Reintroducing Network Firewall Proxy for Secure Egress Connectivity

This article announces AWS Network Firewall's explicit proxy capability through a new no-source-preservation deployment mode, integrating proxy functionality directly into Network Firewall.

• Unified security policy for both transparent firewalling and explicit proxy use cases
• Firewall attached to NAT Gateway masks source IP and communicates on client's behalf
• Supports full Network Firewall capabilities: stateful/stateless rules, IDS/IPS, managed rule groups
• Includes advanced features like TLS inspection, container attribute-based rules, and geographic IP filtering
• Four-step setup: create policy, deploy firewall in no-source-preservation mode, configure listeners, direct traffic to firewall FQDN
• Enables egress protection from local VPC, remote VPC, or on-premises sources

Organizations can now use a single Network Firewall service with one policy model for comprehensive egress security without managing separate proxy products.