Sangfor Cloud Platform (SCP)

Enterprise Cloud Computing Platform Built on Business-Centric HCI.
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
6.11.3
Sangfor Cloud Platform (SCP) {{ breadTitle }} Security Service Virtual Machine VPC Firewall
{{sendMatomoQuery("Sangfor Cloud Platform (SCP)","VPC Firewall")}}

VPC Firewall

{{ $t('productDocDetail.updateTime') }}: 2025-12-22

You can configure access control policies for routers at the tenant VPC boundary to establish a secure network boundary between the inside and outside of the VPC network.

Precautions

  1. One VPC tenant can create up to 1,000 access control policies.
  2. A resource pool can have up to 20,000 dropped packet logs.

Steps

  1. Go to Security > VPC Firewall, select a VPC from the tree menu on the left, and click New.

• Source/Destination: It can be set to Any IP, Specified IP, Specified subnet, or Specified IP range.

• Service: It supports the selection of Predefined Service on the platform and Custom Service based on protocols and port numbers. Multiple rules can share custom services in the same effective scope.

• Action: It can be set to Drop or Allow.

• Log: Select Access Control Log as needed.

  1. Click Dropped Packet Logging at the top of the page. On the page that appears, select the target VPC network as the Scope and Time Range and enter the source and destination IP addresses to query logs. Click Log Settings in the upper-right corner of the page to enable or disable dropped packet logging for a resource pool.