Stateful L7 inspection firewall.
Managed network firewall with deep packet inspection, TLS decryption, IDS/IPS, and domain filtering. Protect entire VPCs with centralized policies.
L3-L7
Inspection
Decrypt & inspect
TLS
Built-in
IDS/IPS
100 Gbps
Throughput
Inspect everything.
L7 stateful firewall with TLS decryption and IDS/IPS.
L7 deep inspection
Stateful inspection at layers 3 through 7. Protocol-aware analysis.
TLS decryption
Decrypt TLS 1.3 traffic for inspection. No blind spots.
IDS/IPS
Intrusion detection and prevention with Suricata-compatible rules.
100 Gbps throughput
Auto-scaling to 100 Gbps. No performance bottleneck.
Domain filtering
Allow/deny by domain name, including wildcard domains.
Alert management
Real-time alerts with severity classification and automated responses.
Getting started
Launch your first instance in three steps. CLI, console, or API — your choice.
ur network firewall create perimeter \
--vpc=my-vpc --type=statefulFirewall patterns.
Perimeter security and compliance filtering.
Suggested configuration
L7 · TLS decrypt · IDS/IPS
Estimate your costs
Create detailed configurations to see exactly how much your architecture will cost. Pay for what you use, down to the second.
Configuration 1
Firewall
Traffic & Bandwidth
Add-ons
Cost details
Managed firewall with FQDN filtering and IDS/IPS.
Works seamlessly with
Frequently asked questions
Inspect everything.
L7 stateful firewall with TLS decryption and IDS/IPS.