Exploring firewalls

IBM© Cloud offers several firewalls to choose from. The following table compares the firewall solutions to help you choose the one that's right for you. To learn more about the individual offering, click its name in the table.

All instances of the FortiGate Security Appliance 1 Gbps and Hardware Firewall Dedicated services are deprecated. Existing instances can be used until they are no longer supported on 30 May 2021. Use one of the following available firewall options to get our latest security capabilities on IBM Cloud. For migration information, see Migrating FortiGate Security Appliance 1Gbps and Migrating Hardware Firewall (Dedicated).

	Security Groups (VSI only)	IBM Cloud Juniper vSRX Standard	Virtual Router Appliance	FortiGate Security Appliance 10 Gbps	FortiGate Security Appliance 1 Gbps	Hardware Firewall	Hardware Firewall (Dedicated)	Cloud Internet Services
Stateful Packet Inspection								IP Firewall only
Public Network Protection
Private Network Protection
Ingress Rules								IP Firewall only
Egress Rules
Single Tenant Appliance
VLAN Protection
Multi-VLAN Support
NAT Support
SSL/IPsec VPN Termination
Open VPN Termination								Only with single port on TCP/UDP
HA Option	N/A							Using Range and Load Balancers
Manage from API & Portal	Yes	Appliance GUI	Appliance GUI	Appliance GUI	Appliance GUI	Yes	Yes	Cloud console
10 Gbps Support	N/A
NGFW Add-ons (IPS, AV, WF)								TLS encryption, IP Firewall rules, and Proxy Protocol v1
Cost	$0 per Month	Starting $299.00 per month + Cost of Bare Metal Server	Starting $219.00 per month + Cost of Bare Metal Server	Starting $4,999.00 per month	Starting $999.00 per month	Starting $99.00 per month	Starting $999.00 per month	Starting $275.00/Domain