OCI Network Firewall

OracleSecurity

Managed next-generation firewall service powered by Palo Alto Networks VM-Series, with application awareness, TLS inspection, URL filtering, intrusion prevention (IPS), DNS security, and deployment flexibility across VCN or Transit Hub topologies

Jurisdictional exposure

Provider HQ
USAustin, USA

Subject to CLOUD Act, FISA-702, DPF

Region locations
APACEEAEUUKUSOther56 regions across 6 jurisdictions
Sovereign option
Yes — 10 sovereign-flagged regions available

Attributes

Vendor
Palo Alto Networks

Sub-services (2)

Firewall Policies

Palo-Alto-sourced security profiles for apps, URLs, IPS, and DNS

TLS Inspection

Decrypt and inspect outbound HTTPS traffic using managed certificates

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

Where this runs

56 regions
27 countries
10sovereign
Sovereign regions (10)
  • EU Sovereign South (Madrid) · MadridOracle EU Sovereign Cloud
  • EU Sovereign Central (Frankfurt) · FrankfurtOracle EU Sovereign Cloud
  • US Gov East (Ashburn) · AshburnOracle US Government Cloud
  • US Gov West (Phoenix) · PhoenixOracle US Government Cloud
  • US DoD East (Ashburn) · AshburnOracle US Defense Cloud
  • US DoD North (Chicago) · ChicagoOracle US Defense Cloud
  • US DoD West (Phoenix) · PhoenixOracle US Defense Cloud
  • UK Gov South (London) · LondonOracle UK Sovereign Cloud
  • UK Gov West (Newport) · NewportOracle UK Sovereign Cloud
  • Australia Dedicated Region (Canberra) · CanberraOracle Cloud Infrastructure for Australia Government and Defence
Commercial regions (46)

Europe (13)

  • France South (Marseille)
  • France Central (Paris)
  • Germany Central (Frankfurt)
  • Italy Northwest (Milan)
  • Italy North (Turin)
  • Netherlands Northwest (Amsterdam)
  • Serbia Central (Jovanovac)
  • Spain Central (Madrid)
  • Spain Central (Madrid 3)
  • Sweden Central (Stockholm)
  • Switzerland North (Zurich)
  • UK South (London)
  • UK West (Newport)

North America (9)

  • Canada Southeast (Montreal)
  • Canada Southeast (Toronto)
  • Mexico Northeast (Monterrey)
  • Mexico Central (Querétaro)
  • US East (Ashburn)
  • US Midwest (Chicago)
  • US West (Phoenix)
  • US West (Salt Lake City)
  • US West (San Jose)

South America (5)

  • Brazil East (São Paulo)
  • Brazil Southeast (Vinhedo)
  • Chile Central (Santiago)
  • Chile West (Valparaíso)
  • Colombia Central (Bogotá)

Asia (10)

  • India South (Hyderabad)
  • India West (Mumbai)
  • Indonesia North (Batam)
  • Japan Central (Osaka)
  • Japan East (Tokyo)
  • Malaysia West 2 (Kulai)
  • Singapore (Singapore)
  • Singapore West
  • South Korea North (Chuncheon)
  • South Korea Central (Seoul)

Oceania (2)

  • Australia Southeast (Melbourne)
  • Australia East (Sydney)

Middle East (5)

  • Israel Central (Jerusalem)
  • Saudi Arabia West (Jeddah)
  • Saudi Arabia Central (Riyadh)
  • UAE Central (Abu Dhabi)
  • UAE East (Dubai)

Africa (2)

  • Morocco West (Casablanca)
  • South Africa Central (Johannesburg)

Tags

Equivalent services on other platforms

AWS Network FirewallAWS

Managed stateful firewall, IDS/IPS, and TLS inspection service deployed as VPC endpoints with Suricata-compatible rule syntax, AWS Managed Threat Signatures rule groups, and centralised deployment via AWS Firewall Manager across Organizations

Azure FirewallAzure

Cloud-native, stateful firewall-as-a-service with built-in high availability, unrestricted scale, threat intelligence-based filtering, and centralised policy

Cloudflare Network FirewallCloudflare

Cloud firewall-as-a-service that filters and inspects network-layer traffic across Cloudflare's network for sites connected via Magic Transit or Cloudflare WAN. Formerly Magic Firewall; Enterprise only.

Cloud Temple Managed FirewallCloud Temple

Fully managed next-generation firewall in an active/passive HA cluster, in a Stormshield edition (ANSSI-qualified) or Fortinet edition, operated 24/7 by Cloud Temple with changes via change management; billed monthly per HA cluster

Google Cloud Next Generation FirewallGCP

Managed next-generation firewall for VPC networks with L7 inspection, IDPS threat signatures (Palo Alto-powered), TLS interception, hostname-based egress rules, and unified policy management across networks and organisations

Hetzner Cloud FirewallsHetzner

Stateful network firewalls applied to cloud servers via labels, with reusable rule sets across server fleets

IONOS Network Security GroupsIONOS

Centrally managed firewall rule sets for a virtual data centre, applied to VMs and NICs that are members of the group to filter ingress and egress traffic

Pricing

Pricing model:pay-as-you-go