AWS Network Firewall – New Managed Firewall Service in VPC
1–10 of 29 posts
Re: AWS Network Firewall – New Managed Firewall Service in VPC
#2We've been waiting for this one for about a year so we can get rid of some of our home grown solutions. Can't wait to implement and see what it can do. Curious to see what other customers think.
Re: AWS Network Firewall – New Managed Firewall Service in VPC
#3Almost $.40/hour, you need one per AZ, and it’s $.06/GB for network traffic. I’m happy to see the capability (mainly outbound URL filtering), but this looks like it’s going to be a hard sell to my managers.
You’re probably looking at a grand per month per account. On the plus side, they don’t double charge for NAT gateway traffic.
Re: AWS Network Firewall – New Managed Firewall Service in VPC
#4It kinda amazes me how they can deploy this major topology change with no network issues.
Re: AWS Network Firewall – New Managed Firewall Service in VPC
#5I wonder if they had to build the new Gateway Load Balancer in their implementation of this, so they decided to turn it into a product as well.
Re: AWS Network Firewall – New Managed Firewall Service in VPC
#6Almost $.40/hour, you need one per AZ, and it’s $.06/GB for network traffic. I’m happy to see the capability (mainly outbound URL filtering), but this looks like it’s going to be a hard sell to my managers. You’re probably looking at a grand per month per account. On the plus side, they don’t double charge for NAT gateway traffic.
For large enough enterprises, $1k a month is a rounding error.
Also, depending on how you're provisioning accounts and laying out your networking, you may not want to be sticking one of these in every VPC. There's no one-size-fits-all, but in many cases a transit VPC that handles the egress centrally would make more sense.
Re: AWS Network Firewall – New Managed Firewall Service in VPC
#7We've been waiting for this one for about a year so we can get rid of some of our home grown solutions. Can't wait to implement and see what it can do. Curious to see what other customers think.
I feel exactly the same. I can't wait to try it out. Now, I just need Terraform to add support...
Re: AWS Network Firewall – New Managed Firewall Service in VPC
#8Almost $.40/hour, you need one per AZ, and it’s $.06/GB for network traffic. I’m happy to see the capability (mainly outbound URL filtering), but this looks like it’s going to be a hard sell to my managers. You’re probably looking at a grand per month per account. On the plus side, they don’t double charge for NAT gateway traffic.
For folks that are deploying ec2-based firewalls already, the hourly cost is flat.
Usage price seems high at first but honestly you're paying a premium for any commercial firewall product. Palo Altos, for example, are $1.38/hr if you license them through the marketplace (above the instance costs). That breaks even at 21GB/hr, so you're likely to pay a lot more for the AWS product for anything in production (possibly by an order of magnitude).
Re: AWS Network Firewall – New Managed Firewall Service in VPC
#9Looking at the firewall vendors that are listed as official partners here, this looks like another pretty security-lite, native product for companies that are just looking to check a compliance box and not a real enterprise offering.
Similar to the AWS WAF, this seems geared for a smaller team that can't afford the time to deploy and manage virtual security appliances.
It looks like they're following the same formula as the WAF on this one by letting partners provide rulesets.
I'm waiting for AWS to really flesh these products out and eat all these "partners" lunches.
Re: AWS Network Firewall – New Managed Firewall Service in VPC
#10I wonder if they had to build the new Gateway Load Balancer in their implementation of this, so they decided to turn it into a product as well.
It was a key dependency for this and they also broke it out into a separate product.