24/7 monitoring, second-level updates
Round-the-clock monitoring of network and application layers; protection updates ship the day a flaw is disclosed, and attack logs trace the source in real time.
Service pricing
Final pricing depends on deployment scale, rule complexity, throughput and compliance target. Submit an enquiry to receive a formal quote shortly.
The cloud has a built-in firewall, do you still need UD?
AWS security groups and Azure network security groups provide only basic L3 / L4 filtering, without the deep inspection and application-layer protection of a next-gen firewall. Organisations handling payments, personal data or listed-company data should have a third party deploy full NGFW and WAF.
Why choose UD Firewall
Commercial firewalls work out of the box, but real protection comes from continuous configuration, tuning and monitoring, and that is the value of UD's fully managed service.
Fully managed configuration and maintenance
UD engineers design the policies, manage upgrades and produce the reports. We handle day-to-day operations, so your IT team never has to learn a new tool.
Continuous tuning, fewer false positives
A tuning period tailored to your environment and visitor patterns excludes benign behaviour and adds custom signatures to minimise false positives.
100% local · WordPress-savvy
Web-hosting experience since 1998, with a rule base that runs deep on WordPress, Drupal and Magento. Our team is in-house, and your data stays in Hong Kong.
Which businesses need it
Any internet-dependent business should treat a firewall as core infrastructure. If you rely on cloud infrastructure, an NGFW is essential; if you run public web apps, especially WordPress, a WAF is a must.
Banking · Insurance · Fintech
Listed companies / IPO applicants
E-commerce · Membership SaaS
Funded NGOs · cross-border firms
Cloud-reliant (AWS / Azure / GCP)
WordPress / Drupal / Magento sites
Found system weaknesses with penetration testing or vulnerability scanning? Configuring a firewall is the front-line fix.
DDoS Protection
A WAF only stops some application-layer DDoS. For large network-layer floods, add dedicated DDoS protection.
Explore service
Penetration Testing
Want to verify that your firewall configuration actually holds up? A penetration test audits your defences to find what could still be breached.
Explore service
Get a quote or ask us
Whether you want a formal quote or just have a question, a UD firewall engineer will be in touch shortly to scope the work, recommend a product mix and prepare a tailored quote.
A dedicated specialist follows up
Help defining scope and product mix
Cloud-only deployment · live in 1–3 business days
Powered by Fortinetnext-gen firewall tech
Frequently asked questions
How is a cloud firewall different from a WAF?
A cloud firewall works at the network layer, filtering basic connection data, IPs, ports and protocols, to block brute attacks and unwanted connections. A WAF works at the application layer, analysing the actual content of HTTP and HTTPS requests to catch SQL injection, XSS, CSRF and other attacks aimed at web apps. They cover different layers and don't replace each other.
Do we have to use both together?
For businesses with web apps, we recommend both, the network layer blocks brute attacks, the application layer blocks business-logic attacks, and together they form a complete defence. If you only have an internal office network with no public web apps, a cloud firewall is enough; for a small website, a WAF is the minimum starting point.
Can a WAF stop DDoS?
It can block some Layer 7 (application-layer) DDoS, such as HTTP floods against login forms or API endpoints. But large Layer 3 / 4 DDoS needs dedicated DDoS protection, since those attacks saturate upstream bandwidth before they reach the WAF.
How long does deployment take?
Typically 1 to 3 business days. UD firewalls deploy in the cloud, with no hardware shipping or data-centre installation. Businesses with complex existing architecture may need an extra cycle for tuning.
Will false positives affect real users?
There is a tuning period up front, during which UD engineers continuously adjust rules to control the false-positive rate. Each project typically has a 2–4 week tuning window, with daily log review to flag benign behaviour and adjust triggers. After tuning, false positives are usually kept under 1%, with regular reviews as the business changes.
The cloud provider has a built-in firewall, do we still need UD?
Cloud-native firewalls (such as AWS security groups and Azure network security groups) are basic Layer 3 / 4 filtering, without a next-gen firewall's deep packet inspection, zero-day protection and application awareness, and without a WAF's application-layer protection. Organisations handling payments, personal data or listed-company data should have an independent, experienced third party deploy full NGFW and WAF alongside cloud-native tools for defence in depth.
How do we get a quote, and what do you need from us?
Submit the form at the foot of the page, noting your target scope (cloud infrastructure, web apps, WordPress, etc.), estimated throughput, current solution, compliance target (PCI-DSS, ISO 27001, HKMA, etc.) and expected go-live. A UD engineer will reply shortly to arrange a scoping meeting, after which we provide a formal quote.