
On Alicloud:
4 vCPU license is minimum requirement since the setup on alicloud is required 2vCPU per 1 network port. Since firewall is required 2 network port, you need to have 4 vCPU license.
On Tencent Cloud:
No such requirement, you can start from 2 vCPU license.
Sunday, December 24, 2023
Tencent Cloud Security Tool - Cloud Security Center (CSC) and Cloud Workload Protection Platform (CWPP)
The CSC and CWPP are good tool to protect cloud workload, provide threat detection, threat blocking, forensics, source tracing, and threat response and handling.
Reference:
Thursday, December 14, 2023
Tencent Cloud Direct Connect routing constrain
Limitations:
- Cannot accept over 100 route via BGP
- Support Statics Route and BGP only
Solution:
Fortinet Fortigate to do OSPF route summarisation and then redistribute to BGP to Tencent cloud
Remark: H3C switch OSPF limitations is cannot summarise route to next hop.
Subscribe to:
Posts (Atom)