Questions tagged with AWS Network Firewall

Hi all, I'm in the process of implementing AWS Network Firewall in my test environment and, while I understand that the Network Firewall must be launched into its own subnet, there's nothing saying...

Dear Team - If we deploy the Architecture as mentioned in **Figure 4: Example architecture after solution deployment – showing multiple use cases** in below URL, what would be the recommendation of...

I need to block Boto3 client to access Athena workgroup while allowing Tableau. Both use JDBC driver. Is there any port/IAM policy to achieve this? Both Tableau and Boto3 client are accessing from...

Hi, I have created a Elastic beanstalk web server and this inturn created a EC2 host one single instance. We run an application inside EC2 on a particular port. so the security group is updated with...

Hello all, wondering if you can help. I have an AWS Firewall and NAT gateway implemented to allow egress internet access to the EC2 instances I manage. I created some firewall rules to block traffic...

Hi, In my network account, we have deployed multi-AZ Fortinet firewalls, and all traffic passes through both firewalls. However, my customer wants an active-passive firewall setup and wants this to...

I am building a simple three layer architecture that uses NGINX on EKS as the front end for receiving all the API traffic from my customers. I want to add a AWS Network Firewall in front of the NGINX...

Is it necessary to get any AWS product for a default antispoofing configuration?

Hello, Are there any way to log Suricata signature id in Network Firewall netflow logs, not only alert logs? I've a use case that to review the existing firewall rules and find the outdated rules....

I am trying to install outline on an aws linux server. When I run the installation output, it asks me to add a new firwall allowing incoming TCP connections on ports ranging from 1024 to 65535. When I...

I kept getting syntax error when i want to build a rule group. My goal is to ALLOW only aws service, and DENY all other TCP Traffic. Following is the example, I can build and deploy the CDK. but...

I have a NLB with target grouping to EC2 instances, this setup works fine. When I make my route table route the traffic to the firewall endpoint I can see the traffic being filtered by the firewall,...