Essential Network Security Controls for AWS Network Firewall

Leverage the power of AWS Network Firewall with Fortinet Managed Intrusion Prevention System (IPS) Rules for AWS Network Firewall based on the latest threat information from FortiGuard Labs. FortiGuard Labs is one of the industry’s largest threat intelligence and research organizations. Its global team of threat hunters, researchers, analysts, engineers, and data scientist use advanced artificial intelligence tools to ingest over 200 different information feeds and over 100 billion security events every day to generate the actionable intelligence you need to face an ever-evolving threat landscape.

Fortinet Managed IPS Rules for AWS Network Firewall is based on our FortiGate IPS Signatures and provide AWS Network Firewall compatible rule-groups for 6 categories of threats and vulnerabilities for common AWS workload use-cases. These rule groups provide IPS inspection for:

• Application, Network, and IoT Vulnerabilities
• Malware Detection
• Server and Operating System Vulnerabilities
• Web Client Vulnerabilities
• Web Application Vulnerabilities
• Web Server Vulnerabilities

This enterprise subscription is for users and security engineers supporting multiple AWS Network Firewalls across regions, with multiple VPC’s and workloads. Each enterprise subscription provides complete and unlimited use of these rules, within 2 account-regions. This deployment model offers great value for organizations with a large AWS footprint, who want enhanced coverage for their AWS Network Firewall deployment while offering consistent pricing, regardless of application bandwidth.

Cost

Get Fortinet Managed Rules coverage at just $2.85 per hour, per account-region. This subscription is available as an annual contract only, with volume-based discounts available. Each subscription includes coverage for 2 account-regions. An account-region is defined as use of IPS Rules in a region, for a specific AWS account. Each subscription includes provisioning, technical assistance, and supports an unlimited number of VPCs and Network Firewalls within the defined account-region.

Subscription examples

1. One account covering US-East-1, US-East-2, US-West-1, US-West-2. This scenario utilizes 4 Account-regions and would require 2 subscriptions for complete coverage.
2. Coverage for US-East-1 and US-West-2 in five separate accounts. This scenario utilizes 10 account-regions and would require 5 subscriptions for complete coverage.
3. Three accounts, each with firewall deployments in US-East-1, plus 1 account also supporting US-East-2 and US-West-2. This scenario covers 5 account-regions and would require 3 subscriptions for complete coverage (note that 1 account-region of enablement would be available for future deployments).