AWS Network Firewall adds Reject and Alert actions for stateful domain list rule groups

Today, AWS Network Firewall introduces Reject and Alert action support for stateful domain list rule groups, providing customers with more granular control over their network traffic. This enhancement allows customers to create Reject and Alert actions in stateful domain list rule groups using the AWS Network Firewall console, offering more flexible and precise traffic management options within their AWS environments.

With this new feature, customers can now create more sophisticated and tailored network security policies. The Reject action enables customers to block specific domain-based traffic, while the Alert action allows for monitoring and logging of traffic without interrupting the flow. This granular control helps organizations improve their security posture by fine-tuning their firewall rules to better align with their specific security requirements and compliance needs.

The new Reject and Alert action support for stateful domain list rule groups is available in all AWS Regions where AWS Network Firewall is offered. You can enable TLS inspection from the Amazon VPC Console or the Network Firewall API

To learn more about this new feature and other AWS Network Firewall capabilities, visit the AWS Network Firewall product page and the service documentation.