Oracle Cloud Infrastructure Network Firewall Overview

In this session, we will use OCI Network Firewall and its advanced features to create a layered network security solution.
Oracle Cloud Infrastructure Network Firewall is a next-generation managed network firewall and intrusion detection and prevention service for your Oracle Cloud Infrastructure VCN.
The Network Firewall service offers simple setup and deployment and gives you visibility into traffic entering your cloud environment (North-south network traffic) as well as the traffic between subnets (East-west network traffic).
A network firewall is a highly available and scalable instance that you create in the subnet of your choice. The firewall applies business logic to traffic that is specified in an attached firewall policy. Routing in the VCN is used to direct network traffic to and from the firewall.
With Sachin Sharma. Stay tuned for more!
Check and register below for the upcoming sessions:
bit.ly/3NXe0qB
Note: This is a recording of the live event from August 3rd, 2022. Screens and flow may have changed.
#oracle #database #cloud #apps #enterprise #enterprisecloud #software #developers #network #firewall #networking #VCN #managed #availability #scale #subnet #routing #route #direct #traffic #administrator #activedirectory #azure #infrastructure #develop #security #devops #kernel #layer #projectdatabase #software #developers #develop #modular #devops #console #kernel #layer #project #CLI #restapis #tools #management #software #dcx #machine #machinelearning #private #cloudcomputing #cloudapps #cloudarchitect #learning #technology #tech #technologyvideo #cybersecurity #cyber #serverless #build #deploy #deployment #run #running
----------------------------------------------
Copyright © 2022, Oracle and/or its affiliates.

[@TheManubarcafan]

i adore the oracle cloud

[@TeeFowosire]

Thank you for the video. Can you please advise on what RT you attached to the Spoke-DRG-attachment.

[@SACHINSUR]

Hello Fatima. We have not added any RT for spoke VCN attachment but we have added a RT with a default route pointing to OCI network firewall IP on Hub Network DRG Attachment. you may find more reference architecture in the link: docs.oracle.com/en/solutions/oci-network-firewall/index.html#GUID-875E911C-8D7D-4205-952B-5E8FAAD6C6D3

[@samratsinha4947]

1. Can we create network firewall in private subnet. 2. I understand, we add the forward routing to internet gateway to send the request to network firewall. If we want to deassociate the forward routing from the internet gateway, how can we do that without terminating the IGW

[@aa-jx7qm]

After setting up the firewall, all outbounds are blocked. Inbound policy is fine. Is there a separate outbound policy application section?

[@SACHINSUR]

Hello. By default everything is denied when routing is set up to go through Firewall. Rules need to created to allow the traffic.

[@hanyghareb4985]

Hi, So I have some oci services like ODA digital assistant, what is the required to enable access internal Web service within customer Data center?

[@SACHINSUR]

Hello Hany. If it is an internal Web Service and deployed on a VCN. it can be connected privately over site to site or fast connect connection from On Prem customer data centre to OCI.

[@salexkorsan8790]

Brother i'm Using DNS Service of Oracle Cloud, is there any way to Activate Firewall on DNS

[@SACHINSUR]

Hey Korsan. I believe you are using OCI public DNS zone for your Public services on OCI. If that is the case you do not have to make any changes in the A records on OCI DNS zone and just create a routing as mentioned in the Video for North-South Traffic over Internet Gateway for Public services such as web servers on OCI