CyberIndexBeta

Product

SaaS firewall service for Alibaba Cloud environments that enforces unified access control and intrusion prevention on internet-facing, VPC-to-VPC and internal cloud traffic without changing the network architecture. Cloud Firewall allows you to centrally manage access control policies from the Internet to services and microsegmentation policies between services. Cloud Firewall supports fine-grained access control from Layer 4 to Layer 7, including access control based on IP addresses, ports, applications, domains, and locations. Cloud Firewall can detect and analyze the outbound connection traffic of cloud resources to help distinguish malicious requests. It is available as a cloud instance.

Current Version
Cloud · no version
Market
EnterpriseMid-MarketSMB
Licence
Paid
Price
USD 420 / monthly
Record Created
2026-09-20
Last Updated
2026-10-14

Vendor

Alibaba Cloud is the cloud computing arm of Alibaba Group and the largest cloud provider in China. Its security products exist to protect workloads running on its own platform rather than to be bought separately, which is the same pattern as the other cloud providers in this index. Cloud Firewall, the product listed here, is a managed firewall service for traffic entering, leaving and moving between workloads in Alibaba Cloud, with intrusion prevention and traffic visibility built in. It sits alongside the platform's anti-DDoS, web application firewall and host protection services. It cannot be deployed outside Alibaba Cloud, it is billed as part of cloud consumption rather than licensed, and the malware laboratories do not test it. A reader comparing it with an appliance firewall here is comparing two different kinds of purchase. Vendor page →

Country
China
Headquarters
Hangzhou, China
Year Established
2009
Customers
5M organisations
Users
Not known
Revenue
≈ $22.1B (2026)

Government restrictions

US Department of Defense list only

Parent Alibaba Group on the DoD list since June 2026; Alibaba is challenging it in court.

WhereMeasureDateEffect
USDoD Chinese military companies (§1260H), parent2026-06-10DoD may not contract with it from 2026-06-30.

Named a "Chinese military company": the DoD may not contract with it. Nothing restricts other buyers. Each measure above names Alibaba Cloud, not this product specifically, and applies only where it says. CSI records what a government has published and links to it; this is not an assessment of the product, and the product stays listed so the record can be read. Lists were last checked on 2026-10-09.

Platforms

Cloudnative

Target Market

Enterprise secondaryMid-Market secondarySMB primary

Capabilities

Stateful Inspectionkeynative
Intrusion Prevention (IPS)keynative
Intrusion Detection (IDS)native
SSL/TLS Inspectionkeypartial
VPN GatewaykeyNot known
SD-WANNot known
Application Controlkeynative
High Availabilitynative
Deep Packet Inspectionnative
Central Management Consolenative

2 of 10 not yet known — not recorded, which is not the same as not supported.

Specifications

Firewall TypeCloud

4 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummarySubscriptionnot statedmonthlyUSD 420

Versions

Not known

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-09-20. Everything below is what has changed since.

  • 2026-10-14Capability addedSSL/TLS Inspection: limitedevidence
  • 2026-10-08Pricing plan addedPrice: USD 420 monthlyevidence
  • 2026-10-08Capability addedIntrusion Detection (IDS): built inevidence
  • 2026-10-07Capability addedDeep Packet Inspection: built inevidence
  • 2026-10-07Capability addedApplication Control: built inevidence
  • 2026-10-07Capability addedStateful Inspection: built inevidence
  • 2026-10-07Pricing plan addedPrice: subscriptionevidence
  • 2026-10-06Capability addedHigh Availability: built inevidence
  • 2026-10-06Capability addedCentral Management Console: built inevidence
  • 2026-10-06Capability addedIntrusion Prevention (IPS): built inevidence
  • 2026-09-20Product updatedSold to: SMBevidence
  • 2026-09-20Product createdNew product, listed in Network Firewallevidence
  • 2026-09-20Platform addedRuns on Cloudevidence
  • 2026-09-20Product updatedAlso sold to: Enterpriseevidence
  • 2026-09-20Product updatedAlso sold to: Mid-Marketevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.