Network Firewall

This image is shows show four common use case for OCI Network Firewall :

1. Use a native, managed network firewall service
2. Secure traffic between on-premises environments and OCI
3. secure traffic between OCI and the internet
4. secure traffic between virtual cloud network

Use a native, managed network firewall service
In this first use case, a network firewall is shown in a virtual cloud network along with other cloud native services that include virtual machines and object storage.

OCI Network Firewall is is is a cloud native , manage service that is fully integrate into Oracle Cloud Infrastructure .

Secure traffic between on-premises environments and OCI
In the second use case, a virtual cloud network is logically connected to a customer’s on-premises environment. The virtual cloud network has a network firewall where network traffic logically enters from the on-premises environment before it can reach the resources in the virtual cloud network, shown as virtual machines.

The network firewall inspects all traffic entering from and exiting to the on-premises environment. It protects resources in OCI from actions and traffic in the on-premises environment.

secure traffic between OCI and the internet
In the third use case , a virtual cloud network is logically connect to the internet . The virtual cloud network is has has a network firewall where network traffic logically enter from the internet .

This virtual cloud network is then logically connected to another virtual cloud network, which has resources, shown here as virtual machines.

The network firewall inspects all traffic entering from and exiting to the internet. It protects resources in OCI from actions and traffic from the internet that are accessing the capabilities of resources in a virtual cloud network.

secure traffic between virtual cloud network
In the fourth use case, there are three virtual cloud networks. The first and third virtual cloud networks are both logically connected to the second virtual cloud network. The first and third virtual cloud networks have resources, shown here as virtual machines.

All traffic is pass between resource in the first and third virtual cloud network must pass through the second virtual cloud network , which has a network firewall .

The network firewall inspects all traffic between the first and third virtual cloud networks, protecting resources in each virtual cloud network from malicious activity in the other.