Networking

Firewall

Protect the resources in your virtual data centre with cloud-native network security.

Inbound trafficOutbound trafficCountry groupblockedFirewallYour edge gateway · active/standbyYour rulesSourceDestinationPortApplicationDirectionIP versionAllow · drop · rejectCountry groups (weekly)NAT · IPsec tunnelsYour cloud networkPublished serverServerRule logsPer rule · CSV exportPortalEach change runs as a taskAudit trail with the user name

Firewall security to help protect your digital assets

  • Strengthen your network security posture

    Create, enforce and log application and network connectivity policies on the gateway. Match rules on applications as well as IP addresses and ports.

  • Start using the firewall with your virtual data centre

    Every virtual data centre comes with a gateway that includes a firewall and NAT. Write rules in the portal for inbound and outbound traffic, site-to-site VPN tunnels and private connectivity circuits.

  • Publish services in one step

    Expose a web server to the internet on a single port: the DNAT rule and the firewall allow rule open together and roll back together, and all other traffic is denied.

  • Inspect traffic in real time

    With Intrusion Detection & Prevention, traffic through the gateway is checked against signatures that describe known attack patterns, and attacks can optionally be blocked.

Example scenarios

  • A team putting its web server on the internet

    The DNAT rule and the firewall permit are opened together in one step for a single port. All other traffic is refused, and both are withdrawn together when needed.

  • A company opening its admin screens to Türkiye only

    With a country-based IP block group, admin and portal screens are reachable only from Türkiye. The list is kept up to date automatically, with no IP list to maintain.

  • An admin finding out why a connection is blocked

    Logging is switched on for the rule, and firewall and NAT logs are viewed in the portal. Records can be exported as CSV when needed.

Simplify deployment and management of your network security

  • Country-based filtering

    IP block groups for 250 countries are kept up to date automatically. Open your admin and portal screens to Türkiye only, without maintaining IP lists yourself.

  • Flexible rule definitions

    Use allow, drop and reject actions; single IPs, CIDRs, ranges or firewall groups as source and destination; 415 built-in application profiles or your own TCP, UDP and ICMP profiles.

  • Full visibility

    Turn on logging per rule, and view firewall and NAT logs in the portal or export them as CSV.

  • Unified management

    Manage firewall, NAT, site-to-site VPN, load balancer virtual IPs and static routes on the same gateway with one common rule table.

  • High availability

    The gateway runs on two nodes, active and standby; if the active node fails, the standby node takes over.

  • NAT and traffic shaping

    Map external and internal ports with SNAT and DNAT rules, and apply a rate-limit profile to the gateway's inbound and outbound traffic.

Embedded security

  • Audit trail

    Rule changes appear in the audit trail with the name of the user who made them.

  • The same rules for IPv4 and IPv6

    A rule can apply to IPv4, IPv6 or both IP versions at once.

  • A device that fits your policy

    If your corporate security policy requires a specific firewall, you can choose your own virtual firewall appliance in place of the gateway.

Firewall pricing

The gateway firewall comes as part of your virtual data centre. Contact us for pricing, including add-ons such as a virtual firewall appliance or Intrusion Detection & Prevention.

Papers, a calculator and a laptop on a desk

Learn more to get started

Technical specifications

Frequently asked questions