Comparison route

Single service comparison

Back to main page

Network Threat Protection

Azure Firewall

Managed cloud-native firewall service for centralized network threat protection.

Azure logo

Azure

Service information

Azure Firewall iconAzure Firewall

Shortname: Azure Firewall

Huawei equivalent shortnames: CFW, DDoS

Keywords: firewall, network security, threat

Differences vs Huawei

  • Policy hierarchy and rule collection behavior differ.

Migration to Huawei

  • Map detection/prevention policy scope, enforcement points, and response workflows. For Azure Azure Firewall, the direct Huawei equivalence layer is CFW + DDoS; validate feature-by-feature parity for control plane, data plane, and operational behavior before cutover.
  • Use a composed Huawei migration pattern where needed: CFW + DDoS + SecMaster. Treat CFW + DDoS as the core equivalent capability and use the additional services to cover integration, security, observability, and governance gaps.
  • Pricing model difference: Azure usually bills policy/protected-resource tiers plus request/event/scan volume; Huawei usually bills WAF/CFW/DEW/DBSS/DSC billing by edition, protected assets, requests/events, or scans. Recalculate TCO with peak load, request volume, retention period, and cross-region/interconnect traffic before production migration.
Huawei Cloud logo

Huawei Cloud

Huawei equivalent service

Cloud Firewall iconCloud Firewall

Shortname: CFW

General function: Network Threat Protection

Managed cloud firewall protection service.

Keywords: firewall, network security, threat

Huawei equivalent service

DDoS Mitigation iconDDoS Mitigation

Shortname: DDoS

General function: Network Threat Protection

Distributed denial-of-service protection service.

Keywords: ddos, attack mitigation, protection