Active threat defense now enabled by default in AWS Network Firewall

This article announces that AWS Network Firewall now enables active threat defense by default in alert mode for new firewall policies.

• Active threat defense provides automated, intelligence-driven protection against dynamic threats
• Default alert mode offers visibility into threat activity and indicator groups
• Users can switch to block mode to prevent suspicious traffic automatically
• Blocks command-and-control communication, embedded URLs, and malicious domains
• AWS verifies threat indicators to minimize false positives
• Available in all AWS regions including GovCloud and China

AWS Network Firewall now provides default threat protection with flexible configuration options for enhanced security.