CyberIndexBeta

Product

Managed cloud network firewall for Amazon VPCs with stateful inspection, intrusion prevention, domain filtering and TLS inspection. AWS Network Firewall helps you protect your Amazon VPCs with automated, intelligence-driven network security. AWS Network Firewall scales automatically to help defend your workloads while reducing operational overhead. AWS Network Firewall enables enterprise-grade perimeter defense by filtering incoming traffic at VPC boundaries using integrated intrusion detection/prevention systems and geographic IP filtering. It is available as a cloud instance.

Current Version
Cloud · no version
Market
EnterpriseGovernmentSMB
Licence
Paid
Price
USD 0.395 / monthly
Record Created
2026-09-19
Last Updated
2026-10-12

Vendor

Amazon Web Services is the largest cloud platform in the world, and its security products are components of it rather than a security business. They are bought by organisations already running on AWS, priced by usage, and cannot be deployed anywhere else. AWS Network Firewall, the product listed here, is a managed firewall for the virtual networks customers run inside AWS — stateful filtering, intrusion prevention and domain filtering applied at the VPC boundary. It sits in a wider range including AWS WAF for web applications, AWS Shield for denial-of-service protection, Amazon GuardDuty for threat detection and Amazon Inspector for vulnerability assessment. None of this is assessed by the malware test laboratories. The meaningful comparison for a reader is with the other cloud providers' native firewalls rather than with the appliances and endpoint agents that fill most of this index. Vendor page →

Country
United States
Headquarters
Seattle, United States
Year Established
2006
Customers
1.5M organisations
Users
1M users
Revenue
$128.7B (2025)

Platforms

Cloudnative

Target Market

Enterprise primaryGovernment secondarySMB secondary

Capabilities

Stateful Inspectionkeynative
Intrusion Prevention (IPS)keynative
Intrusion Detection (IDS)native
SSL/TLS Inspectionkeynative
VPN GatewaykeyNot known
SD-WANnot supported
Application Controlkeynative
High Availabilitynative
Deep Packet Inspectionnative
Central Management Consolenative

1 of 10 not yet known — not recorded, which is not the same as not supported.

Specifications

Firewall TypeCloud

4 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummarySubscriptionnot statedmonthlyUSD 0.395

Versions

Not known

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

FedRAMPHigh1 activeF1603047866

Change History

This record was created 2026-09-19. Everything below is what has changed since.

  • 2026-10-12Certification addedCertified: FedRAMP (High)evidence
  • 2026-10-07Capability addedCentral Management Console: built inevidence
  • 2026-10-07Capability addedSD-WAN: not supportedevidence
  • 2026-10-06Capability addedStateful Inspection: built inevidence
  • 2026-10-06Capability addedIntrusion Prevention (IPS): built inevidence
  • 2026-10-06Capability addedDeep Packet Inspection: built inevidence
  • 2026-10-06Capability addedHigh Availability: built inevidence
  • 2026-10-06Capability addedApplication Control: built inevidence
  • 2026-10-06Capability addedIntrusion Detection (IDS): built inevidence
  • 2026-10-06Capability addedSSL/TLS Inspection: built inevidence
  • 2026-09-20Pricing plan addedPrice: USD 0.395 monthlyevidence
  • 2026-09-20Platform addedRuns on Cloudevidence
  • 2026-09-19Product updatedSold to: Enterpriseevidence
  • 2026-09-19Product updatedAlso sold to: Governmentevidence
  • 2026-09-19Product updatedAlso sold to: SMBevidence
  • 2026-09-19Product createdNew product, listed in Network Firewallevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.