> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aviatrix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Distributed Cloud Firewall Supported Capabilities

> Since Controller Version 6.8, DCF has been supported in AWS, AWS GovCloud, Azure, Azure Government, and GCP.

<div className="dcf-capabilities-page">
  Since Controller Version 6.8, DCF has been supported in AWS, AWS GovCloud,
  Azure, Azure Government, and GCP.

  ## Ranges

  | Capability                     | 6.8   | 6.9   | 7.0    | 7.1    | 7.2     | 8.0     | 8.1     | 8.2     | 9.0     | 10.0    |
  | ------------------------------ | ----- | ----- | ------ | ------ | ------- | ------- | ------- | ------- | ------- | ------- |
  | Number of SmartGroups          | 500   | 500   | 500    | 500    | 1,200   | 1,200   | 1,200   | 1,200   | 1,200   | 1,200   |
  | Number of Domains per WebGroup |       |       |        | 3,000  | 3,000   | 3,000   | 3,000   | 3,000   | 3,000   | 3,000   |
  | Number of CIDRs per Group      | 3,000 | 3,000 | 3,000  | 3,000  | 10,000  | 10,000  | 10,000  | 10,000  | 10,000  | 10,000  |
  | Total Number of CIDRs          |       |       | 10,000 | 10,000 | 300,000 | 300,000 | 300,000 | 300,000 | 300,000 | 300,000 |
  | Number of DCF Rules            | 2,000 | 2,000 | 2,000  | 2,000  | 5,000   | 5,000   | 5,000   | 5,000   | 5,000   | 5,000   |

  ## Supported Features

  The following are supported on AWS, Azure and GCP unless otherwise noted.

  * PV = feature is in
    <a href={"/docs/enterprise/" + "10.1" + "/reference/feature-modes/index#preview-features"}>Preview</a>
  * GA = feature is
    <a href={"/docs/enterprise/" + "10.1" + "/reference/feature-modes/index#general-availability-ga-features"}>Generally Available</a>
  * If a cell is blank the feature was not supported in that release.

  | Feature                                                                                                                                                                | 8.0                      | 8.1                                                                                              | 8.2                                                                                              | 9.0                                                                                              | 10.1                                                                                             |
  | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------ | ------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------ |
  | DCF on Edge Spoke (L4)                                                                                                                                                 |                          | PV                                                                                               | PV                                                                                               | PV                                                                                               |                                                                                                  |
  | DCF on Edge Spoke (L7)                                                                                                                                                 |                          |                                                                                                  |                                                                                                  | PV                                                                                               | PV                                                                                               |
  | DCF on Edge Transit S2C (L4)                                                                                                                                           |                          | PV                                                                                               | PV                                                                                               | PV                                                                                               | PV                                                                                               |
  | **DCF Rules**                                                                                                                                                          |                          |                                                                                                  |                                                                                                  |                                                                                                  |                                                                                                  |
  | Layer 4 Rules                                                                                                                                                          | GA                       | GA                                                                                               | GA                                                                                               | GA                                                                                               | GA                                                                                               |
  | Rules with Domain (SNI) WebGroups                                                                                                                                      | GA                       | GA                                                                                               | GA                                                                                               | GA                                                                                               | GA                                                                                               |
  | Rules with URL WebGroups                                                                                                                                               | PV                       | PV                                                                                               | PV                                                                                               | GA                                                                                               | GA                                                                                               |
  | Rules with ExternalGroups (formerly GeoGroups and ThreatGroups)                                                                                                        | GA                       | GA                                                                                               | GA                                                                                               | GA                                                                                               | GA                                                                                               |
  | DCF on Public Subnet Filtering Gateways                                                                                                                                | PV                       | GA (AWS)                                                                                         | GA (AWS)                                                                                         | GA (AWS)                                                                                         | GA (AWS)                                                                                         |
  | DCF on Site2Cloud (L4 only on Transit)                                                                                                                                 | PV                       | GA (AWS)<br />GA (AWS Gov Cloud)<br />GA (Azure)<br />GA (Azure Gov)<br />PV (GCP)<br />PV (OCI) | GA (AWS)<br />GA (AWS Gov Cloud)<br />GA (Azure)<br />GA (Azure Gov)<br />PV (GCP)<br />PV (OCI) | GA (AWS)<br />GA (AWS Gov Cloud)<br />GA (Azure)<br />GA (Azure Gov)<br />PV (GCP)<br />PV (OCI) | GA (AWS)<br />GA (AWS Gov Cloud)<br />GA (Azure)<br />GA (Azure Gov)<br />PV (GCP)<br />PV (OCI) |
  | DCF on Transit Egress                                                                                                                                                  |                          | PV                                                                                               | PV                                                                                               | GA                                                                                               | GA                                                                                               |
  | <a href={"/docs/enterprise/" + "10.1" + "/concepts-architectures/components/dcf/security-group-orchestration"}>Security Group Orchestration</a> (not supported on GCP) | PV (AWS)<br />GA (Azure) | PV (AWS)<br />GA (Azure)                                                                         | PV (AWS)<br />GA (Azure)                                                                         | PV (AWS)<br />GA (Azure)                                                                         | PV (AWS)<br />PV (AWS Gov Cloud)<br />GA (Azure)                                                 |
  | <a href={"/docs/enterprise/" + "10.1" + "/concepts-architectures/components/dcf/dcf-rulesets-about"}>DCF Rulesets</a>                                                  | GA                       | GA                                                                                               | GA                                                                                               | GA                                                                                               | GA                                                                                               |
  | **Deep Packet Inspection**                                                                                                                                             |                          |                                                                                                  |                                                                                                  |                                                                                                  |                                                                                                  |
  | Transparent TLS Decryption                                                                                                                                             | PV                       | PV                                                                                               | PV                                                                                               | GA                                                                                               | GA                                                                                               |
  | Suricata IDS (Egress only)                                                                                                                                             | PV                       | PV                                                                                               | PV                                                                                               | GA                                                                                               | GA                                                                                               |
  | Suricata IPS (Egress Only)                                                                                                                                             |                          |                                                                                                  | PV                                                                                               | GA                                                                                               | GA                                                                                               |
  | <a href={"/docs/enterprise/" + "10.1" + "/concepts-architectures/architecture/security/ips-east-west-design-patterns"}>Suricata IDS/IPS (East-West)</a>                |                          |                                                                                                  |                                                                                                  |                                                                                                  | PV (AWS)                                                                                         |
  | **Advanced Features**                                                                                                                                                  |                          |                                                                                                  |                                                                                                  |                                                                                                  |                                                                                                  |
  | IPS Custom Signatures/Feed                                                                                                                                             |                          |                                                                                                  | PV                                                                                               | GA                                                                                               | GA                                                                                               |
  | Import Decryption Certificate                                                                                                                                          | PV                       | PV                                                                                               | PV                                                                                               | GA                                                                                               | GA                                                                                               |
  | **Logging**                                                                                                                                                            |                          |                                                                                                  |                                                                                                  |                                                                                                  |                                                                                                  |
  | Layer 4 logging (+Domain)                                                                                                                                              | GA                       | GA                                                                                               | GA                                                                                               | GA                                                                                               | GA                                                                                               |
  | IDS/IPS logging                                                                                                                                                        | PV                       | PV                                                                                               | PV                                                                                               | GA                                                                                               | GA                                                                                               |
  | Log export via Syslog                                                                                                                                                  | GA                       | GA                                                                                               | GA                                                                                               | GA                                                                                               | GA                                                                                               |
  | Log export via OTEL Collector                                                                                                                                          |                          |                                                                                                  |                                                                                                  |                                                                                                  | GA                                                                                               |
  | **Asset Groups/SmartGroups**                                                                                                                                           |                          |                                                                                                  |                                                                                                  |                                                                                                  |                                                                                                  |
  | SmartGroups (VM/VPC/Subnet)                                                                                                                                            | GA                       | GA                                                                                               | GA                                                                                               | GA                                                                                               | GA                                                                                               |
  | DNS Hostname SmartGroups                                                                                                                                               | PV                       | GA                                                                                               | GA                                                                                               | GA                                                                                               | GA                                                                                               |
  | Kubernetes SmartGroups (Workloads and Nodes)                                                                                                                           |                          | PV                                                                                               | PV                                                                                               | PV                                                                                               | GA                                                                                               |
  | Serverless SmartGroups (ECS, Lambdas (AWS), Azure Functions, Cloud Run (GCP))                                                                                          |                          |                                                                                                  |                                                                                                  | PV                                                                                               | PV                                                                                               |
  | Domain WebGroups                                                                                                                                                       | GA                       | GA                                                                                               | GA                                                                                               | GA                                                                                               | GA                                                                                               |
  | URL WebGroups                                                                                                                                                          | PV                       | PV                                                                                               | PV                                                                                               | GA                                                                                               | GA                                                                                               |
  | SNI Verification (valid with WebGroups)                                                                                                                                | PV                       | PV                                                                                               | PV                                                                                               | GA                                                                                               | GA                                                                                               |
  | ExternalGroups (includes Threat Feeds and Countries)                                                                                                                   | GA                       | GA                                                                                               | GA                                                                                               | GA                                                                                               | GA                                                                                               |
  | SmartGroups (S2C)                                                                                                                                                      | GA                       | GA                                                                                               | GA                                                                                               | GA                                                                                               | GA                                                                                               |
  | <a href={"/docs/enterprise/" + "10.1" + "/reference/externalgroup-about"}>SaaS-Based Services</a> (Azure and GitHub)                                                   | PV                       | Azure (GA)<br />GitHub (PV)                                                                      | Azure (GA)<br />GitHub (PV)                                                                      | Azure (GA)<br />GitHub (GA)                                                                      |                                                                                                  |

  ## Additional Capabilities

  * Overlapping IPs have been supported since Controller Version 7.0. Distributed
    Cloud Firewall (DCF) understands any defined SNAT/DNAT rules and updates the
    address for each gateway, enforcing the DCF rules.
  * DCF auto-prunes all rules and pushes only related rules to specific gateways.
  * SmartGroups dynamically change the resources inside the groups by tracking EC2
    changes (AWS, Azure, GCP).

  <Note>
    Shared VPC instance tags are not supported in GCP-based SmartGroups.
  </Note>

  * Log Export to Splunk HTTP Event Collector
</div>