Cloud Firewall is a Versa Networks firewall product offering: a firewall deployment that runs on the Versa Operating System (VOS) and is configured through Versa Director, the same way other Versa deployments are. Configuration covers WAN-side connectivity – transport domains, remote access VPN, and IPsec tunnels – and routing, including static routes and EBGP with route redistribution.
Key takeaways
- Cloud Firewall is a Versa Networks firewall product offering.
- It runs on VOS and is configured through Versa Director, like other Versa deployments.
- WAN configuration covers transport domains, remote access VPN, and IPsec tunnels.
- Routing configuration includes static routes and EBGP with redistribution.
- It fits the broader industry category of cloud-delivered firewall services.
On this page: Why it mattersHow it worksHow Cloud Firewall is configuredCloud Firewall & the VersaONE platformFAQ
Why is Cloud Firewall important?
Firewalling has been moving off dedicated appliances and into cloud-delivered form for years, driven by the same forces reshaping the rest of networking: workloads that live outside any single data center, remote users who never touch a branch office, and security teams who want one policy model instead of a different box for every location. A cloud-delivered firewall lets an organization apply consistent security policy to traffic regardless of where that traffic originates, without provisioning hardware at every site that needs protection.
Cloud Firewall is Versa’s entry in that category – a firewall product offering built on the same VOS foundation and Director-based management model as the rest of the Versa portfolio, rather than a separate, disconnected security stack. For an organization already standardized on Versa for SD-WAN or SASE, that shared foundation matters: the firewall deployment inherits the same orchestration, routing, and connectivity model the rest of the estate already uses, instead of introducing a second management plane to learn and operate.
What is Cloud Firewall?
As a Versa Networks firewall product offering, Cloud Firewall is provisioned and administered like other VOS-based deployments: configuration happens through Versa Director rather than through a bespoke console. That configuration spans two areas documented for Cloud Firewall deployments specifically: WAN interface settings – transport domains, remote access VPN, and IPsec tunnel connections – that establish how the firewall connects to the networks it protects, and routing – static routes and EBGP, including route redistribution – that determines how traffic actually reaches the firewall for inspection and enforcement.
Because it shares VOS and Director with the rest of the Versa platform, Cloud Firewall configuration follows the same template-driven, centrally administered model used across Versa’s product line, rather than a one-off interface unique to the firewall offering.
How Cloud Firewall is configured
Two configuration areas are documented for Cloud Firewall deployments. WAN interface and connectivity configuration establishes transport domains – the logical groupings that separate different WAN paths – along with remote access VPN settings and IPsec tunnel connections, giving the firewall the secure paths it needs to reach protected networks and remote sites. Routing configuration determines how traffic is directed to and through the firewall: static routes handle fixed paths, while EBGP with route redistribution lets the firewall participate in dynamic routing and exchange reachability information with adjacent networks. Together, these two areas define how a Cloud Firewall deployment connects and routes traffic before any security policy is applied to it.
Cloud Firewall & the VersaONE platform
Cloud Firewall sits within the same platform architecture as Versa’s other offerings: it runs on VOS, the operating system that also powers Versa’s SD-WAN, routing, and next-generation firewall capabilities on physical and virtual appliances, and it is configured and monitored through Versa Director, the console used to administer VOS devices, templates, and organizations across a Versa deployment. That shared foundation is what lets a Cloud Firewall deployment be operated with the same tooling – and, where applicable, the same Controller-based control plane and Versa Analytics visibility – as the rest of a customer’s Versa estate.
Frequently asked questions
What is Cloud Firewall, in one sentence?
Cloud Firewall is a Versa Networks firewall product offering: a VOS-based firewall deployment, configured through Versa Director, that handles WAN connectivity and routing on the way to enforcing security policy on traffic. It shares its foundation with the rest of Versa’s product line rather than standing apart as a separate stack.
Does Cloud Firewall run on the same software as other Versa products?
Yes. Cloud Firewall runs on VOS, the same operating system used across Versa’s SD-WAN, routing, and security portfolio, and is configured through Versa Director rather than a separate management console built just for firewall deployments. That shared foundation is what lets it use the same templates and orchestration model as other Versa products.
How is WAN connectivity configured for a Cloud Firewall deployment?
Through transport domain settings, remote access VPN configuration, and IPsec tunnel connections – the same categories of WAN interface configuration documented for Cloud Firewall deployments in Versa Director’s configuration workflow. These settings establish the paths the firewall uses to reach the networks and remote users it protects.
What routing options does Cloud Firewall support?
Static routing and EBGP, including route redistribution between routing protocols. This lets a Cloud Firewall deployment handle both fixed, manually defined paths and dynamic routes learned from adjacent networks, so traffic reaches the firewall correctly before any security policy is applied.
Is Cloud Firewall the same thing as a traditional on-premises firewall appliance?
Not exactly. Cloud Firewall is a cloud-delivered firewall offering rather than a piece of dedicated hardware at a single site, reflecting the broader industry shift toward applying consistent security policy to traffic regardless of where it originates – while still running on Versa’s familiar VOS and Director foundation.
More on Versa products
If you want to learn more, these are sources we trust.
| NIST SP 800-41: Firewall Guidelines | Versa Networks: secure SD-WAN | Versa Academy |
|---|---|---|
| NIST’s guidelines on firewalls and firewall policy – the vendor-neutral baseline for firewall capabilities and deployment. | The SD-WAN service that shares VOS and Director with Cloud Firewall deployments. | Training and labs covering Versa’s security and firewall configuration workflows. |
Related terms
If you’re reading about Cloud Firewall, these are worth looking at next.
| Versa Operating System | Versa Director | Secure SD-WAN |
|---|---|---|
| The operating system Cloud Firewall runs on, shared with Versa’s other appliance and virtual deployments. | The console used to configure and monitor a Cloud Firewall deployment’s WAN and routing settings. | Versa’s SD-WAN solution, which integrates the same NGFW and security capabilities into its networking stack. |