Network

AWS Network Firewall

AWS Network Firewall is a managed firewall and IDS/IPS service for VPCs. Filter traffic with stateful deep packet inspection at the subnet level.

What is Network Firewall? (Simple Explanation)

Network Firewall is an AWS service in the Network category. AWS Network Firewall is a managed firewall and IDS/IPS service for VPCs.

When Would You Use This?

  • Network traffic filtering
  • Intrusion detection and prevention (IDS/IPS)
  • Domain-based egress filtering
  • Stateful deep packet inspection
  • Compliance network segmentation

Who Uses Network Firewall?

From startups to enterprises, Network Firewall powers:

StartupsMid-size CompaniesLarge EnterprisesGovernmentNonprofits

What Makes Network Firewall Powerful

Stateful rule groups (5-tuple, domain, Suricata-compatible)
Stateless rule groups with priority
TLS inspection for encrypted traffic
Flow logs for firewall activity
Managed prefix lists for service filtering

Services That Work with Network Firewall

Network Firewall is rarely used alone. It's typically combined with:

Compliance & Security

How AWS Network Firewall fits into major compliance standards:

CIS AWS Foundations

Network Firewall configuration is audited by CIS Benchmarks 1.5–3.0 for secure cloud defaults.

NIST 800-53

Network Firewall access controls, encryption, and audit logging map to NIST 800-53 AC, SC, and AU control families.

PCI DSS 4.0

Network Firewall encryption, access control, and logging support PCI DSS for cardholder data environments.

SOC 2

Network Firewall security, availability, and confidentiality controls evaluated under SOC 2 Trust Services Criteria.

ISO 27001

Network Firewall configuration and monitoring controls map to ISO 27001 Annex A information security management.

Ready to secure your Network Firewall configuration?

Pavora continuously monitors your AWS Network Firewall for misconfigurations, compliance violations, and security risks.