AWS Network Firewall

Concept

AWS Network Firewall is a managed network firewall for a VPC. It checks traffic going into and out of the VPC, and based on rules it allows it, blocks it or raises an alert. Its rules can be stateless (each packet is looked at separately) or stateful (the whole connection is remembered while checking). It can block traffic by domain name and catch signs of known attacks (intrusion prevention). Compared with Security Groups and NACLs, it checks traffic more deeply and centrally.

Simple example

A checkpoint at the entrance to a neighborhood — not just a building’s gate, but checking every vehicle going into and out of the whole area.

Why it’s needed

Security Groups and NACLs look at simple rules; in some cases you need to check deeper inside the traffic.

Where it’s used

Blocking access to certain websites, catching signs of attacks, and controlling VPC traffic centrally.

Azure equivalent

Azure Firewall

Remember

Network Firewall = a deep-inspection checkpoint for the whole network.

Learn more

For details and the latest information, see the official documentation:

• AWS Network Firewall — AWS official documentation ↗