AWS Network Firewall Now Supports Stateful Rule Hit Counts

AWS Network Firewall now provides rule hit counts for stateful rules, giving visibility into how often each rule matches network traffic.

• Accelerate incident response by detecting which rules triggered
• Identify policy blind spots including shadow, redundant, and obsolete rules
• Validate policy changes by confirming newly deployed rules match intended traffic
• Enabled by default for custom and managed rule groups
• Metrics refresh at configurable intervals as low as 5 minutes
• Available at no additional charge in all supported AWS Regions except Middle East

Rule hit counts transform firewall activity into actionable intelligence for network security management.