
AWS Network Firewall managed rules, including AWS-provided and partner solutions like Fortinet, enable SAP customers to protect their critical systems against known and emerging threats through pre-configured, regularly updated firewall rules without requiring custom rule development.


<div><p>This article explains how AWS Network Firewall managed rules protect SAP deployments on AWS, covering AWS-managed and partner-provided security rules.</p><ul><li>AWS Managed Rules provide ready-to-use, automatically updated firewall rules at no cost</li><li>Domain List Rules block traffic to malware, botnet, and compromised domains</li><li>Threat Signature Rules detect botnets, DoS attacks, exploits, malware, phishing, and web attacks</li><li>Custom Firewall Rules use stateless and stateful engines with Suricata-compatible rules</li><li>Fortinet Managed IPS Rules offer 60+ SAP-specific signatures for advanced threat prevention</li><li>Test rules in staging environment first to avoid blocking legitimate SAP traffic</li><li>Combine AWS WAF, Network Firewall, and security groups based on use case</li><li>Avoid inspecting traffic between SAP application and database components for performance</li></ul><p>AWS Network Firewall with managed rules provides layered protection for SAP systems against known and emerging threats while reducing implementation overhead.</p></div>


Related articles