Network Firewall

• Managed service for VPC network protection

• Includes:

  • Stateful & Stateless firewall

  • Intrusion Prevention System (IPS)

  • Web filtering

• Works with AWS Network Firewall manager for centrally applying policies across VPCs / accounts

• Uses a VPC endpoint and Gateway Load Balancer

• Do not deploy resources in the firewall subnet

• For HA, allocate a subnet per AZ