1 réponse
- Le plus récent
- Le plus de votes
- La plupart des commentaires
1
It's important to be specific with these questions and the followup is: What type of encryption is being used for the VPN connection?
AWS Network Firewall can inspect encrypted traffic if it is encrypted using TLS. There are various caveats here so please read the blog post.
However, if your traffic is an IPSEC VPN than Network Firewall cannot inspect it. Instead, ensure that the VPN termination instance is suitably hardened (as appropriate for the operating system that is running) then you might use Network Firewall to inspect the traffic once it leaves the VPN termination instance. You can read about patterns for deploying Network Firewall in this other blog post.
Contenus pertinents
- demandé il y a un an
- demandé il y a 6 mois
- demandé il y a 10 mois
AWS OFFICIELA mis à jour il y a 2 ans- AWS OFFICIELA mis à jour il y a un an
- AWS OFFICIELA mis à jour il y a un an
Follow-up question, You said you might use Network Firewall to inspect the traffic once it leaves the VPN termination instance, what does it mean ? are you referring return traffic to internet ?
I'm referring to traffic between the VPN termination instance and whatever the traffic is going to/from within AWS.