IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

AWS Network Firewall provides network protection across all workloads

New firewall tools offer improved security in virtual private clouds

Virtual security/privacy shield

AWS has launched a new security service for customers running virtual private clouds on AWS. 

The AWS Network Firewall promises a high-availability, managed network firewall for customers’ workloads. AWS claims the firewall will offer protections against common network threats, including dynamic packet filtering, intrusion prevention and detection, and web filtering.

AWS said customers can also implement customized Snort and Suricata rules — two widely used open-source formats — to further tailor protections, like:  

  • Preventing their VPCs from accessing unauthorized domains
  • Blocking thousands of known bad IP addresses
  • Defending against common exploits by identifying patterns and behaviors associated with known threats.

In a blog post, Channy Yun, principal developer advocate for AWS, said the Network Firewall makes firewall activity visible in real-time via CloudWatch metrics and offers increased visibility of network traffic by sending logs to S3, CloudWatch and Kinesis Firehose.

“Network Firewall is integrated with AWS Firewall Manager, giving customers who use AWS Organizations a single place to enable and monitor firewall activity across all your VPCs and AWS accounts,” he said.

Steve Schmidt, CISO at AWS, said that when talking to customers about what they want in a cloud network firewall, they say network protections that work with their existing security systems and without the headache of managing the underlying infrastructure.

“AWS Network Firewall provides scalable network protections that allow customers to deploy highly customizable rules for their entire AWS infrastructure, and integrates with many of the APN partner services that customers already use. Best of all, there’s no need to configure or maintain additional infrastructure,” he added.

AWS partners have built integrations with AWS Network Firewall include: 

  • Accenture
  • Alert Logic
  • Check Point Software Technologies
  • CrowdStrike
  • Datadog
  • Fortinet
  • Hashicorp
  • IBM 
  • Palo Alto Networks
  • Rackspace
  • Splunk
  • SumoLogic
  • Trend Micro
  • Tufin

AES expects more partners to come soon. These integrations allow customers to easily incorporate AWS Network Firewall into their existing security workflows for orchestration, automation and threat detection and response.

“We've made this expertise available to all AWS Network Firewall customers in the form of managed rules based on threat intelligence from FortiGuard Labs. Our collaboration with AWS will make it easy for customers to seamlessly integrate Fortinet threat intelligence with AWS Network Firewall as an additional layer of protection alongside their existing security,” said John Maddison, EVP of products and CMO at Fortinet.

AWS Network Firewall is available now in the US East (Northern Virginia), US West (Oregon), and Europe (Ireland) Regions. Pricing starts at 39.5 cents per hour a firewall is provisioned and 6.5 cents every GB of data the firewall processes.

Featured Resources

The state of Salesforce: Future of business

Three articles that look forward into the changing state of Salesforce and the future of business

Free Download

The mighty struggle to migrate SAP to the cloud may be over

A simplified and unified approach to delivering Enterprise Transformation in the cloud

Free Download

The business value of the transformative mainframe

Modernising on the mainframe

Free Download

The Total Economic Impact™ Of IBM FlashSystem

Cost savings and business benefits enabled by FlashSystem

Free Download

Recommended

Google shut down data centre due to multiple cooling failures
data centres

Google shut down data centre due to multiple cooling failures

1 Aug 2022
Your key to digital differentiation and competence
Whitepaper

Your key to digital differentiation and competence

13 Jul 2022
Microsoft face claims of Azure capacity issues, regional limits
Cloud

Microsoft face claims of Azure capacity issues, regional limits

5 Jul 2022
The mighty struggle to migrate SAP to the cloud may be over
Whitepaper

The mighty struggle to migrate SAP to the cloud may be over

4 Jul 2022

Most Popular

How to boot Windows 11 in Safe Mode
Microsoft Windows

How to boot Windows 11 in Safe Mode

29 Jul 2022
Samsung proposes 11 Texas semiconductor plants worth $191 billion
Hardware

Samsung proposes 11 Texas semiconductor plants worth $191 billion

21 Jul 2022
Should you take your password manager off the internet?
Sponsored

Should you take your password manager off the internet?

28 Jul 2022