G2

Atharva P.

Cloud BI Engineer

Enterprise (> 1000 emp.)

7/28/2026

"Centralized, Appliance-Free VPC Security with Flexible Stateful and Stateless Inspection"

4/5

What do you like best about AWS Network Firewall?

The biggest advantage of AWS Network Firewall is that it delivers centralized, network-level security for Amazon VPCs without forcing organizations to deploy and manage firewall appliances. It supports both stateless and stateful inspection, which lets teams filter traffic using IP addresses, ports, protocols, domains, and application-layer rules.

I also appreciate that firewall policies can be applied consistently across multiple VPCs, while still integrating smoothly with existing AWS networking services. Review collected by and hosted on G2.com.

What do you dislike about AWS Network Firewall?

Designing firewall rule groups and routing traffic through firewall endpoints requires a solid understanding of VPC networking. The initial deployment can feel more involved than using traditional security groups, since you need to configure subnet routing and inspection paths correctly to ensure traffic is inspected as intended. Review collected by and hosted on G2.com.

What problems is AWS Network Firewall solving and how is that benefiting you?

AWS Network Firewall enables centralized inspection of both east-west and north-south network traffic across AWS environments.

Example:

In a multi-tier application hosted across multiple private subnets, AWS Network Firewall was deployed to inspect outbound internet traffic as well as inter-subnet communication. Stateful rule groups were used to block unauthorized protocols, limit outbound access to approved domains, and prevent traffic from reaching known malicious IP addresses. At the same time, legitimate application traffic continued to flow normally, while security teams retained centralized control over network policies.

Overall, this approach strengthened the security posture and reduced reliance on host-level firewall configurations. Review collected by and hosted on G2.com.