AWS Network Firewall Managed Signatures

Hi,

I am trying to configure statefull rule using the new AWS network firewall managed signatures . I am seeing that firewall is detecting some malicious traffic but its not blocked. Any idea how i can change the action to block or drop?

Thanks

주제

보안, 신원 및 규정 준수

태그

AWS 네트워크 방화벽

언어

English

AWS-User9010

질문됨 2년 전383회 조회

1개 답변

최신
최다 투표
가장 많은 댓글

It sounds like your default action for the managed rule group is set to alert. You can set it to drop to block the traffic: https://docs.aws.amazon.com/network-firewall/latest/developerguide/nwfw-using-managed-rule-groups.html

You may also need to check out your rule group ordering: https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html#suricata-default-rule-evaluation-order

that_mike

답변함 2년 전

AWS-User9010
2년 전
0 thanks mike for helping me out. How can i set them to drop? I have disabled the run in alert mode. I don't see any other option

AWS Network Firewall Managed Signatures

관련 콘텐츠