FREEDOM251

Freedom251 › Network Firewall Software

AWS Network Firewall

Paid APIWeb

Visit AWS Network Firewall Alternatives Pricing

AWS Network Firewall's own site

What AWS Network Firewall is

AWS Network Firewall is a managed cloud service for applying network protections across Amazon VPCs. Its stateful firewall inspects packets and supports rules based on IP addresses, ports, protocols, and traffic direction. Web controls include filtering HTTP headers, SNI, and domains, as well as an explicit forward proxy for outbound internet traffic. AWS-managed intrusion prevention signatures and malicious-domain rule groups are included at no additional cost. TLS inspection can analyze encrypted traffic within a VPC, though Advanced Inspection adds an hourly charge. Native integrations include Transit Gateway, VPC, IAM, and CloudWatch. AWS Firewall Manager can manage policies across accounts and VPCs; alert and flow logs can be stored in Amazon S3, Kinesis, or CloudWatch. The service scales capacity automatically and supports high availability across Availability Zones. AWS states a 99.99% uptime commitment under its service-level agreement. Pricing combines endpoint time and data processing, with rates varying by region and Availability Zone. AWS says the service is not designed to mitigate volumetric denial-of-service attacks.

Who it suits

It suits teams seeking to protect VPC boundaries, filter inbound and outbound traffic, or inspect traffic between VPCs. It is a cloud deployment, and AWS notes it is not designed for volumetric denial-of-service mitigation.

What it does well

  • Supports deep packet inspection and traffic-direction rules.
  • Includes AWS-managed intrusion prevention signatures at no additional cost.
  • Firewall Manager can centrally manage policies across accounts and VPCs.
  • Capacity scales automatically with high availability across Availability Zones.
  • AWS states a 99.99% uptime commitment.

What to know first

  • No free plan.
  • Advanced Inspection adds an hourly charge.
  • Marketplace managed rules may have seller-set fees.
  • Not designed to mitigate volumetric denial-of-service attacks.

Limits

There is no free plan. Charges combine firewall endpoint time and per-GB traffic processing; Advanced Inspection and Marketplace managed rules can add fees, with rates varying by region and Availability Zone.

Plans

PlanBilled and limitsPrice
Firewall endpoint$0.395 for each hour the firewall endpoint is provisioned in US East (N. Virginia) · Managed firewall endpoint$0.40 a month
Traffic processing$0.065 for 1 GB of data processed in US East (N. Virginia) · Network Firewall data processing$0.07 a month
Pay-as-you-goHourly per firewall endpoint, plus per-GB traffic processing; rates vary by region and Availability Zone. Pricing examples show $0.395 per endpoint-hour and $0.065 per GB. · Advanced inspection and active threat defense may add charges · AWS Marketplace managed rules may cost extraOn request

As aws.amazon.com lists them, read 21 Sept 2026. The maker's own page has the final word.

Getting started

  1. Open the AWS Network Firewall website
  2. Choose a paid pricing option
  3. Deploy the cloud firewall across Amazon VPCs
  4. Configure stateful traffic and web-filtering rules
  5. Connect native AWS integrations or Firewall Manager
  6. Select S3, Kinesis, or CloudWatch for logs

Verdict

AWS Network Firewall offers traffic inspection and controls integrated with other AWS services, with costs based on endpoint time and processed data. Consider the additional inspection or marketplace charges and its stated limitation for volumetric denial-of-service attacks.

Questions

How is AWS Network Firewall priced?

The Firewall endpoint plan is $0.40 a month, and Traffic processing is $0.07 a month. Pay-as-you-go pricing is billed hourly per endpoint plus per-GB processing, with regional variation; Advanced Inspection, active threat defense, and Marketplace rules may add charges.

Is there a free plan?

No. AWS-managed intrusion prevention signatures and malicious-domain rule groups are included at no additional cost.

Where can it be deployed?

AWS Network Firewall uses a cloud deployment model across Amazon VPCs.

What integrations and logging destinations are supported?

Native integrations include Transit Gateway, VPC, IAM, and CloudWatch. Logs can be stored in Amazon S3, Kinesis, or CloudWatch, and Firewall Manager can centrally manage policies.

Does it protect against denial-of-service attacks?

AWS says Network Firewall is not designed to mitigate volumetric denial-of-service attacks.

Facts from AWS Network Firewall's own pages

Availability and scaling
The service automatically scales capacity and supports high availability across Availability Zones. · aws.amazon.com, 30 Sept 2026
AWS integrations
AWS identifies Transit Gateway, VPC, IAM, and CloudWatch as native service integrations. · aws.amazon.com, 30 Sept 2026
Central management and logging
AWS Firewall Manager can centrally manage policies across accounts and VPCs, while alert and flow logs can be stored in Amazon S3, Kinesis, or CloudWatch. · aws.amazon.com, 30 Sept 2026
Encrypted traffic
TLS inspection can analyze encrypted traffic within the VPC and has an additional hourly charge for Advanced Inspection. · aws.amazon.com, 30 Sept 2026
Free plan
No · aws.amazon.com, 21 Sept 2026
Intended users
AWS describes use cases including protecting VPC boundaries, filtering inbound and outbound traffic, and inspecting traffic between VPCs. · aws.amazon.com, 30 Sept 2026
Maker
Amazon states that its principal corporate offices are in Seattle, Washington, and that it was incorporated in 1994. · ir.aboutamazon.com, 30 Sept 2026
Notable limitation
AWS says Network Firewall is not designed to mitigate volumetric denial-of-service attacks. · aws.amazon.com, 30 Sept 2026
Partner integrations
AWS Marketplace partners offer managed rule groups that can be deployed in Network Firewall policies, with additional seller-set fees. · aws.amazon.com, 30 Sept 2026
Purpose
AWS Network Firewall is a managed service for deploying network protections across Amazon VPCs. · aws.amazon.com, 30 Sept 2026
Support commitment
AWS states that Network Firewall has a 99.99% uptime commitment under its service-level agreement. · aws.amazon.com, 30 Sept 2026
Threat protection
AWS-managed intrusion prevention signatures and malicious domain rule groups are included at no additional cost. · aws.amazon.com, 30 Sept 2026
Traffic controls
Its stateful firewall supports deep packet inspection and rules based on IP addresses, ports, protocols, and traffic direction. · aws.amazon.com, 30 Sept 2026
Web filtering and proxy
It supports HTTP header, SNI, and domain filtering, and an explicit forward proxy for controlling outbound internet traffic. · aws.amazon.com, 30 Sept 2026

Where AWS Network Firewall stands on Freedom251

Look at these too