thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Advanced

AWS Network Firewall

Managed, stateful, highly available network firewall and intrusion prevention service for VPCs.

Definition

AWS Network Firewall inspects traffic in firewall subnets using stateless rules, stateful rules compatible with Suricata, domain filtering and TLS inspection. It is commonly deployed in a centralized inspection VPC behind a Transit Gateway.

Example

All egress traffic from spoke VPCs flows through Network Firewall, which blocks connections to non-approved domains.

Exam tip

Network Firewall filters at the VPC level including domain-based egress filtering; security groups and NACLs cannot filter by domain name.

Related terms