Creating a Pay-per-use Firewall

To use an IAM user, ensure the IAM user has been granted the BSS Administrator and CFW FullAccess permissions.

• CFW can be used only in the region selected during creation. To use it in another region, switch to the corresponding region and then create it.

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. In the navigation pane on the left, click and choose Security > Cloud Firewall. The Dashboard page will be displayed.
4. Click Create CFW. For more information, see .

   Table 1 Parameters for creating CFW

   Parameter	Description
   Billing Mode	Pay-per-use. You will be billed based on the actual protection on resources.
   Region	Region where the CFW is to be purchased.
   Editions	Currently, only the professional edition is supported.
   Firewall Name	Firewall name. It must meet the following requirements: Only letters (A to Z and a to z), numbers (0 to 9), spaces, and the following characters are allowed: -_ The value can contain 1 to 48 characters.
   Enterprise Project	Enterprise project. Select the enterprise project that you belong to from the drop-down list. The purchased CFW instance will be put under that enterprise project for billing management, and will be able to protect the resources of all enterprise projects. This option is only available if you have enabled enterprise projects, or if you are logged in using an enterprise master account. You can use an enterprise project to centrally manage your cloud resources and members by project. Value default indicates the default enterprise project. The original resources of your account and the resources that are not allocated to any enterprise projects under your account are displayed in the default enterprise project.
   Tags	(Optional) It is recommended that you use the TMS predefined tag function to add the same tag to different cloud resources.

5. Confirm the information and click Create Firewall.

• For details about how to view the basic information and overall protection capabilities of a firewall instance, see Cloud Firewall Dashboard.
• You can delete CFW if you no longer need it. For details, see Deleting CFW.