HiTechCloud vCWAF

Cloud Firewall

HiTechCloud vCWAF is a next-generation firewall service on a cloud computing platform, combining AI/ML-Powered NGFW, application control, user identification, deep packet inspection, IPS, Sandbox, URL Filtering, DNS Security and VPN.

AI/ML NGFWIPS/IDSSandboxDNS SecurityIPSec/SSL VPN
Next-Generation Firewall

Protect cloud data and workloads with a next-generation firewall.

vCWAF acts as a defense-in-depth layer for Cloud Server, VPC/DPC, VMware Cloud and Kubernetes. It lets businesses control North-South and East-West traffic, segment security zones, detect malware, filter web content, protect DNS and establish secure VPN connections.

AI/ML Detect and block advanced threats with a next-generation firewall (NGFW)
L3-L7 Control over network, applications, users, content and DNS
03 Palo Alto, Fortinet and VMware Native solution lines
HA Supports redundancy models, VPN and scaling to cloud demand
Security capabilities

Control, detect and block threats across the entire cloud environment.

01

Intelligent recognition capability

Control traffic by application, user and content to enforce policy more precisely than a traditional firewall.

02

Proactive threat prevention

Combines IPS, anti-virus, anti-spyware and vulnerability protection to reduce the risk of exploitation on servers and applications.

03

Malware analysis using a sandbox

Send suspicious content to a dedicated analysis environment to help detect APTs, unknown malware and anomalous behavior.

04

IPSec VPN & SSL VPN

Secure connectivity between data centers, branch offices, remote users and cloud regions over Site-to-Site or Client-to-Site VPN.

05

Advanced URL Filtering

Classifies, filters and protects web sessions against malicious sites, phishing, command-and-control traffic and inappropriate content.

06

DNS Security

Detect and block attacks over DNS, limit DNS tunneling and add a real-time protection layer to your systems.

07

Distributed Firewall

Protects east-west traffic between virtualized workloads, suited to VPC/DPC, VMware Cloud and heavily segmented systems.

08

Easy policy management

Centralizes security policy with support for zones, address/service objects, logging, alerting and monitoring system integration.

Key features

A set of firewall, networking and operational features suited to modern cloud infrastructure.

Networking Services

  • IPv4/IPv6
  • Static Routing, BGP, OSPF
  • Policy Based Routing
  • SD-WAN
  • NAT/PAT
  • QoS
  • IPSec VPN, SSL VPN

Gateway Security

  • Stateful L3/L7 Rules
  • Application Control
  • User Identity
  • Deep Packet Inspection
  • IPS/IDS
  • Malicious IP Filtering
  • URL Filtering

Advanced Threat Prevention

  • Anti-Virus
  • Anti-Spyware
  • Anti-Malware
  • Cloud Sandboxing
  • DNS Security
  • IoT Security
  • Data Loss Protection

Operations

  • High Availability
  • Syslog/SNMP/Netflow
  • Email Alert
  • Security Profile
  • Policy Recommendation
  • Centralized Management
  • 24/7 Support
Solution line

Choose a Cloud Firewall by vendor, performance, features and deployment platform.

Palo Alto NGFW

Suited to systems that require an ML-Powered NGFW, application and user identification, WildFire Sandbox, Advanced URL Filtering, and DNS Security.

  • VCF1, VCF2, VCF3
  • Basic, Gold, Platinum
  • Supports IPsec/SSL VPN
  • Up to 10,000 firewall policies

Fortinet NGFW

Optimizes cost and performance, with support for Security Fabric, IPS, AMP, FortiSandbox Cloud, Web Security, Anti-Spam, and advanced add-ons.

  • VCF02, VCF04, VCF08
  • Basic to Enterprise
  • SD-WAN, IPS, AMP
  • Up to 200,000 firewall policies

VMware Native Firewall

Protects North-South and East-West traffic directly within the VMware Cloud environment, with distributed firewall and advanced threat prevention.

  • Standard, Advance, Premium
  • By throughput or vCPU
  • Distributed Firewall
  • Suited to VMware VPC/DPC
Deployment model

From a minimal setup to high availability for business-critical systems.

01

Standalone

A primary firewall for systems that need lower cost, a simple architecture, or a standby environment.

02

High-Availability

One active and one passive firewall, increasing availability for business-critical systems.

03

VPC/DPC

Protects virtualized server systems in a Virtual Private Cloud or Dedicated Private Cloud.

04

Cloud Server & Kubernetes

Deploy for VMware/OpenStack Cloud Servers or Kubernetes clusters that need access and traffic control.

vCWAF pricing

Choose a Cloud Firewall plan by vendor, resources, throughput and security features.

Palo Alto Basic

VCF1-BASIC

An entry-level Palo Alto plan for systems that need NGFW, App-ID, User-ID, VPN, and basic security policies.

2 vCPU 7 GB RAM 60 GB Disk 250 policies
6,600,000 VND / 1 month
  • Virtual ML-powered NGFW
  • Application Control
  • User Identity
  • Network/Routing
  • IPSec VPN Site-to-Site
  • Basic SSL VPN
  • 40 security zones
Get a consultation
Palo Alto Basic

VCF2-BASIC

More resources and more policies for a growing system, while keeping the core Basic feature set.

3 vCPU 7 GB RAM 60 GB Disk 1.500 policies
9,350,000 VND / 1 month
  • Virtual ML-powered NGFW
  • Application Control
  • User Identity
  • Network/Routing
  • 1.000 IPSec tunnels
  • 500 SSL VPN tunnels
  • 5.000 routes
Get a consultation
Palo Alto Basic

VCF3-BASIC

A higher-performance Basic plan for systems with many concurrent sessions, many policies, and large routing requirements.

4 vCPU 9 GB RAM 60 GB Disk 10.000 policies
12,100,000 VND / 1 month
  • Virtual ML-powered NGFW
  • Application Control
  • User Identity
  • 2.000 IPSec tunnels
  • 2.000 SSL VPN tunnels
  • 400 clientless VPN
  • 10.000 routes
Get a consultation
Palo Alto Gold

VCF1-Gold

Adds anti-virus, anti-spyware and vulnerability protection for systems that need a more proactive defense.

2 vCPU 7 GB RAM 60 GB Disk 250 policies
7,700,000 VND / 1 month
  • Includes Basic
  • Anti-Virus
  • Anti-Spyware
  • Vulnerability Protection
  • IPSec VPN
  • Basic Remote Access VPN
  • 40 security zones
Get a consultation
Palo Alto Gold

VCF3-Gold

The Gold plan is for larger systems that need more policies, more VPN tunnels and active defense capability.

4 vCPU 9 GB RAM 60 GB Disk 10.000 policies
14,575,000 VND / 1 month
  • Includes Basic
  • Anti-Virus
  • Anti-Spyware
  • Vulnerability Protection
  • 2.000 IPSec tunnels
  • 2.000 SSL VPN tunnels
  • 10.000 routes
Get a consultation
Palo Alto Platinum

VCF1-Platinum

Adds WildFire, Advanced URL Filtering, and DNS Security for systems that need a deeper protection layer.

2 vCPU 7 GB RAM 60 GB Disk 250 policies
20,800,000 VND / 1 month
  • Includes Gold
  • WildFire Sandbox
  • Advanced URL Filtering
  • DNS Security
  • APT Prevention
  • IPSec/SSL VPN
  • 40 security zones
Get a consultation
Palo Alto Platinum

VCF2-Platinum

The Platinum plan balances DNS protection, advanced web filtering and malware analysis.

3 vCPU 7 GB RAM 60 GB Disk 1.500 policies
15,950,000 VND / 1 month
  • Includes Gold
  • WildFire Sandbox
  • Advanced URL Filtering
  • DNS Security
  • APT Prevention
  • 1.000 IPSec tunnels
  • 500 SSL VPN tunnels
Get a consultation
Palo Alto Platinum

VCF3-Platinum

The top Platinum plan in the Palo Alto range, for systems that need high throughput and large policy sets.

4 vCPU 9 GB RAM 60 GB Disk 10.000 policies
21,175,000 VND / 1 month
  • Includes Gold
  • WildFire Sandbox
  • Advanced URL Filtering
  • DNS Security
  • APT Prevention
  • 2.000 IPSec tunnels
  • 10.000 routes
Get a consultation
Fortinet Basic

VCF02-Basic

An entry-level Fortinet plan for small systems needing a firewall, Application Control and VPN.

2 vCPU 6 GB RAM 60 GB Disk 10.000 policies
5,500,000 VND / 1 month
  • Firewall
  • Application Control
  • VPN Client-to-Site/Site-to-Site
  • Routing/NAT
  • Policy management
  • Log monitoring
Get a consultation
Fortinet Basic

VCF04-Basic

The Basic plan for systems that need 4 vCPUs and greater storage capacity.

4 vCPU 8 GB RAM 80 GB Disk 10.000 policies
11,000,000 VND / 1 month
  • Firewall
  • Application Control
  • VPN Client-to-Site/Site-to-Site
  • Routing/NAT
  • Policy management
  • Log monitoring
Get a consultation
Fortinet Basic

VCF08-Basic

The high-performance Basic plan for large systems with up to 200,000 policies.

8 vCPU 16 GB RAM 100 GB Disk 200.000 policies
22,500,000 VND / 1 month
  • Firewall
  • Application Control
  • VPN Client-to-Site/Site-to-Site
  • Routing/NAT
  • Policy management
  • Log monitoring
Get a consultation
Fortinet Gold

VCF02-Gold

Adds IPS, AMP, antivirus and FortiSandbox Cloud Service for small systems.

2 vCPU 6 GB RAM 60 GB Disk 10.000 policies
6,600,000 VND / 1 month
  • Includes Basic
  • IPS
  • AMP
  • Antivirus
  • Botnet/CDR protection
  • FortiSandbox Cloud
  • Application Control
Get a consultation
Fortinet Gold

VCF08-Gold

The high-performance Gold plan for systems that need substantial resources and large policy sets.

8 vCPU 16 GB RAM 100 GB Disk 200.000 policies
27,000,000 VND / 1 month
  • Includes Basic
  • IPS
  • AMP
  • Antivirus
  • Mobile Malware/Botnet
  • FortiSandbox Cloud
  • VPN
Get a consultation
Fortinet Platinum

VCF02-Platinum

Adds Web Security, Secure DNS Filtering, and Anti-Spam for systems that need tighter web control.

2 vCPU 6 GB RAM 60 GB Disk 10.000 policies
7,700,000 VND / 1 month
  • Includes Gold
  • Web Security
  • URL/Web Content Filtering
  • Secure DNS Filtering
  • Anti-Spam
  • FortiSandbox Cloud
  • IPS/AMP
Get a consultation
Fortinet Platinum

VCF04-Platinum

The Platinum plan for businesses that need advanced web filtering, DNS filtering and anti-spam.

4 vCPU 8 GB RAM 80 GB Disk 10.000 policies
15,500,000 VND / 1 month
  • Includes Gold
  • Web Security
  • URL/Web Content Filtering
  • Secure DNS Filtering
  • Anti-Spam
  • FortiSandbox Cloud
  • IPS/AMP
Get a consultation
Fortinet Platinum

VCF08-Platinum

The high-performance Platinum plan for large systems needing in-depth web and DNS protection.

8 vCPU 16 GB RAM 100 GB Disk 200.000 policies
31,500,000 VND / 1 month
  • Includes Gold
  • Web Security
  • URL/Web Content Filtering
  • Secure DNS Filtering
  • Anti-Spam
  • FortiSandbox Cloud
  • IPS/AMP
Get a consultation
Fortinet Enterprise

VCF02-Enterprise

The Enterprise plan adds DLP, SD-WAN, Security Rating, Industrial DB and IoT Detection.

2 vCPU 6 GB RAM 60 GB Disk 10.000 policies
8,500,000 VND / 1 month
  • Includes Platinum
  • Data Loss Protection
  • SD-WAN
  • Security Rating
  • Industrial DB
  • IoT Detection
  • Anti-Spam
Get a consultation
Fortinet Enterprise

VCF04-Enterprise

The Enterprise plan balances cost for systems that need a fuller Fortinet feature set.

4 vCPU 8 GB RAM 80 GB Disk 10.000 policies
17,000,000 VND / 1 month
  • Includes Platinum
  • Data Loss Protection
  • SD-WAN
  • Security Rating
  • Industrial DB
  • IoT Detection
  • Anti-Spam
Get a consultation
Fortinet Enterprise

VCF08-Enterprise

The top Enterprise plan for large systems that need extensive policy capacity and comprehensive security.

8 vCPU 16 GB RAM 100 GB Disk 200.000 policies
34,500,000 VND / 1 month
  • Includes Platinum
  • Data Loss Protection
  • SD-WAN
  • Security Rating
  • Industrial DB
  • IoT Detection
  • Anti-Spam
Get a consultation
VMware Standard

Standard 1

A VMware Native plan priced by throughput, for distributed routing and basic gateway security.

300 Mbps Networking Services Gateway Security L3 Rules
350,000 VND / 1 month
  • Distributed Routing
  • IPv4/IPv6 Static Routing
  • NAT
  • IPSec VPN
  • Stateful L3 Rules
  • Gateway Security
Get a consultation
VMware Standard

Standard 2

The Standard plan at 1 Gbps throughput, for cloud environments that need basic gateway protection.

1 Gbps Networking Services Gateway Security L3 Rules
1,400,000 VND / 1 month
  • Distributed Routing
  • IPv4/IPv6 Static Routing
  • NAT
  • IPSec VPN
  • Stateful L3 Rules
  • Gateway Security
Get a consultation
VMware Standard

Standard 3

The high-throughput Standard plan for systems that need to scale gateway security traffic.

10 Gbps Networking Services Gateway Security L3 Rules
12,000,000 VND / 1 month
  • Distributed Routing
  • IPv4/IPv6 Static Routing
  • NAT
  • IPSec VPN
  • Stateful L3 Rules
  • Gateway Security
Get a consultation
VMware Advance

Advance 1

The Advance plan adds gateway advanced threat prevention at 300 Mbps throughput.

300 Mbps Gateway Security Threat Prevention L7 Rules
450,000 VND / 1 month
  • Includes Standard
  • Advanced L7 App Rules
  • URL Filtering
  • Malware Detection
  • Cloud Sandboxing
  • Artifact Analysis
Get a consultation
VMware Advance

Advance 2

The 1 Gbps Advance plan for systems that need L7 rules, URL filtering and sandboxing.

1 Gbps Gateway Security Threat Prevention L7 Rules
1,800,000 VND / 1 month
  • Includes Standard
  • Advanced L7 App Rules
  • URL Filtering
  • Malware Detection
  • Cloud Sandboxing
  • Artifact Analysis
Get a consultation
VMware Advance

Advance 3

The high-throughput Advance plan for VMware Cloud environments needing in-depth gateway protection.

10 Gbps Gateway Security Threat Prevention L7 Rules
15,000,000 VND / 1 month
  • Includes Standard
  • Advanced L7 App Rules
  • URL Filtering
  • Malware Detection
  • Cloud Sandboxing
  • Artifact Analysis
Get a consultation
VMware Premium

Premium 1

A Premium plan priced by vCPU, focused on Distributed Firewall and Distributed Security Advanced.

1 vCPU Distributed Firewall Distributed Security Threat Prevention
350,000 VND / 1 month
  • Distributed Firewall
  • Stateful L2/L3 Rules
  • Distributed FQDN Filtering
  • Malicious IP Filtering
  • Distributed IDS/IPS
  • Distributed Malware Prevention
Get a consultation
VMware Premium

Premium 2

The Premium plan at 10 vCPUs, for multi-workload environments that need east-west protection.

10 vCPU Distributed Firewall Distributed Security Threat Prevention
3,300,000 VND / 1 month
  • Distributed Firewall
  • Stateful L2/L3 Rules
  • Distributed FQDN Filtering
  • Malicious IP Filtering
  • Distributed IDS/IPS
  • Distributed Malware Prevention
Get a consultation
VMware Premium

Premium 3

The Premium 100 vCPU plan for large-scale VMware environments that need micro-segmentation and threat prevention.

100 vCPU Distributed Firewall Distributed Security Threat Prevention
30,000,000 VND / 1 month
  • Distributed Firewall
  • Stateful L2/L3 Rules
  • Distributed FQDN Filtering
  • Malicious IP Filtering
  • Distributed IDS/IPS
  • Distributed Malware Prevention
Get a consultation
FAQ

Frequently asked questions about Cloud Firewall.

HiTechCloud advises on sizing, vendor selection, the HA model, licensing, deployment VMs and a Cloud Firewall operating plan based on your actual infrastructure.

What is HiTechCloud vCWAF?

vCWAF is a virtualized cloud firewall/NGFW service that protects cloud infrastructure through application, user and network traffic control, IPS, malware inspection, URL and DNS filtering, and VPN.

Does the price include the VPS to install the firewall on?

The packages cover the firewall license and service cost. VPS or infrastructure resources for the deployment are quoted separately, based on the actual architecture.

Can customers manage the firewall themselves?

Yes. Customers can manage firewall policy themselves. HiTechCloud provides consulting, deployment, handover and technical support.

Which firewall product lines does vCWAF support?

HiTechCloud advises on the Palo Alto, Fortinet and VMware native firewall lines, matched to your budget, performance needs, security features and the cloud platform you run.

Are VPN and redundancy models supported?

Yes. Depending on the plan, the solution can support IPSec VPN, SSL VPN, site-to-site, client-to-site and a high-availability model for greater availability.

HiTechCloud Security

Need advice on the right Cloud Firewall plan?

Get advice on choosing Palo Alto, Fortinet or VMware Native Firewall based on performance, security features, deployment model and budget.

Get a consultation