
    AWS Network Firewall introduces active threat defense, enabling automatic blocking of suspicious network traffic using real-time AWS threat intelligence across VPC workloads.


<div>
<p>
AWS Network Firewall has launched a new active threat defense feature that enhances security for Amazon VPC workloads using AWS threat intelligence.
</p>
<ul>
<li>Automatically blocks suspicious network traffic like command-and-control communication</li>
<li>Continuously updates rules based on current threat activities</li>
<li>Provides improved visibility into threat protection</li>
<li>Integrates with Amazon GuardDuty for threat intelligence</li>
<li>Available in all AWS Regions where Network Firewall is supported</li>
</ul>
<p>
The feature enables automated, intelligence-driven protection by using managed rule groups that can identify and block malicious domains and embedded URLs in real-time.
</p>
</div>


AWS Network Firewall launches support for active threat defense

Related articles

Related articles

Nov 18
2025
Active threat defense now enabled by default in AWS Network Firewall

Jan 8
2026
Real-time malware defense: Leveraging AWS Network Firewall active threat defense

Sep 17
2025
AWS Network Firewall enhances console, monitoring, and security features

Mar 27
2025
AWS Network Firewall adds pass action rule alerts and JA4 filtering