AWS Network Firewall
AWS Network Firewall: A cloud-managed firewall for inspecting and filtering traffic across Amazon VPC environments. Ranked #11 of 36 in Network Firewall Software by our editors (9.0/10); pricing: Paid; best for AWS-native network security at elastic scale.
At a glance
- Editor score9.0 / 10
- PricingPaid
- Best forAWS-native network security at elastic scale
- Free planNo
- Paid from$0.07/GB usage-based
- Deployment modelCloud
- Facts checked21 Sep 2026
Where it wins
- Stateful and stateless inspection with Suricata-compatible IPS rules
- TLS, domain, geographic, and deep packet inspection controls
- Centralized management across AWS accounts and VPCs
Where it doesn't
- Usage-based pricing can vary with endpoint hours and traffic volume
- Designed for Amazon VPC and AWS ecosystem deployments
- No free plan is available
Our verdict on AWS Network Firewall
AWS Network Firewall is a managed, stateful network firewall and intrusion detection and prevention service for Amazon VPC. It is suited to organizations protecting cloud workloads and networks across one or multiple AWS accounts and VPCs. Traffic filtering covers VPC perimeters, internet gateways, NAT gateways, VPN, and Direct Connect paths. The service supports both stateful and stateless inspection, Suricata-compatible intrusion prevention rules, deep packet inspection, domain filtering, geographic filtering, and inbound and outbound TLS inspection.
Pricing uses separate usage measures rather than named subscription tiers. The published endpoint rate starts at $0.395 per firewall endpoint per hour for a managed firewall endpoint. Network traffic processing is charged at $0.065 per GB processed. This structure makes endpoint count and traffic volume central to cost planning, particularly for environments with multiple VPCs or accounts. There is no free plan, and the listed starting endpoint price is a US East (N. Virginia) example.
Its strongest fit is an AWS-centered network architecture that benefits from centralized control and native connections to Amazon VPC, AWS Firewall Manager, AWS Transit Gateway, AWS Certificate Manager, AWS CloudFormation, and the AWS Network Firewall API. Automatic scaling follows network traffic, while logging and monitoring integrations support operational visibility. Choose it when inspection, IPS rules, TLS inspection, and AWS-wide management are priorities. Consider another option if your network is not centered on Amazon VPC or if predictable subscription pricing is more important than usage-based billing.
Your product? Our editors can test AWS Network Firewall in depth and publish a review, labelled as paid · from $149/mo →
AWS Network Firewall pricing
All 2 AWS Network Firewall plans and prices →
AWS Network Firewall fact sheet
| Free plan | No |
|---|---|
| Paid from | $0.07/GB usage-based |
| Deployment model | Cloud |
| Intrusion prevention | Yes |
| SSL inspection | Yes |
| Site-to-site VPN | Yes |
| Firewall throughput | 100 Gbps |
| Concurrent connections | Not verified |
| Deployment | Cloud |
| Platforms | Web |
| Support | Community, Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 6 integrations: Amazon VPC, AWS Firewall Manager, AWS Transit Gateway, AWS Certificate Manager, AWS CloudFormation, AWS Network Firewall API |
| Pricing | Paid (source) |
| Website | aws.amazon.com |
| Facts checked | 21 Sep 2026 |
AWS Network Firewall integrations
AWS Network Firewall lists 6 integrations on its own site.
- Amazon VPC
- AWS Firewall Manager
- AWS Transit Gateway
- AWS Certificate Manager
- AWS CloudFormation
- AWS Network Firewall API
Alternatives to AWS Network Firewall
- Palo Alto Networks Next-Generation FirewallAn enterprise firewall family combining application control, threat prevention and centralized management.9.4
- FortiGateA broad hybrid firewall platform for enterprises that need integrated network security and automation.9.3
- Check Point Quantum Security GatewayA broad network security platform for enterprises that need clustered, policy-driven gateways.9.2
See all AWS Network Firewall alternatives →
Also Ranked In
AWS Network Firewall is ranked in 4 of our directories.
Used AWS Network Firewall? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used AWS Network Firewall for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
AWS Network Firewall is listed in our Network Firewall Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/aws-network-firewall/"><img src="https://www.itechguides.com/best/badge/aws-network-firewall.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update