Enforza documentation

Same firewall capability as the cloud-native NVA — and more — deployed your team's way. These docs cover deploying the engine, building policies, and operating a fleet.

How it works Deploy your first firewall

Three lanes

The docs are split into three clearly-separated lanes. Platform is the shared home — architecture, the two run modes, core concepts. The other two are the product lanes for the two ways to run Enforza: the Cloud Controller console (GUI-driven) and GitHub Pipeline Integration (policy-as-code in GitHub). Same firewall engine underneath — the choice is your team’s workflow.

Platform (shared)

How the engine works, the single-pass packet classification and verdict engine, the outbound-only control plane, and the two ways to run it.

How it works · The two ways to run · End-to-end workflow

Cloud Controller (CCX)

The GUI console for network-operations teams. Deploy a firewall, build a policy, bind it, and watch live logs across the fleet.

Getting started: deploy your first firewall

GitHub Pipeline Integration (GPI)

Policy-as-code for platform-engineering teams. The YAML policy reference for the GitHub Pipeline Integration mode.

Docs coming soon

New here?

Start with How it works for the architecture, then follow the end-to-end workflow to take a firewall from zero to enforcing a policy.