AWS Network Firewall now supports Route 53 Resolved IP Validation to extend domain-based filtering beyond HTTP/HTTPS to protocols like SFTP and SSH.

<div><p>AWS Network Firewall now supports Route 53 Resolved IP Validation, extending domain-based filtering to protocols beyond HTTP/HTTPS such as SFTP and SSH.</p><ul><li>Validates destination IP addresses were resolved through VPC's Route 53 VPC Resolver</li><li>Enables domain filtering rules for any protocol, not just HTTP/HTTPS</li><li>Prevents SNI spoofing by validating IPs against resolved domains</li><li>Enforces consistent domain-based security policies across all outbound traffic types</li><li>Available in all AWS commercial regions at no additional charge</li></ul><p>This capability closes security gaps and simplifies protection against domain-based attacks across diverse protocols.</p></div>


AWS Network Firewall now supports Route 53 Resolved IP Validation

Related articles